last executing test programs: 8m30.224569465s ago: executing program 4 (id=242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)=""/94, 0x5e}], 0x1}, 0x10081) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@private0, 0x10, 0xc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xfffffffffffffffe, 0x0, 0x4000000000000001, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000002}, 0x400, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x4, 0x3, 0xff}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x0, 0x5, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x2, 0x2001, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x15, 0x2, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x802100}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x5393, &(0x7f00000001c0)=ANY=[]) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000ffffffff000000000000000000000000fc020000000000000000000000000001200100000000000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8m29.303482428s ago: executing program 4 (id=248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x800}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}]}], {0x14}}, 0xb0}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="09015013fb54b8db50fafd11214c02fe9b6e28dd040680809d010203010902120001017600070924c107000206000ac2f008094592"], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x800}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}]}], {0x14}}, 0xb0}}, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="09015013fb54b8db50fafd11214c02fe9b6e28dd040680809d010203010902120001017600070924c107000206000ac2f008094592"], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) (async) 8m25.875098s ago: executing program 4 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e4f, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x105900000000, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000) r4 = socket(0x1e, 0x4, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r6 = syz_clone(0x1103280, &(0x7f0000000200)="215cd8", 0x3, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)="92c1a885910df60ab19d94b72b65c3ed6f28ef5a9dfb4b33012da09d3c61d91d8fc13be74890492b3f1a18c6d575ef26e40c8fe4dfd7a881cd44c054e5190a5dba7db03253d7a32b3937fc5802d7142236c8cda3f7486f018237801b62498717e039c14abed21d2131b6ef2cf2d6b2dee2684080ce5a6a1d5ad4dab84d05c10b72080fafe2d0976d123a96cf12b17fc67b73fe1f0132f761c1ee3fce975d2ace852789330d2a6c602662bbecf524b0ff3c8ae6f7798ab6ddb00a3bca94a2630ea8c970231941d3de64e7") ptrace$getsig(0x4202, r6, 0x7, &(0x7f00000005c0)) keyctl$read(0xb, r5, &(0x7f00000000c0)=""/209, 0xd1) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) pivot_root(&(0x7f00000001c0)='.\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x4, 0xfff9, 0x0, 0x9}, 'syz0\x00', 0x2f}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x11a) sendmsg$inet(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x24, 0xfffffffffffffffe) keyctl$chown(0x4, r8, 0xee01, 0xffffffffffffffff) 8m24.443586931s ago: executing program 4 (id=260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x0, 0x4091) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRES32=r1], 0x24, 0x0) mount$bind(&(0x7f0000000340)='./bus\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) rmdir(&(0x7f0000000380)='./file0/../file0\x00') (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r4 = open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x20002f, 0x9}) fcntl$lock(r5, 0x6, &(0x7f00000007c0)={0x0, 0x2, 0x37, 0x1}) 8m23.991772325s ago: executing program 4 (id=261): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000440)={0x0, @bt={0x1, 0x7484, 0x1, 0x1, 0x1200000000000000, 0x5, 0xffffffff, 0x4, 0x5, 0x7, 0x5, 0x2, 0x298, 0x1000, 0x1, 0x2, {}, 0x80, 0x2}}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000140)='net/ip6_mr_vif\x00') write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100ff8000", 0x1c) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f004, 0x5}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendto(r4, 0x0, 0x0, 0x4000, &(0x7f00000012c0)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipmr_newroute={0x1c, 0x18, 0x200, 0x70bd2c, 0x5, {0x80, 0x80, 0x0, 0x10, 0xff, 0x4, 0xff, 0x1, 0x100}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc4810) 8m23.557399418s ago: executing program 4 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000000080)=ANY=[], 0x0) 8m22.826455631s ago: executing program 32 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000000080)=ANY=[], 0x0) 29.323867234s ago: executing program 2 (id=1768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x5, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x8000, 0x7, 0x7fffffff, 0x9c17}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'gretap0\x00', 0x0, 0x80, 0x7800, 0xf224, 0x1, {{0xe, 0x4, 0x0, 0x8, 0x38, 0xff, 0x0, 0xee, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, {[@timestamp_addr={0x44, 0xc, 0x12, 0x1, 0xd, [{@broadcast, 0xfffffffb}]}, @timestamp={0x44, 0x18, 0x62, 0x0, 0xe, [0x10000, 0x1000, 0x9, 0x3, 0x40]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x1, 0x10000, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x0, 0x3f}}) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000000b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000d00)={0x29c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000004) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="4400000040000701feffffff00000000017c00000400d700280001800600060086ddffff08001100", @ANYRES32=0x0, @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r4) io_setup(0x7e, &(0x7f0000000080)) 27.230548804s ago: executing program 2 (id=1780): r0 = socket(0x1, 0x1, 0x0) close(r0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x353200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r1, 0xaeb, 0x1) getdents64(r1, 0x0, 0x4f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffb7feff1eff0086dd674a9e6c00442f8200000000000000000000000000000000ff02000000000000000000000000000104206558000000030c0008000c0086dd88ca88be1200000415030735010000000000c289080022"], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) syz_open_dev$vim2m(0x0, 0x3, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x7) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000e0381, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) 26.135945071s ago: executing program 2 (id=1786): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x6, &(0x7f0000000300)={0x1, 0x401}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x20}]}}]}, 0x3c}}, 0x0) 25.766726541s ago: executing program 2 (id=1791): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaa000000000000000000000000000065d204cc3fd98cec8bcbb28b7908c48fc74cb313bd18915a24dbb95c8b9dc396125fb893ca3d716befcd4a9525a689c6e1c5a3838141b81b3c950bc0225e2176c769239b7be2ee73283df18bd28b33ca8e8bcea20967e74184b06dc7539f33ad6e43db470438ea9c26ea036831f0f2e4ea8c408b3c9fed84ddc6afeb3c4c23c8b34532b5810901f84aa64f0c4b5f9551cf2805a0960d8ed306"], 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) setfsuid(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0xf6) fcntl$notify(r3, 0x402, 0x1a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x1, r0, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0xa0, 0x24, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0x10, 0xfff3}, {0xb, 0xd}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x8, 0x8, 0x1020000, 0x9}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x9, 0x10001, 0x1d0, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf7, '\x00', 0x3, 0x7, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7e, '\x00', 0x1d, 0xe25, 0x40, 0x4}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_mq={0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000000)={0x8, 0x8000, 0xc0}) socket$netlink(0x10, 0x3, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x2, 0x8, 0x8001, 0x4000, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xb}, 0x50) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x2010412, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r8, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x42, 0x0, 0x6, {0x7, 0x29, 0x7, 0xc00500, 0x3, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.647311092s ago: executing program 2 (id=1793): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x0, &(0x7f0000000200)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="bcd228ecca653f4cdbdf1556949ec29a2cfcb0056801ca62fb80ba6794262c35a62494528637ed6e27e47992c17f140310ce3620caabcfc8cf93dfb837fdf6e1be3758", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600010000000800030001000000"], 0x34}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2240}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r11, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0xc000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000500)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000040)="2b06e6c21967ed6034a02f2a11539741cc9fe8777cf4ff72fcb50c558d1c25aa99f04873836df8ce533520ba4c44d009842dd5fdd0d72dedf2", 0x39}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r10, 0xffffffffffffffff, r2, r5, r2, r10, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x68, 0x50}}], 0x1, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x3dc2, 0x6, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0x6, 0x1db, 0x2, 0x7, 0x102, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]}) 24.332601966s ago: executing program 2 (id=1795): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e0023000069"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0c00018008000100000003000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x20, 0xd, 0x36, {0x36, 0x37, "a2aa8d3e95bbbcf1f64181821b6317ea50374a1c894e4aaed959d9593221bc135f896b5b08414334414d166317e60ac5c846e8f1"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3cd5}}, &(0x7f0000000180)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0xc, 0x7, 0x3a7, [0x1fe00ff]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "b19a33acebeaaafdbc9ddd1f97221742"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x40, 0x1, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x70, 0x1, 0x5, 0xff00, 0x401, [0xf]}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0xbf, 0x9, "2c9ce6f9", "88db5a9f"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x91, 0x80, 0x4, 0x71, 0x80, 0x9, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x20, 0xf, 0xbb, "92a7fae75de30aac2e4a1d9a190f555a41610e8aba396828917b5ea9ac64191b7a6aac03df3e0a7339d945f47633422edb37be477c0dee19fd36363e40a09cc8b3f81faff68e5d12846e384c6d3b25011ffa96a654193eac0facc6ffcabf72bfc10fc040a2ddf3dfc08067d583adb5079b80f67255023cfd54e5e133d31d2472cf24df3787d4f70d4e2c1d6ebda363ab07275a4ebb989e3db1fc0cd54d9a5a5455c8f77d6f9d7cba596a7de5747683c82da9c32d2199154e1fb392"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x400, 0x20, [0xf000]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xeb4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0xc4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "0e21"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xb}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "b40c"}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x4}}) 23.717736589s ago: executing program 33 (id=1795): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e0023000069"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0c00018008000100000003000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x20, 0xd, 0x36, {0x36, 0x37, "a2aa8d3e95bbbcf1f64181821b6317ea50374a1c894e4aaed959d9593221bc135f896b5b08414334414d166317e60ac5c846e8f1"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3cd5}}, &(0x7f0000000180)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0xc, 0x7, 0x3a7, [0x1fe00ff]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "b19a33acebeaaafdbc9ddd1f97221742"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x40, 0x1, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x70, 0x1, 0x5, 0xff00, 0x401, [0xf]}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0xbf, 0x9, "2c9ce6f9", "88db5a9f"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x91, 0x80, 0x4, 0x71, 0x80, 0x9, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x20, 0xf, 0xbb, "92a7fae75de30aac2e4a1d9a190f555a41610e8aba396828917b5ea9ac64191b7a6aac03df3e0a7339d945f47633422edb37be477c0dee19fd36363e40a09cc8b3f81faff68e5d12846e384c6d3b25011ffa96a654193eac0facc6ffcabf72bfc10fc040a2ddf3dfc08067d583adb5079b80f67255023cfd54e5e133d31d2472cf24df3787d4f70d4e2c1d6ebda363ab07275a4ebb989e3db1fc0cd54d9a5a5455c8f77d6f9d7cba596a7de5747683c82da9c32d2199154e1fb392"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x400, 0x20, [0xf000]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xeb4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0xc4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "0e21"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xb}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "b40c"}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x4}}) 9.920065996s ago: executing program 0 (id=1837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') chdir(&(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 9.858391976s ago: executing program 3 (id=1839): socket$inet(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1fff}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x2000000) 9.856854717s ago: executing program 5 (id=1840): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000004c0), 0x0, 0xa2200) ioctl$NBD_DISCONNECT(r1, 0xab08) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x9000, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0xf, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xb, 0x9, 0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x4, 0x1, 0x8, 0x2, 0x0, 0xff, 0x1}, {0x30000, 0x100000, 0x9, 0x4, 0xc, 0x0, 0xa1, 0x2, 0x0, 0x0, 0xb}, {0x6000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0xd301, 0xe000, [0x80000001, 0x0, 0x1, 0x1]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) io_uring_enter(r4, 0x2403, 0x63df, 0x14, &(0x7f0000000500)={[0x7]}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000000d0a010400000000000000000100000808000440000000000900000400007a3100000000090005000000000000000000090001000002966bf5915a26c2b963d9c610789ad5f9294cd1c06d9813efc2fffffffffeffffff1f4a33e1b44a73b7a7239e5cfdeb3a7ddb71826838e463013421eb9cc14012b0e5e5298a3e6fe1c4232068840bdb3ff739e0cc2b4386af81f60255842f23b7d719922286cafc29d89a178f975f0200000086ec000000000000000000000000000019292611b6f06729b969ac0c75ceb892fd745e16060a0e7b353644089d9f9e2bb4b73dbca1585816040fff67897d20134ba97bc91eb756817b96783b454845934bb6a0330028d74abd4e45c897fc5fb1cec95784152b7452bc8d49785ff2e8ba"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x7c408223ef12d628) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) 9.856507722s ago: executing program 1 (id=1841): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20040110) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050025bd7000fdffffff4400000008000300", @ANYRES32=r5, @ANYBLOB="1000700005000100000000000400000a001800030303030303000000"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x48, 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='macvlan0\x00'}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000002280)='ext4\x00', 0x1002080, 0x0) 8.140716821s ago: executing program 0 (id=1842): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {0x20}, {0x28, 0x0, 0x81, 0x1}]}) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e20, 0x10000, @loopback, 0x9}}, 0x3ff, 0x2, 0x9, 0x9, 0x44, 0x4, 0x5}, 0x9c) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000808) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002ebd7000fbdbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="b4b268ab206e10eb8046302f0e6f5481475bc2f700672fe280c6d85d365599574619879d4dc4085d0c3e87d0feb007e8bf51ab26f8ab838cb71556667708966fe23d8dd8dde2761a5e71ab61b7ecc7e05fcbaca0fd533de3ffdfbc2cbd84a68dd93131b52afee1504ae2aa0e7f840483f8b4c79d9bcf10a07269efc33ee04d"], 0x1c}, 0x1, 0x0, 0x0, 0x818}, 0x44000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) 8.140414948s ago: executing program 1 (id=1843): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) io_setup(0x8, &(0x7f0000000600)) 8.13954655s ago: executing program 3 (id=1844): socket(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x70}}, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000040000000400000004000000000000", @ANYRES32, @ANYBLOB="0000000000000000800000000000000000471911", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) 8.138506418s ago: executing program 5 (id=1845): connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="88aaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e220c55452065b23271392043575f3cc88da4b8fd0047a7ab271916a3197e48b7b7a17ba580fd0f87f1af675c7c9fe9c8509a8564f9eaf93a0d63ad99661371753cf708b392e9bf12c5c88b4b99ba13e7609cc0d646f05f46c6dfe2b85bbd1b6db9f1afaf07242f16aa9da5ffd0dcea5ff1db96b47f12b33edc17b7f25f916b9ec969892f5c3737cc0043e9f0a02af234555ddd01b3", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5095000090780000"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setrlimit(0x6, &(0x7f0000000040)={0x0, 0xff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xdd72, 0x10}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20040881}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3, 0x2, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6.240012892s ago: executing program 0 (id=1846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x13f, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 6.239321059s ago: executing program 1 (id=1847): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x40200, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) getsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f00000004c0), &(0x7f0000000240)=0xfffffffffffffe8f) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="f8000000020000000600000045630a3a27b800591c3df416e18aab8a25b25b2cc28ddaacfb7ef83ab0c9657222c4c66013bc348ee600a6f83e31434693aa8ede439302c8beed49b0503cf1e03e5413e9ae58861cafd0f8603609154d0820b90b1329acc318f82db3be28ccc2a07c7c7c028f7938214b369bd1d6db2351021c1581a56170f3415898bc18860fd0dc40dffa8c59f32df6bf0433dbc4cd2163e8b3293b3c3b8a0eb99287d70de983e166aabc5a3f0ddd8e360f86256950389a721bace5d29195988084cd9c85a28874c794c10da0ff33d7c91913a551506948416d25e7d839eaf8cd901276a4a128787958f9531a6ab686728a4e08a07401f2e34b1e904971"]) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r7, &(0x7f0000000300)={[0x8000000000090]}, 0x8, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) 6.239138728s ago: executing program 3 (id=1848): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x814) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x6, &(0x7f0000000300)={0x1, 0x401}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x20}]}}]}, 0x3c}}, 0x0) 6.1761488s ago: executing program 5 (id=1849): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000a00000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 4.248410799s ago: executing program 0 (id=1850): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0a, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20004000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2100000000ffffffff0100000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="0100000003000000000000000000000008000300112000"], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f00000001c0)=0x3, 0x4) 4.246574329s ago: executing program 1 (id=1851): socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x101800, 0x0) r3 = getpgrp(0xffffffffffffffff) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0xcc88, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_pidfd_open(r5, 0x0) r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xffffffffffffffff) r9 = fsopen(&(0x7f00000001c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x399040) capset(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x181801, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r11, 0xf504, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001200e33428bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="001000000000000008001bf2", @ANYRES32=r8, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24004800}, 0x14) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x280, 0x3, 0x3432564e, 0x6, 0x0, 0x0, 0x8, 0xfeedcafe, 0x2, 0x3, 0x1}}) 4.245712162s ago: executing program 3 (id=1852): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x14, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r2, 0x2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000640)=0x8001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0xa}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 4.245462877s ago: executing program 5 (id=1853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') chdir(&(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 2.182607469s ago: executing program 0 (id=1854): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000440005002001000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0x4, 0x1}, 0xe) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) poll(&(0x7f0000000140)=[{r4, 0x14}], 0x1, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x20, 0x7f, 0x6, 0x7fffffff}, {0x6, 0x3, 0xa1, 0x401}]}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 2.168215469s ago: executing program 1 (id=1855): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {0x20}, {0x28, 0x0, 0x81, 0x1}]}) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e20, 0x10000, @loopback, 0x9}}, 0x3ff, 0x2, 0x9, 0x9, 0x44, 0x4, 0x5}, 0x9c) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000808) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002ebd7000fbdbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="b4b268ab206e10eb8046302f0e6f5481475bc2f700672fe280c6d85d365599574619879d4dc4085d0c3e87d0feb007e8bf51ab26f8ab838cb71556667708966fe23d8dd8dde2761a5e71ab61b7ecc7e05fcbaca0fd533de3ffdfbc2cbd84a68dd93131b52afee1504ae2aa0e7f840483f8b4c79d9bcf10a07269efc33ee04d"], 0x1c}, 0x1, 0x0, 0x0, 0x818}, 0x44000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) 2.167663579s ago: executing program 3 (id=1856): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 2.163048077s ago: executing program 5 (id=1857): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) (fail_nth: 1) 5.304215ms ago: executing program 0 (id=1858): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) sendmsg$nl_netfilter(r3, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYBLOB="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"], 0x4f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x7, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_open_dev$video(&(0x7f0000000140), 0x100000001, 0x2003) 3.29084ms ago: executing program 1 (id=1859): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) write$binfmt_misc(r5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r10, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 258.238µs ago: executing program 3 (id=1860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e00000000000000fdff07000800000000000000d9641d95043981393f5932a500599c6e6634b37047ea1f6561f0a6bd49425060ac1cf68140bdc88afb91ae630e48e2a2db6abb31288857efdc4f206040a9530afd36dc8c187763d59aa41cb756723a1426a9586212dafe71957d24b8abc59ca477e679e58d1180cca16e5100dd40382af2f18d27a4f14376643830b87fe15599415f1215dbc836574a37bb0cfbf51809ffa3b5a560", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) 0s ago: executing program 5 (id=1861): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x814) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x6, &(0x7f0000000300)={0x1, 0x401}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x20}]}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): tlink: 64 bytes leftover after parsing attributes in process `syz.3.816'. [ 344.148397][ T30] audit: type=1400 audit(2000000000.000:784): avc: denied { map } for pid=9235 comm="syz.3.816" path="socket:[22997]" dev="sockfs" ino=22997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 344.180541][ T30] audit: type=1400 audit(2000000000.000:785): avc: denied { accept } for pid=9235 comm="syz.3.816" path="socket:[22997]" dev="sockfs" ino=22997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 344.772085][ T5806] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 344.907922][ T9252] input: syz0 as /devices/virtual/input/input20 [ 345.130010][ T5806] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 345.274372][ T5806] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 345.317962][ T5806] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 345.365476][ T30] audit: type=1400 audit(2000000001.132:786): avc: denied { connect } for pid=9255 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 345.370714][ T5806] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 345.549838][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.693585][ T5806] usb 4-1: Product: syz [ 345.712495][ T5806] usb 4-1: Manufacturer: syz [ 345.828186][ T30] audit: type=1400 audit(2000000001.525:787): avc: denied { watch watch_reads } for pid=9257 comm="syz.5.822" path="pipe:[12685]" dev="pipefs" ino=12685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 346.185837][ T5806] usb 4-1: SerialNumber: syz [ 346.199901][ T5806] usb 4-1: config 0 descriptor?? [ 346.212333][ T9240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 346.225452][ T9240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 346.242887][ T5806] usb 4-1: ucan: probing device on interface #0 [ 347.044070][ T9240] Malformed UNC in devname [ 347.044070][ T9240] [ 347.059226][ T9240] CIFS: VFS: Malformed UNC in devname [ 347.088126][ T9240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65530 sclass=netlink_route_socket pid=9240 comm=syz.3.817 [ 347.142553][ T5806] usb 4-1: ucan: failed to retrieve device info [ 347.152880][ T5806] usb 4-1: ucan: probe failed; try to update the device firmware [ 347.357831][ T5806] usb 4-1: USB disconnect, device number 26 [ 348.178668][ T792] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 348.217998][ T30] audit: type=1400 audit(2000000003.799:788): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 348.376511][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 349.260289][ T792] usb 6-1: Using ep0 maxpacket: 16 [ 349.333199][ T792] usb 6-1: config 0 has an invalid interface number: 157 but max is 1 [ 349.398026][ T792] usb 6-1: config 0 has an invalid interface number: 69 but max is 1 [ 349.474153][ T792] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 349.527761][ T792] usb 6-1: config 0 has an invalid interface number: 84 but max is 1 [ 349.580173][ T792] usb 6-1: config 0 has an invalid interface number: 152 but max is 1 [ 349.611034][ T792] usb 6-1: config 0 has 4 interfaces, different from the descriptor's value: 2 [ 349.630815][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 349.643005][ T30] audit: type=1400 audit(2000000005.137:789): avc: denied { listen } for pid=9304 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 349.662914][ T792] usb 6-1: config 0 has no interface number 0 [ 349.676992][ T792] usb 6-1: config 0 has no interface number 1 [ 349.684027][ T792] usb 6-1: config 0 has no interface number 2 [ 349.690630][ T792] usb 6-1: config 0 has no interface number 3 [ 349.708634][ T30] audit: type=1400 audit(2000000005.137:790): avc: denied { accept } for pid=9304 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 349.710798][ T9311] Cannot find set identified by id 0 to match [ 349.729709][ T792] usb 6-1: config 0 interface 69 altsetting 13 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 349.747967][ T792] usb 6-1: config 0 interface 69 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 349.759123][ T792] usb 6-1: config 0 interface 69 altsetting 13 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 349.770775][ T9305] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9305 comm=syz.1.834 [ 349.847920][ T792] usb 6-1: config 0 interface 69 altsetting 13 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 349.868048][ T792] usb 6-1: config 0 interface 69 altsetting 13 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 349.896457][ T792] usb 6-1: too many endpoints for config 0 interface 84 altsetting 42: 182, using maximum allowed: 30 [ 349.925587][ T792] usb 6-1: config 0 interface 84 altsetting 42 has a duplicate endpoint with address 0xC, skipping [ 349.953724][ T792] usb 6-1: config 0 interface 84 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 349.981264][ T792] usb 6-1: too many endpoints for config 0 interface 152 altsetting 146: 237, using maximum allowed: 30 [ 350.013401][ T792] usb 6-1: config 0 interface 152 altsetting 146 has 0 endpoint descriptors, different from the interface descriptor's value: 237 [ 350.222744][ T9321] netlink: 'syz.0.839': attribute type 9 has an invalid length. [ 350.224942][ T792] usb 6-1: config 0 interface 157 has no altsetting 0 [ 350.408539][ T792] usb 6-1: config 0 interface 69 has no altsetting 0 [ 350.420646][ T9321] netlink: 'syz.0.839': attribute type 11 has an invalid length. [ 350.457445][ T9321] netlink: 'syz.0.839': attribute type 12 has an invalid length. [ 350.465498][ T9321] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.839'. [ 350.471590][ T30] audit: type=1400 audit(2000000005.858:791): avc: denied { append } for pid=9322 comm="syz.1.840" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.480824][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 350.515214][ T792] usb 6-1: config 0 interface 84 has no altsetting 0 [ 350.531976][ T792] usb 6-1: config 0 interface 152 has no altsetting 0 [ 350.560387][ T792] usb 6-1: Dual-Role OTG device on HNP port [ 350.596166][ T792] usb 6-1: New USB device found, idVendor=12d1, idProduct=f0be, bcdDevice=40.5b [ 350.700502][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.720521][ T792] usb 6-1: Product: ã  [ 350.809821][ T976] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 351.076850][ T792] usb 6-1: Manufacturer: à°‰ [ 351.097884][ T792] usb 6-1: SerialNumber: У [ 351.108931][ T976] usb 2-1: device descriptor read/64, error -71 [ 351.121051][ T792] usb 6-1: config 0 descriptor?? [ 351.205203][ T792] usb 6-1: can't set config #0, error -71 [ 351.397459][ T792] usb 6-1: USB disconnect, device number 9 [ 351.452441][ T976] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 351.634465][ T976] usb 2-1: device descriptor read/64, error -71 [ 351.665207][ T9335] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 351.675029][ T9335] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 351.684638][ T9335] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 351.692724][ T9335] UDF-fs: Scanning with blocksize 512 failed [ 351.699602][ T9335] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 351.709335][ T9335] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 351.718923][ T9335] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 351.726560][ T9335] UDF-fs: Scanning with blocksize 1024 failed [ 351.733295][ T9335] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 351.743000][ T9335] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 351.752693][ T9335] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 351.760334][ T9335] UDF-fs: Scanning with blocksize 2048 failed [ 351.767289][ T9335] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 351.776993][ T9335] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 351.786582][ T9335] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 351.794240][ T9335] UDF-fs: Scanning with blocksize 4096 failed [ 351.800309][ T9335] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 351.912357][ T976] usb usb2-port1: attempt power cycle [ 351.977020][ T30] audit: type=1400 audit(2000000007.308:792): avc: denied { write } for pid=9336 comm="syz.5.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.073431][ T30] audit: type=1400 audit(2000000007.317:793): avc: denied { map } for pid=9336 comm="syz.5.844" path="socket:[23274]" dev="sockfs" ino=23274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 352.140634][ T30] audit: type=1400 audit(2000000007.327:794): avc: denied { lock } for pid=9336 comm="syz.5.844" path="socket:[23273]" dev="sockfs" ino=23273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.203131][ T9344] vlan2: entered allmulticast mode [ 352.213702][ T9344] dummy0: entered allmulticast mode [ 352.223672][ T30] audit: type=1400 audit(2000000007.327:795): avc: denied { ioctl } for pid=9336 comm="syz.5.844" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 352.253378][ T9344] bridge0: port 3(vlan2) entered blocking state [ 352.270162][ T9344] bridge0: port 3(vlan2) entered disabled state [ 352.278351][ T9344] vlan2: entered promiscuous mode [ 352.291809][ T9344] dummy0: entered promiscuous mode [ 352.364061][ T976] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 352.403189][ T976] usb 2-1: device descriptor read/8, error -71 [ 352.537301][ T9344] netlink: 7 bytes leftover after parsing attributes in process `syz.3.847'. [ 352.597294][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'. [ 352.609788][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'. [ 352.698098][ T9351] netlink: 44 bytes leftover after parsing attributes in process `syz.0.848'. [ 352.955345][ T976] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 353.026137][ T9344] netlink: 'syz.3.847': attribute type 10 has an invalid length. [ 353.040347][ T976] usb 2-1: device descriptor read/8, error -71 [ 353.056741][ T9355] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 353.075361][ T9355] audit: out of memory in audit_log_start [ 353.077845][ T9344] bridge0: port 3(vlan2) entered blocking state [ 353.087765][ T9344] bridge0: port 3(vlan2) entered forwarding state [ 353.099449][ T9344] team0: Port device dummy0 added [ 353.167227][ T976] usb usb2-port1: unable to enumerate USB device [ 353.188316][ T9355] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 353.769243][ T9364] netlink: 44 bytes leftover after parsing attributes in process `syz.2.851'. [ 353.789073][ T30] audit: type=1400 audit(2000000008.993:796): avc: denied { append } for pid=9363 comm="syz.2.851" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 353.798088][ T9364] netlink: 43 bytes leftover after parsing attributes in process `syz.2.851'. [ 353.855296][ T9364] netlink: 'syz.2.851': attribute type 5 has an invalid length. [ 353.929761][ T9364] netlink: 43 bytes leftover after parsing attributes in process `syz.2.851'. [ 353.978298][ T9365] netlink: 'syz.0.852': attribute type 9 has an invalid length. [ 353.986181][ T9365] netlink: 'syz.0.852': attribute type 11 has an invalid length. [ 354.015421][ T9365] netlink: 'syz.0.852': attribute type 12 has an invalid length. [ 354.831488][ T9381] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 354.841341][ T9381] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 354.851021][ T9381] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 354.858657][ T9381] UDF-fs: Scanning with blocksize 512 failed [ 354.865540][ T9381] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 354.875314][ T9381] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 354.884928][ T9381] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 354.892603][ T9381] UDF-fs: Scanning with blocksize 1024 failed [ 354.899309][ T9381] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 354.909011][ T9381] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 354.918658][ T9381] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 354.926311][ T9381] UDF-fs: Scanning with blocksize 2048 failed [ 354.932900][ T9381] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 354.942890][ T9381] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 354.952848][ T9381] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 354.960527][ T9381] UDF-fs: Scanning with blocksize 4096 failed [ 354.966638][ T9381] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 356.227505][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 356.660675][ T9408] __nla_validate_parse: 2 callbacks suppressed [ 356.660711][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'. [ 356.741102][ T9409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.865'. [ 357.618652][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 357.777435][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 357.961716][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 357.975700][ T9] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 357.988821][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.997468][ T9] usb 6-1: Product: syz [ 358.012971][ T9] usb 6-1: Manufacturer: syz [ 358.183287][ T9] usb 6-1: SerialNumber: syz [ 358.937211][ T9436] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20001 [ 359.277270][ T9439] batadv_slave_0: Caught tx_queue_len zero misconfig [ 359.320552][ T9439] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 360.208267][ T9] usb 6-1: USB disconnect, device number 10 [ 360.282016][ T8555] udevd[8555]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.325674][ T9451] FAULT_INJECTION: forcing a failure. [ 360.325674][ T9451] name failslab, interval 1, probability 0, space 0, times 0 [ 360.353589][ T9451] CPU: 1 UID: 0 PID: 9451 Comm: syz.2.875 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.353620][ T9451] Tainted: [L]=SOFTLOCKUP [ 360.353624][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.353636][ T9451] Call Trace: [ 360.353640][ T9451] [ 360.353645][ T9451] dump_stack_lvl+0x100/0x190 [ 360.353668][ T9451] should_fail_ex.cold+0x5/0xa [ 360.353684][ T9451] should_failslab+0xc2/0x120 [ 360.353697][ T9451] __kmalloc_cache_node_noprof+0x7d/0x770 [ 360.353715][ T9451] ? __get_vm_area_node+0x101/0x330 [ 360.353730][ T9451] __get_vm_area_node+0x101/0x330 [ 360.353744][ T9451] __vmalloc_node_range_noprof+0x213/0x1530 [ 360.353758][ T9451] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 360.353775][ T9451] ? __lock_acquire+0x4a5/0x2630 [ 360.353788][ T9451] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 360.353803][ T9451] ? __lock_acquire+0x4a5/0x2630 [ 360.353817][ T9451] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 360.353830][ T9451] ? find_held_lock+0x2b/0x80 [ 360.353844][ T9451] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 360.353856][ T9451] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 360.353870][ T9451] ? avc_has_perm_noaudit+0x145/0x3b0 [ 360.353882][ T9451] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 360.353897][ T9451] __vmalloc_node_noprof+0xad/0xf0 [ 360.353910][ T9451] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 360.353928][ T9451] __vmalloc_noprof+0xa3/0x120 [ 360.353941][ T9451] ? __pfx___vmalloc_noprof+0x10/0x10 [ 360.353956][ T9451] ? rcu_is_watching+0x12/0xc0 [ 360.353969][ T9451] ? cap_capable+0x107/0x460 [ 360.353983][ T9451] bpf_prog_alloc_no_stats+0x59/0x630 [ 360.353998][ T9451] ? security_capable+0x80/0x260 [ 360.354012][ T9451] bpf_prog_alloc+0x3b/0x200 [ 360.354026][ T9451] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 360.354043][ T9451] bpf_prog_load+0x494/0x2c20 [ 360.354057][ T9451] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 360.354069][ T9451] ? __pfx_bpf_prog_load+0x10/0x10 [ 360.354081][ T9451] ? avc_has_perm_noaudit+0x145/0x3b0 [ 360.354094][ T9451] ? avc_has_perm+0x135/0x1e0 [ 360.354113][ T9451] ? selinux_bpf+0xfb/0x150 [ 360.354127][ T9451] __sys_bpf+0x223a/0x4b90 [ 360.354143][ T9451] ? __pfx___sys_bpf+0x10/0x10 [ 360.354154][ T9451] ? proc_fail_nth_write+0x9f/0x220 [ 360.354170][ T9451] ? find_held_lock+0x2b/0x80 [ 360.354188][ T9451] ? find_held_lock+0x2b/0x80 [ 360.354202][ T9451] ? ksys_write+0x190/0x250 [ 360.354223][ T9451] ? __mutex_unlock_slowpath+0x15c/0x790 [ 360.354239][ T9451] ? __fget_files+0x215/0x3d0 [ 360.354259][ T9451] ? fput+0x79/0x100 [ 360.354272][ T9451] ? ksys_write+0x1ac/0x250 [ 360.354289][ T9451] ? __pfx_ksys_write+0x10/0x10 [ 360.354309][ T9451] __x64_sys_bpf+0x7b/0xc0 [ 360.354321][ T9451] ? lockdep_hardirqs_on+0x78/0x100 [ 360.354335][ T9451] do_syscall_64+0x106/0xf80 [ 360.354349][ T9451] ? clear_bhb_loop+0x40/0x90 [ 360.354363][ T9451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.354376][ T9451] RIP: 0033:0x7f969f59c799 [ 360.354386][ T9451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.354397][ T9451] RSP: 002b:00007f96a04f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.354408][ T9451] RAX: ffffffffffffffda RBX: 00007f969f816090 RCX: 00007f969f59c799 [ 360.354416][ T9451] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 360.354422][ T9451] RBP: 00007f96a04f4090 R08: 0000000000000000 R09: 0000000000000000 [ 360.354429][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.354435][ T9451] R13: 00007f969f816128 R14: 00007f969f816090 R15: 00007ffef8ef1518 [ 360.354450][ T9451] [ 360.359116][ T9451] syz.2.875: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 360.891079][ T9451] CPU: 1 UID: 0 PID: 9451 Comm: syz.2.875 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.891114][ T9451] Tainted: [L]=SOFTLOCKUP [ 360.891121][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.891134][ T9451] Call Trace: [ 360.891141][ T9451] [ 360.891148][ T9451] dump_stack_lvl+0x100/0x190 [ 360.891180][ T9451] warn_alloc.cold+0x95/0x1c1 [ 360.891201][ T9451] ? __pfx_warn_alloc+0x10/0x10 [ 360.891216][ T9451] ? trace_kmalloc+0x101/0x130 [ 360.891229][ T9451] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 360.891248][ T9451] ? __kasan_kmalloc+0x8a/0xb0 [ 360.891266][ T9451] ? __get_vm_area_node+0x208/0x330 [ 360.891282][ T9451] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 360.891296][ T9451] ? __lock_acquire+0x4a5/0x2630 [ 360.891309][ T9451] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 360.891325][ T9451] ? __lock_acquire+0x4a5/0x2630 [ 360.891339][ T9451] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 360.891353][ T9451] ? find_held_lock+0x2b/0x80 [ 360.891366][ T9451] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 360.891378][ T9451] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 360.891392][ T9451] ? avc_has_perm_noaudit+0x145/0x3b0 [ 360.891404][ T9451] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 360.891419][ T9451] __vmalloc_node_noprof+0xad/0xf0 [ 360.891433][ T9451] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 360.891450][ T9451] __vmalloc_noprof+0xa3/0x120 [ 360.891463][ T9451] ? __pfx___vmalloc_noprof+0x10/0x10 [ 360.891478][ T9451] ? rcu_is_watching+0x12/0xc0 [ 360.891491][ T9451] ? cap_capable+0x107/0x460 [ 360.891505][ T9451] bpf_prog_alloc_no_stats+0x59/0x630 [ 360.891520][ T9451] ? security_capable+0x80/0x260 [ 360.891540][ T9451] bpf_prog_alloc+0x3b/0x200 [ 360.891554][ T9451] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 360.891572][ T9451] bpf_prog_load+0x494/0x2c20 [ 360.891586][ T9451] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 360.891597][ T9451] ? __pfx_bpf_prog_load+0x10/0x10 [ 360.891610][ T9451] ? avc_has_perm_noaudit+0x145/0x3b0 [ 360.891624][ T9451] ? avc_has_perm+0x135/0x1e0 [ 360.891642][ T9451] ? selinux_bpf+0xfb/0x150 [ 360.891656][ T9451] __sys_bpf+0x223a/0x4b90 [ 360.891670][ T9451] ? __pfx___sys_bpf+0x10/0x10 [ 360.891681][ T9451] ? proc_fail_nth_write+0x9f/0x220 [ 360.891697][ T9451] ? find_held_lock+0x2b/0x80 [ 360.891715][ T9451] ? find_held_lock+0x2b/0x80 [ 360.891728][ T9451] ? ksys_write+0x190/0x250 [ 360.891749][ T9451] ? __mutex_unlock_slowpath+0x15c/0x790 [ 360.891765][ T9451] ? __fget_files+0x215/0x3d0 [ 360.891785][ T9451] ? fput+0x79/0x100 [ 360.891798][ T9451] ? ksys_write+0x1ac/0x250 [ 360.891814][ T9451] ? __pfx_ksys_write+0x10/0x10 [ 360.891834][ T9451] __x64_sys_bpf+0x7b/0xc0 [ 360.891846][ T9451] ? lockdep_hardirqs_on+0x78/0x100 [ 360.891861][ T9451] do_syscall_64+0x106/0xf80 [ 360.891875][ T9451] ? clear_bhb_loop+0x40/0x90 [ 360.891889][ T9451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.891901][ T9451] RIP: 0033:0x7f969f59c799 [ 360.891911][ T9451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.891922][ T9451] RSP: 002b:00007f96a04f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.891934][ T9451] RAX: ffffffffffffffda RBX: 00007f969f816090 RCX: 00007f969f59c799 [ 360.891942][ T9451] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 360.891948][ T9451] RBP: 00007f96a04f4090 R08: 0000000000000000 R09: 0000000000000000 [ 360.891955][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.891961][ T9451] R13: 00007f969f816128 R14: 00007f969f816090 R15: 00007ffef8ef1518 [ 360.891976][ T9451] [ 361.251620][ T9451] Mem-Info: [ 361.254823][ T9451] active_anon:39389 inactive_anon:0 isolated_anon:0 [ 361.254823][ T9451] active_file:21963 inactive_file:40779 isolated_file:0 [ 361.254823][ T9451] unevictable:768 dirty:333 writeback:0 [ 361.254823][ T9451] slab_reclaimable:12465 slab_unreclaimable:98778 [ 361.254823][ T9451] mapped:31907 shmem:28270 pagetables:1601 [ 361.254823][ T9451] sec_pagetables:0 bounce:0 [ 361.254823][ T9451] kernel_misc_reclaimable:0 [ 361.254823][ T9451] free:1256155 free_pcp:19245 free_cma:0 [ 361.300713][ T9451] Node 0 active_anon:157556kB inactive_anon:0kB active_file:87812kB inactive_file:162916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127588kB dirty:1328kB writeback:0kB shmem:111544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13396kB pagetables:6248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.333009][ T9451] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.363273][ T9451] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.393458][ T9451] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 361.423177][ T9451] Node 0 DMA32 free:1069520kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:157508kB inactive_anon:0kB active_file:87812kB inactive_file:162924kB unevictable:1536kB writepending:1328kB zspages:0kB present:3129332kB managed:2537156kB mlocked:0kB bounce:0kB free_pcp:75348kB local_pcp:18768kB free_cma:0kB [ 361.456896][ T9451] lowmem_reserve[]: 0 0 1 1 1 [ 361.461801][ T9451] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 361.491576][ T9451] lowmem_reserve[]: 0 0 0 0 0 [ 361.496546][ T9451] Node 1 Normal free:3939692kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1308kB local_pcp:1308kB free_cma:0kB [ 361.529617][ T9451] lowmem_reserve[]: 0 0 0 0 0 [ 361.539128][ T9451] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 361.552267][ T9451] Node 0 DMA32: 767*4kB (UM) 1801*8kB (UME) 736*16kB (UE) 348*32kB (UME) 235*64kB (UM) 273*128kB (UM) 117*256kB (UME) 78*512kB (UME) 34*1024kB (UM) 3*2048kB (UM) 212*4096kB (UM) = 1069572kB [ 361.571626][ T9451] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 361.583367][ T9451] Node 1 Normal: 3*4kB (UM) 8*8kB (U) 8*16kB (UM) 3*32kB (U) 7*64kB (UM) 7*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939692kB [ 361.600597][ T9451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.610266][ T9451] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 361.620242][ T9451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.629998][ T9451] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.643119][ T9451] 91007 total pagecache pages [ 361.655805][ T9451] 0 pages in swap cache [ 361.660571][ T9451] Free swap = 124996kB [ 361.664998][ T9451] Total swap = 124996kB [ 361.676113][ T9451] 2097051 pages RAM [ 361.680948][ T9451] 0 pages HighMem/MovableOnly [ 361.686931][ T9451] 430885 pages reserved [ 361.696548][ T9451] 0 pages cma reserved [ 362.674151][ T9474] loop2: detected capacity change from 0 to 7 [ 362.698995][ T9474] Dev loop2: unable to read RDB block 7 [ 362.704989][ T9474] loop2: unable to read partition table [ 362.712849][ T9474] loop2: partition table beyond EOD, truncated [ 362.719318][ T9474] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 363.114019][ T5178] Dev loop2: unable to read RDB block 7 [ 363.140265][ T5178] loop2: unable to read partition table [ 363.440969][ T5178] loop2: partition table beyond EOD, truncated [ 363.987619][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 364.196908][ T9485] netlink: 44 bytes leftover after parsing attributes in process `syz.1.882'. [ 364.365562][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 364.365580][ T30] audit: type=1326 audit(2000000018.903:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 364.415586][ T9490] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 364.422563][ T30] audit: type=1326 audit(2000000018.903:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 364.453463][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 364.606301][ T30] audit: type=1326 audit(2000000018.903:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 364.630308][ T30] audit: type=1326 audit(2000000019.015:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 364.654175][ T30] audit: type=1326 audit(2000000019.015:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 364.825358][ T30] audit: type=1400 audit(2000000019.034:803): avc: denied { read } for pid=9481 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 365.253644][ T30] audit: type=1400 audit(2000000019.745:804): avc: denied { read } for pid=9496 comm="syz.0.886" laddr=::ffff:172.20.20.170 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 365.472222][ T30] audit: type=1400 audit(2000000019.951:805): avc: denied { read } for pid=9502 comm="syz.5.888" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 365.500877][ T30] audit: type=1400 audit(2000000019.969:806): avc: denied { open } for pid=9502 comm="syz.5.888" path="/104/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 365.524757][ T5892] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 365.550024][ T30] audit: type=1400 audit(2000000019.969:807): avc: denied { ioctl } for pid=9491 comm="syz.1.885" path="pid:[4026532801]" dev="nsfs" ino=4026532801 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 365.674198][ T5892] usb 4-1: device descriptor read/64, error -71 [ 365.748895][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 366.037422][ T5892] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 366.062408][ T9] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 366.572125][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 366.579252][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 367.059947][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 367.087789][ T9] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 367.096915][ T9] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 367.105062][ T9] usb 6-1: Manufacturer: syz [ 367.112884][ T9] usb 6-1: config 0 descriptor?? [ 367.135286][ T9] igorplugusb 6-1:0.0: endpoint incorrect [ 367.256096][ T5892] usb 4-1: device descriptor read/64, error -71 [ 367.338698][ T9] usb 6-1: USB disconnect, device number 11 [ 367.373411][ T5892] usb usb4-port1: attempt power cycle [ 367.668157][ T792] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 367.669866][ T9534] netlink: 'syz.1.894': attribute type 9 has an invalid length. [ 367.683663][ T9534] netlink: 'syz.1.894': attribute type 11 has an invalid length. [ 367.691429][ T9534] netlink: 'syz.1.894': attribute type 12 has an invalid length. [ 367.699499][ T9534] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.894'. [ 367.709817][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 367.992792][ T5892] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 368.098350][ T5892] usb 4-1: device descriptor read/8, error -71 [ 368.174670][ T792] usb 3-1: Using ep0 maxpacket: 8 [ 368.229074][ T792] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 368.249643][ T792] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 368.258219][ T792] usb 3-1: config 162 has no interface number 0 [ 368.301302][ T792] usb 3-1: config 162 has no interface number 1 [ 368.308413][ T792] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 368.322034][ T792] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 368.333050][ T792] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 368.345239][ T792] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 368.487664][ T792] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 368.616881][ T5892] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 368.630153][ T792] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 368.708199][ T792] usb 3-1: too many endpoints for config 162 interface 3 altsetting 48: 48, using maximum allowed: 30 [ 368.759705][ T792] usb 3-1: config 162 interface 3 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 368.794253][ T792] usb 3-1: config 162 interface 84 has no altsetting 0 [ 368.815090][ T792] usb 3-1: config 162 interface 2 has no altsetting 0 [ 368.847736][ T5892] usb 4-1: device not accepting address 30, error -71 [ 368.855970][ T5892] usb usb4-port1: unable to enumerate USB device [ 369.206365][ T792] usb 3-1: config 162 interface 3 has no altsetting 0 [ 369.238701][ T792] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 369.253758][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.313739][ T792] usb 3-1: Product: syz [ 369.325561][ T9552] syzkaller0: entered promiscuous mode [ 369.335667][ T792] usb 3-1: Manufacturer: syz [ 369.586575][ T9552] syzkaller0: entered allmulticast mode [ 369.588793][ T792] usb 3-1: SerialNumber: syz [ 370.089587][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 370.089605][ T30] audit: type=1400 audit(2000000024.274:809): avc: denied { bind } for pid=9551 comm="syz.1.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 370.131154][ T5819] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 370.192160][ T792] usb 3-1: USB disconnect, device number 24 [ 371.241834][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 371.534005][ T9569] FAULT_INJECTION: forcing a failure. [ 371.534005][ T9569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.564459][ T9569] CPU: 0 UID: 0 PID: 9569 Comm: syz.1.904 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.564494][ T9569] Tainted: [L]=SOFTLOCKUP [ 371.564502][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.564517][ T9569] Call Trace: [ 371.564524][ T9569] [ 371.564532][ T9569] dump_stack_lvl+0x100/0x190 [ 371.564571][ T9569] should_fail_ex.cold+0x5/0xa [ 371.564600][ T9569] _copy_to_user+0x32/0xd0 [ 371.564624][ T9569] simple_read_from_buffer+0xcb/0x170 [ 371.564662][ T9569] proc_fail_nth_read+0x1af/0x230 [ 371.564694][ T9569] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 371.564726][ T9569] ? rw_verify_area+0xce/0x6d0 [ 371.564756][ T9569] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 371.564785][ T9569] vfs_read+0x1e4/0xb30 [ 371.564827][ T9569] ? __pfx_vfs_read+0x10/0x10 [ 371.564858][ T9569] ? __fget_files+0x215/0x3d0 [ 371.564888][ T9569] ? __fget_files+0x21f/0x3d0 [ 371.564920][ T9569] ksys_read+0x12a/0x250 [ 371.564951][ T9569] ? __pfx_ksys_read+0x10/0x10 [ 371.564992][ T9569] do_syscall_64+0x106/0xf80 [ 371.565020][ T9569] ? clear_bhb_loop+0x40/0x90 [ 371.565047][ T9569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.565070][ T9569] RIP: 0033:0x7f6537d5cfce [ 371.565088][ T9569] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 371.565109][ T9569] RSP: 002b:00007f6538bdafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.565133][ T9569] RAX: ffffffffffffffda RBX: 00007f6538bdb6c0 RCX: 00007f6537d5cfce [ 371.565148][ T9569] RDX: 000000000000000f RSI: 00007f6538bdb0a0 RDI: 0000000000000005 [ 371.565161][ T9569] RBP: 00007f6538bdb090 R08: 0000000000000000 R09: 0000000000000000 [ 371.565175][ T9569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.565188][ T9569] R13: 00007f6538016038 R14: 00007f6538015fa0 R15: 00007ffd4e55d0e8 [ 371.565219][ T9569] [ 371.609208][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 371.841398][ T24] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 371.850070][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 371.902356][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 371.928654][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 371.943911][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 371.972949][ T9577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.907'. [ 372.015243][ T9579] FAULT_INJECTION: forcing a failure. [ 372.015243][ T9579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.033065][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.036950][ T9579] CPU: 0 UID: 0 PID: 9579 Comm: syz.0.905 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.036983][ T9579] Tainted: [L]=SOFTLOCKUP [ 372.036991][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.037003][ T9579] Call Trace: [ 372.037010][ T9579] [ 372.037017][ T9579] dump_stack_lvl+0x100/0x190 [ 372.037056][ T9579] should_fail_ex.cold+0x5/0xa [ 372.037083][ T9579] _copy_from_user+0x2e/0xd0 [ 372.037106][ T9579] copy_msghdr_from_user+0x9f/0x4f0 [ 372.037141][ T9579] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 372.037188][ T9579] ___sys_sendmsg+0x106/0x1e0 [ 372.037223][ T9579] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.037290][ T9579] __sys_sendmsg+0x170/0x220 [ 372.037317][ T9579] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.037361][ T9579] do_syscall_64+0x106/0xf80 [ 372.037387][ T9579] ? clear_bhb_loop+0x40/0x90 [ 372.037413][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.037434][ T9579] RIP: 0033:0x7f26c4f9c799 [ 372.037452][ T9579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.037472][ T9579] RSP: 002b:00007f26c5edd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.037492][ T9579] RAX: ffffffffffffffda RBX: 00007f26c5215fa0 RCX: 00007f26c4f9c799 [ 372.037506][ T9579] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 372.037519][ T9579] RBP: 00007f26c5edd090 R08: 0000000000000000 R09: 0000000000000000 [ 372.037531][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.037544][ T9579] R13: 00007f26c5216038 R14: 00007f26c5215fa0 R15: 00007ffd083a6408 [ 372.037573][ T9579] [ 372.041849][ T9580] netlink: 'syz.1.907': attribute type 21 has an invalid length. [ 372.237099][ T9581] netlink: 'syz.1.907': attribute type 21 has an invalid length. [ 372.282100][ T9581] netlink: 156 bytes leftover after parsing attributes in process `syz.1.907'. [ 372.288624][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 372.291534][ T9580] netlink: 156 bytes leftover after parsing attributes in process `syz.1.907'. [ 372.323565][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.545054][ T5978] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 372.619468][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 372.625470][ T24] usbtmc 6-1:16.0: can't read capabilities [ 372.684578][ T5978] usb 3-1: device descriptor read/64, error -71 [ 372.814088][ T9564] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 372.821459][ T24] usb 6-1: USB disconnect, device number 12 [ 372.940473][ T5978] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 373.155872][ T5978] usb 3-1: device descriptor read/64, error -71 [ 373.419585][ T5978] usb usb3-port1: attempt power cycle [ 373.513510][ T9598] netlink: 20 bytes leftover after parsing attributes in process `syz.5.912'. [ 373.784687][ T5978] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 374.331203][ T5978] usb 3-1: device descriptor read/8, error -71 [ 375.088449][ T5978] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 375.334080][ T5978] usb 3-1: device not accepting address 28, error -71 [ 375.355863][ T5978] usb usb3-port1: unable to enumerate USB device [ 375.439185][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.916'. [ 375.513164][ T9620] netlink: 44 bytes leftover after parsing attributes in process `syz.5.916'. [ 375.903699][ T9624] comedi comedi0: pcl724: I/O port conflict (0x9,4) [ 378.853253][ T30] audit: type=1326 audit(2000000032.472:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 378.935311][ T5978] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 379.055102][ T7148] Bluetooth: hci5: Frame reassembly failed (-84) [ 379.075383][ T30] audit: type=1326 audit(2000000032.472:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 379.133983][ T30] audit: type=1326 audit(2000000032.490:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 379.199928][ T5978] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 379.303323][ T5978] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 379.316590][ T5978] usb 6-1: config 1 interface 0 has no altsetting 0 [ 379.433613][ T30] audit: type=1326 audit(2000000033.015:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 379.467049][ T5978] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 379.489141][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.537983][ T5978] usb 6-1: Product: syz [ 379.587141][ T5892] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 379.640797][ T5978] usb 6-1: Manufacturer: syz [ 379.645585][ T30] audit: type=1326 audit(2000000033.015:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 379.681525][ T5978] usb 6-1: SerialNumber: syz [ 379.900790][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 379.911818][ T9663] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 379.919124][ T9663] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 380.025969][ T5892] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 380.070628][ T5892] usb 4-1: config 0 has no interface number 0 [ 380.081355][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 380.101279][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.120245][ T5892] usb 4-1: Product: syz [ 380.131191][ T5892] usb 4-1: Manufacturer: syz [ 380.162204][ T5892] usb 4-1: SerialNumber: syz [ 380.169664][ T5892] usb 4-1: config 0 descriptor?? [ 380.198256][ T5892] hub 4-1:0.132: bad descriptor, ignoring hub [ 380.207303][ T5892] hub 4-1:0.132: probe with driver hub failed with error -5 [ 380.221163][ T5892] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input22 [ 380.624504][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 381.266565][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 381.292097][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 381.511522][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 381.536894][ T24] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 381.582905][ T24] usb 1-1: config 0 has no interface number 0 [ 381.613679][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 381.665085][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.691028][ T24] usb 1-1: Product: syz [ 381.704245][ T24] usb 1-1: Manufacturer: syz [ 381.722146][ T24] usb 1-1: SerialNumber: syz [ 381.942596][ T24] usb 1-1: config 0 descriptor?? [ 382.362193][ T30] audit: type=1400 audit(2000000035.747:815): avc: denied { map } for pid=9689 comm="syz.0.930" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 382.686453][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.695101][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.771747][ T5978] rtl8150 6-1:1.0: couldn't reset the device [ 382.780439][ T5978] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 383.833269][ T5978] usb 6-1: USB disconnect, device number 13 [ 384.765345][ T24] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 384.797657][ T24] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 384.847303][ T24] usb 1-1: USB disconnect, device number 28 [ 385.251497][ T30] audit: type=1400 audit(2000000038.367:816): avc: denied { search } for pid=9727 comm="syz.0.939" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.513755][ T30] audit: type=1400 audit(2000000038.367:817): avc: denied { search } for pid=9727 comm="syz.0.939" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.577450][ T30] audit: type=1400 audit(2000000038.367:818): avc: denied { read open } for pid=9727 comm="syz.0.939" path="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.414333][ T976] libceph: connect (1)[c::]:6789 error -22 [ 387.448850][ T9747] ceph: No mds server is up or the cluster is laggy [ 387.471151][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 387.586107][ T30] audit: type=1400 audit(2000000040.641:819): avc: denied { read } for pid=9741 comm="syz.3.942" path="socket:[24086]" dev="sockfs" ino=24086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 388.891632][ T30] audit: type=1400 audit(2000000040.641:820): avc: denied { read } for pid=9741 comm="syz.3.942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 389.051426][ T30] audit: type=1400 audit(2000000041.792:821): avc: denied { ioctl } for pid=9741 comm="syz.3.942" path="socket:[24085]" dev="sockfs" ino=24085 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 389.168096][ T5892] usb 4-1: USB disconnect, device number 31 [ 389.296230][ T30] audit: type=1400 audit(2000000041.839:822): avc: denied { write } for pid=9741 comm="syz.3.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 391.617102][ T5978] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 391.816646][ T5978] usb 6-1: string descriptor 0 read error: -22 [ 391.823047][ T5978] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 391.832117][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.141161][ T30] audit: type=1400 audit(2000000044.899:823): avc: denied { append } for pid=9767 comm="syz.5.950" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 392.507599][ T5978] usb 6-1: USB disconnect, device number 14 [ 392.550366][ T9782] kvm: faulting far call emulation tainted memory [ 393.716447][ T9800] netlink: 'syz.5.957': attribute type 10 has an invalid length. [ 393.726973][ T30] audit: type=1400 audit(2000000046.387:824): avc: denied { mount } for pid=9793 comm="syz.5.957" name="/" dev="rpc_pipefs" ino=24239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 393.798745][ T9795] netlink: 'syz.5.957': attribute type 10 has an invalid length. [ 393.831402][ T9799] : entered promiscuous mode [ 393.847499][ T9800] team0: Port device dummy0 added [ 393.871782][ T9798] loop2: detected capacity change from 0 to 7 [ 393.978774][ T9804] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 393.989454][ T9804] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 393.999167][ T9804] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 394.007093][ T9804] UDF-fs: Scanning with blocksize 512 failed [ 394.017504][ T9804] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 394.027872][ T9804] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 394.037642][ T9804] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 394.045381][ T9804] UDF-fs: Scanning with blocksize 1024 failed [ 394.054749][ T9804] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 394.064958][ T9804] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 394.074614][ T9804] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 394.082334][ T9804] UDF-fs: Scanning with blocksize 2048 failed [ 394.091188][ T9804] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 394.101424][ T9804] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 394.111136][ T9804] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 394.118795][ T9804] UDF-fs: Scanning with blocksize 4096 failed [ 394.124925][ T9804] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 394.337150][ T9798] Dev loop2: unable to read RDB block 7 [ 394.342785][ T9798] loop2: unable to read partition table [ 394.348744][ T9798] loop2: partition table beyond EOD, truncated [ 394.354934][ T9798] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 394.459699][ T9795] team0: Port device dummy0 removed [ 394.501244][ T9795] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 395.273749][ T30] audit: type=1400 audit(2000000047.828:825): avc: denied { create } for pid=9809 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 395.377678][ T30] audit: type=1400 audit(2000000047.856:826): avc: denied { bind } for pid=9809 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 395.494979][ T5978] IPVS: starting estimator thread 0... [ 396.229659][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.246778][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.473600][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 396.481406][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 396.503197][ T9829] IPVS: using max 68 ests per chain, 163200 per kthread [ 396.512299][ T5862] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 396.663457][ T24] usb 4-1: device descriptor read/64, error -32 [ 397.049933][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 397.486702][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 397.494961][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 397.620775][ T9842] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 398.142023][ T9842] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 398.152727][ T9842] overlayfs: failed to look up (tracing) for ino (-66) [ 398.550889][ T5819] Bluetooth: hci0: SCO packet for unknown connection handle 264 [ 398.597932][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 398.608516][ T9845] netlink: 'syz.2.967': attribute type 9 has an invalid length. [ 398.622041][ T9845] netlink: 'syz.2.967': attribute type 11 has an invalid length. [ 398.628262][ T24] usb 4-1: Product: syz [ 398.961525][ T9845] netlink: 'syz.2.967': attribute type 12 has an invalid length. [ 398.969548][ T9845] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.967'. [ 398.979894][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 399.034299][ T24] usb 4-1: Manufacturer: syz [ 399.238851][ T24] usb 4-1: SerialNumber: syz [ 399.256285][ T24] usb 4-1: config 0 descriptor?? [ 399.293692][ T24] usb 4-1: can't set config #0, error -71 [ 399.311820][ T24] usb 4-1: USB disconnect, device number 33 [ 400.259924][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 400.335963][ T9867] netlink: 44 bytes leftover after parsing attributes in process `syz.1.973'. [ 400.827244][ T9857] netlink: 'syz.2.970': attribute type 10 has an invalid length. [ 401.130904][ T9857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 401.140138][ T9857] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 403.023172][ T9899] input: syz0 as /devices/virtual/input/input23 [ 404.673364][ T9898] overlay: Unknown parameter '/' [ 404.795570][ T976] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 404.980338][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 405.027258][ T976] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 405.054911][ T976] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.124684][ T976] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.191230][ T976] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.277341][ T976] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.390247][ T976] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 405.414503][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.357047][ T976] usb 6-1: usb_control_msg returned -32 [ 406.362657][ T976] usbtmc 6-1:16.0: can't read capabilities [ 406.624859][ T24] usb 6-1: USB disconnect, device number 15 [ 406.713724][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 409.135297][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 411.369538][ T9960] lo: Caught tx_queue_len zero misconfig [ 411.392760][ T9960] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 411.698227][ T9960] netlink: 'syz.0.998': attribute type 16 has an invalid length. [ 411.707035][ T9960] netlink: 'syz.0.998': attribute type 17 has an invalid length. [ 412.265183][ T9960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.406194][ T9980] lo: Caught tx_queue_len zero misconfig [ 413.412063][ T9980] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 413.635909][ T30] audit: type=1400 audit(2000000065.019:827): avc: denied { ioctl } for pid=9984 comm="syz.2.1003" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 413.681362][ T9988] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1005'. [ 413.910562][ T30] audit: type=1326 audit(2000000065.272:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9987 comm="syz.0.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 413.987810][ T9993] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 414.023559][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 414.057543][ T9989] veth1_macvtap: left promiscuous mode [ 414.063482][ T9989] macsec0: entered promiscuous mode [ 414.069029][ T30] audit: type=1326 audit(2000000065.272:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9987 comm="syz.0.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 414.172278][ T9997] fuse: Unknown parameter 'fd0x0000000000000003' [ 414.768067][ T30] audit: type=1326 audit(2000000066.058:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9987 comm="syz.0.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 414.834869][ T30] audit: type=1326 audit(2000000066.058:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9987 comm="syz.0.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 414.841744][T10002] FAULT_INJECTION: forcing a failure. [ 414.841744][T10002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.952543][T10002] CPU: 0 UID: 0 PID: 10002 Comm: syz.1.1006 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.952579][T10002] Tainted: [L]=SOFTLOCKUP [ 414.952586][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.952598][T10002] Call Trace: [ 414.952604][T10002] [ 414.952610][T10002] dump_stack_lvl+0x100/0x190 [ 414.952633][T10002] should_fail_ex.cold+0x5/0xa [ 414.952649][T10002] _copy_from_user+0x2e/0xd0 [ 414.952662][T10002] copy_msghdr_from_user+0x9f/0x4f0 [ 414.952682][T10002] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 414.952707][T10002] ___sys_sendmsg+0x106/0x1e0 [ 414.952726][T10002] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.952762][T10002] __sys_sendmsg+0x170/0x220 [ 414.952777][T10002] ? __pfx___sys_sendmsg+0x10/0x10 [ 414.952801][T10002] do_syscall_64+0x106/0xf80 [ 414.952816][T10002] ? clear_bhb_loop+0x40/0x90 [ 414.952836][T10002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.952847][T10002] RIP: 0033:0x7f6537d9c799 [ 414.952858][T10002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.952869][T10002] RSP: 002b:00007f6538bdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.952881][T10002] RAX: ffffffffffffffda RBX: 00007f6538015fa0 RCX: 00007f6537d9c799 [ 414.952888][T10002] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 414.952895][T10002] RBP: 00007f6538bdb090 R08: 0000000000000000 R09: 0000000000000000 [ 414.952901][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.952908][T10002] R13: 00007f6538016038 R14: 00007f6538015fa0 R15: 00007ffd4e55d0e8 [ 414.952923][T10002] [ 416.368646][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 416.379263][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 416.572999][T10000] veth1_macvtap: entered promiscuous mode [ 416.635289][T10000] macsec0: left promiscuous mode [ 416.804152][T10015] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1012'. [ 417.143520][ T30] audit: type=1400 audit(2000000068.304:832): avc: denied { read } for pid=10006 comm="syz.1.1008" name="file0" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 417.612307][ T30] audit: type=1400 audit(2000000068.743:833): avc: denied { lock } for pid=10036 comm="syz.3.1009" path="socket:[26703]" dev="sockfs" ino=26703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 417.617729][T10037] loop6: detected capacity change from 0 to 2640 [ 417.680387][ T5818] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.707275][ T5818] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.729140][ T5818] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.751426][ T5818] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.766503][ T5818] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.789050][ T5818] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.808000][ T5818] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.822207][ T5818] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.832572][ T5806] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 417.839076][ T5818] ldm_validate_partition_table(): Disk read failed. [ 417.851304][ T5818] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.869504][ T5818] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.884202][ T5818] Dev loop6: unable to read RDB block 0 [ 417.897871][ T5818] loop6: unable to read partition table [ 417.916656][T10037] ldm_validate_partition_table(): Disk read failed. [ 417.925871][T10037] Dev loop6: unable to read RDB block 0 [ 417.938614][T10037] loop6: unable to read partition table [ 417.956614][T10037] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 418.005445][ T5806] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 418.020223][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.057221][ T5806] usb 3-1: config 0 descriptor?? [ 419.085142][ T5806] ath6kl: Failed to submit usb control message: -71 [ 419.091810][ T5806] ath6kl: unable to send the bmi data to the device: -71 [ 419.102767][ T5806] ath6kl: Unable to send get target info: -71 [ 419.123933][ T5806] ath6kl: Failed to init ath6kl core: -71 [ 419.135650][ T5806] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 419.186022][ T5806] usb 3-1: USB disconnect, device number 29 [ 419.249346][ T30] audit: type=1326 audit(2000000070.269:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.1.1022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6537d9c799 code=0x0 [ 419.309836][T10055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1022'. [ 419.435464][ T792] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 419.595763][ T792] usb 1-1: Using ep0 maxpacket: 16 [ 419.602824][ T792] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 419.612257][ T792] usb 1-1: config 1 has no interface number 0 [ 419.642087][ T792] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 419.668215][ T792] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 419.714552][ T792] usb 1-1: config 1 interface 105 has no altsetting 0 [ 419.799117][ T792] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 419.808710][ T792] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 419.823032][ T792] usb 1-1: Product: syz [ 419.827822][ T792] usb 1-1: Manufacturer: syz [ 419.832868][ T792] usb 1-1: SerialNumber: syz [ 419.845375][T10051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 419.861298][T10051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 420.287895][T10069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1026'. [ 420.620708][T10051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 420.631091][T10051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 420.938156][ T792] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 420.963844][ T792] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 421.004566][ T792] usb 1-1: USB disconnect, device number 30 [ 421.490358][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 421.917106][T10073] netlink: 'syz.3.1028': attribute type 1 has an invalid length. [ 422.200437][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'. [ 422.274464][T10087] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1031'. [ 424.418164][T10104] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 425.998338][T10110] nbd: illegal input index -2146435068 [ 427.035034][T10122] netlink: 'syz.2.1040': attribute type 21 has an invalid length. [ 427.067598][T10122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1040'. [ 427.918251][T10126] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1042'. [ 428.117494][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 428.378205][T10147] netlink: 'syz.3.1037': attribute type 1 has an invalid length. [ 428.437656][T10147] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1037'. [ 428.458230][T10147] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1037'. [ 429.229720][T10159] tipc: Started in network mode [ 429.235060][T10159] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 429.941097][T10159] tipc: Enabled bearer , priority 10 [ 430.303312][ T5806] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 431.098245][ T5806] usb 1-1: Using ep0 maxpacket: 16 [ 431.117158][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.130579][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.143262][ T24] tipc: Node number set to 4269801491 [ 431.153416][ T5806] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.179446][ T5806] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 431.190091][ T792] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 431.221200][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.403756][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 431.436548][ T792] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 431.619230][ T5806] usb 1-1: config 0 descriptor?? [ 431.627255][ T792] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 431.644764][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.656787][ T792] usb 3-1: Product: syz [ 431.691291][ T792] usb 3-1: Manufacturer: syz [ 431.696170][ T792] usb 3-1: SerialNumber: syz [ 431.705365][ T792] r8152-cfgselector 3-1: Unknown version 0x0000 [ 431.711658][ T792] r8152-cfgselector 3-1: config 0 descriptor?? [ 431.826956][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1053'. [ 431.964229][T10172] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 432.019807][T10172] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 432.637809][ T5806] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 432.652298][T10174] macvlan2: entered promiscuous mode [ 432.662835][ T5806] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 432.832114][ T5806] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 432.848476][T10174] macvlan2: entered allmulticast mode [ 432.854374][T10174] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 432.860425][ T5806] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 432.889164][ T5806] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 432.900760][ T5806] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 432.914150][ T5806] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 432.948994][ T5806] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x4 [ 432.973317][ T5806] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 432.996081][ T5806] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 433.026625][ T5806] waterforce 0003:1044:7A4D.0007: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 433.121764][ T5806] waterforce 0003:1044:7A4D.0007: fw version request failed with -38 [ 433.136063][T10179] syzkaller0: entered promiscuous mode [ 433.166782][T10179] syzkaller0: entered allmulticast mode [ 433.812087][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1055'. [ 433.821856][T10192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.350452][ T5978] r8152-cfgselector 3-1: USB disconnect, device number 30 [ 434.422420][ T5892] usb 1-1: USB disconnect, device number 31 [ 434.462227][T10192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.652850][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 438.128292][T10217] tipc: Started in network mode [ 438.133303][T10217] tipc: Node identity 360dd21cb00f, cluster identity 4711 [ 438.141506][T10217] tipc: Enabled bearer , priority 0 [ 438.154775][T10217] syzkaller0: entered promiscuous mode [ 438.160389][T10217] syzkaller0: entered allmulticast mode [ 438.488654][ T792] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 438.601654][T10211] tipc: Resetting bearer [ 438.686539][T10211] tipc: Disabling bearer [ 438.692824][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 438.710658][ T792] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 438.730589][ T792] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 438.794289][ T792] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 438.803827][ T792] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 438.812287][ T792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 438.822123][ T792] usb 3-1: config 0 has no interface number 0 [ 438.829495][ T792] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 438.841081][ T792] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 438.873276][ T792] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.892017][ T792] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.040492][ T792] usb 3-1: config 0 interface 125 has no altsetting 0 [ 439.052070][ T792] usb 3-1: config 0 interface 125 has no altsetting 2 [ 439.055117][ T5892] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 439.064440][ T792] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 439.145859][T10229] 9pnet_fd: p9_fd_create_unix (10229): problem connecting socket: ./cgroup: -111 [ 440.048854][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.056973][ T792] usb 3-1: Product: syz [ 440.061199][ T792] usb 3-1: Manufacturer: syz [ 440.065798][ T792] usb 3-1: SerialNumber: syz [ 440.074080][ T792] usb 3-1: config 0 descriptor?? [ 440.083687][ T792] usb 3-1: selecting invalid altsetting 2 [ 440.903675][ T5892] usb 1-1: device descriptor read/64, error -71 [ 441.240093][ C1] usb 3-1: async_complete: urb error -71 [ 441.245874][ C1] usb 3-1: async_complete: urb error -71 [ 441.251611][ C1] usb 3-1: async_complete: urb error -71 [ 441.280084][ T792] get_1284_register: usb error -71 [ 441.456897][ T792] usb 3-1: USB disconnect, device number 31 [ 442.154230][ T792] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 442.433457][ T792] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 442.444000][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.475944][ T792] usb 2-1: config 0 descriptor?? [ 442.486933][ T792] pwc: Creative Labs Webcam 5 detected. [ 444.328235][T10265] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 444.470440][T10265] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 444.513123][T10265] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 444.546507][T10265] UDF-fs: Scanning with blocksize 512 failed [ 444.572490][T10265] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 444.628812][T10265] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 444.667176][T10265] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 444.680610][T10265] UDF-fs: Scanning with blocksize 1024 failed [ 444.688068][T10265] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 444.699220][T10265] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 444.710102][T10265] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 444.726697][T10265] UDF-fs: Scanning with blocksize 2048 failed [ 444.859215][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 444.904048][T10265] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 445.208550][T10265] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 445.259044][T10265] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 445.283989][T10265] UDF-fs: Scanning with blocksize 4096 failed [ 445.300519][T10265] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 445.882208][ T792] pwc: recv_control_msg error -71 req 02 val 2700 [ 445.890322][ T792] pwc: recv_control_msg error -71 req 04 val 1600 [ 445.926133][ T792] pwc: recv_control_msg error -71 req 02 val 2c00 [ 445.933056][ T792] pwc: recv_control_msg error -71 req 04 val 1000 [ 446.005851][ T792] pwc: recv_control_msg error -71 req 04 val 1300 [ 446.023758][ T792] pwc: recv_control_msg error -71 req 04 val 1400 [ 446.050116][ T792] pwc: recv_control_msg error -71 req 02 val 2000 [ 446.077932][ T792] pwc: recv_control_msg error -71 req 02 val 2100 [ 446.091112][ T792] pwc: recv_control_msg error -71 req 06 val 0600 [ 446.105066][ T792] pwc: recv_control_msg error -71 req 04 val 1500 [ 446.122732][ T792] pwc: recv_control_msg error -71 req 02 val 2500 [ 446.144266][ T792] pwc: recv_control_msg error -71 req 02 val 2400 [ 446.172241][ T792] pwc: recv_control_msg error -71 req 02 val 2600 [ 446.185689][ T792] pwc: recv_control_msg error -71 req 02 val 2900 [ 446.214115][ T792] pwc: recv_control_msg error -71 req 02 val 2800 [ 446.234835][ T792] pwc: recv_control_msg error -71 req 04 val 1100 [ 446.619679][ T792] pwc: recv_control_msg error -71 req 04 val 1200 [ 446.653175][ T792] pwc: Failed to power off camera (-71) [ 446.689541][ T792] pwc: Registered as video103. [ 446.709431][ T792] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 446.751997][ T792] usb 2-1: USB disconnect, device number 29 [ 446.962810][ T24] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 447.135809][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 447.146529][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 447.185672][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.253665][ T792] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 447.346132][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.394320][ T24] usb 1-1: string descriptor 0 read error: -22 [ 447.400634][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.552053][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.571742][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 447.580651][ T792] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 447.590166][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.603544][ T792] usb 2-1: Product: syz [ 447.608254][ T24] usb 1-1: 0:2 : does not exist [ 447.613339][ T792] usb 2-1: Manufacturer: syz [ 447.618490][ T792] usb 2-1: SerialNumber: syz [ 447.967124][ T30] audit: type=1400 audit(2000000097.033:835): avc: denied { setopt } for pid=10296 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 449.583899][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 449.653206][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 449.697567][ T24] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 449.782420][ T792] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 449.803231][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 449.833272][ T792] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 449.862137][ T792] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 449.879958][ T792] usb 2-1: media controller created [ 449.895057][ T24] usb 1-1: USB disconnect, device number 34 [ 449.910505][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.995448][ T792] zl10353_read_register: readreg error (reg=127, ret==-71) [ 450.052403][T10321] lo: Caught tx_queue_len zero misconfig [ 450.185095][ T792] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 450.210770][ T792] usb 2-1: USB disconnect, device number 30 [ 450.415139][T10329] sock: sock_timestamping_bind_phc: sock not bind to device [ 450.604087][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 451.173799][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 451.259369][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.301349][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.357563][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 451.386193][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.417251][ T9] usb 6-1: Product: syz [ 451.453198][ T9] usb 6-1: Manufacturer: syz [ 451.457859][ T9] usb 6-1: SerialNumber: syz [ 451.524297][ T9] usb 6-1: selecting invalid altsetting 1 [ 451.569853][ T9] usb 6-1: unit 6 not found! [ 451.819496][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.952781][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.938856][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 453.991851][ T9] usb 6-1: USB disconnect, device number 16 [ 454.051555][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.835468][ T30] audit: type=1400 audit(2000000104.500:836): avc: denied { read } for pid=10379 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 455.993254][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 456.163336][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 456.189898][ T24] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 456.208921][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.243615][ T24] usb 3-1: config 0 has no interface number 0 [ 456.267168][ T24] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.318310][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 456.332252][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.353766][ T24] usb 3-1: Product: syz [ 456.358442][ T24] usb 3-1: Manufacturer: syz [ 456.363135][ T24] usb 3-1: SerialNumber: syz [ 456.416764][ T24] usb 3-1: config 0 descriptor?? [ 456.448307][ T24] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 456.475396][ T24] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 457.403554][ T24] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 457.411568][ T24] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 457.483257][T10396] netlink: 'syz.2.1103': attribute type 10 has an invalid length. [ 457.537607][T10396] team0: Device veth1_macvtap failed to register rx_handler [ 457.652946][T10399] netlink: 'syz.2.1103': attribute type 15 has an invalid length. [ 457.693550][T10399] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1103'. [ 458.984395][ T30] audit: type=1400 audit(2000000107.139:837): avc: denied { listen } for pid=10403 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 459.022143][ T30] audit: type=1400 audit(2000000107.495:838): avc: denied { accept } for pid=10403 comm="syz.1.1101" path="socket:[26483]" dev="sockfs" ino=26483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 459.086174][T10405] netlink: 'syz.0.1109': attribute type 2 has an invalid length. [ 459.231620][ T24] usb 3-1: USB disconnect, device number 32 [ 459.969187][T10422] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 459.979011][T10422] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 459.988580][T10422] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 459.996296][T10422] UDF-fs: Scanning with blocksize 512 failed [ 460.003404][T10422] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 460.013175][T10422] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 460.022842][T10422] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 460.030479][T10422] UDF-fs: Scanning with blocksize 1024 failed [ 460.037459][T10422] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 460.047296][T10422] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 460.056928][T10422] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 460.064672][T10422] UDF-fs: Scanning with blocksize 2048 failed [ 460.071409][T10422] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 460.081295][T10422] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 460.091402][T10422] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 460.099086][T10422] UDF-fs: Scanning with blocksize 4096 failed [ 460.105155][T10422] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 461.625538][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 461.884514][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.893174][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.453933][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.493101][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.680560][ T24] usb 3-1: string descriptor 0 read error: -71 [ 462.691352][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 462.702994][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 462.746107][ T24] usb 3-1: config 0 descriptor?? [ 462.762931][ T24] usb 3-1: can't set config #0, error -71 [ 462.810552][ T24] usb 3-1: USB disconnect, device number 33 [ 463.094055][T10448] vlan3: entered promiscuous mode [ 463.099235][T10448] macvlan1: entered promiscuous mode [ 463.768534][ T30] audit: type=1400 audit(2000000111.921:839): avc: denied { create } for pid=10451 comm="syz.3.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 464.312398][ T30] audit: type=1400 audit(2000000111.921:840): avc: denied { bind } for pid=10451 comm="syz.3.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 465.155721][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1124'. [ 465.165383][T10465] nbd: must specify at least one socket [ 468.304142][ T5978] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 468.702101][ T5978] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 469.072245][ T5978] usb 3-1: config 0 has no interface number 1 [ 469.082753][ T5978] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 469.093171][ T5978] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.110184][ T5978] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 469.119527][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 469.128326][ T5978] usb 3-1: SerialNumber: syz [ 469.251083][ T5978] usb 3-1: config 0 descriptor?? [ 469.370832][ T5978] uvcvideo 3-1:0.199: Found UVC 0.00 device (0002:0000) [ 469.378962][ T5978] uvcvideo 3-1:0.199: No valid video chain found. [ 470.111580][T10484] netlink: 'syz.2.1128': attribute type 18 has an invalid length. [ 470.415472][ T5978] usb 3-1: USB disconnect, device number 34 [ 470.545765][T10522] raw_sendmsg: syz.1.1138 forgot to set AF_INET. Fix it! [ 472.920156][T10531] syzkaller0: entered promiscuous mode [ 472.925653][T10531] syzkaller0: entered allmulticast mode [ 474.330648][T10543] syzkaller0: entered promiscuous mode [ 474.336137][T10543] syzkaller0: entered allmulticast mode [ 474.530153][T10545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=10545 comm=syz.3.1144 [ 474.762863][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 475.027032][T10553] FAULT_INJECTION: forcing a failure. [ 475.027032][T10553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.052608][T10553] CPU: 0 UID: 0 PID: 10553 Comm: syz.5.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.052628][T10553] Tainted: [L]=SOFTLOCKUP [ 475.052632][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.052639][T10553] Call Trace: [ 475.052643][T10553] [ 475.052648][T10553] dump_stack_lvl+0x100/0x190 [ 475.052671][T10553] should_fail_ex.cold+0x5/0xa [ 475.052687][T10553] _copy_from_user+0x2e/0xd0 [ 475.052699][T10553] do_ipv6_setsockopt+0x74d/0x4510 [ 475.052720][T10553] ? __lock_acquire+0x3c0/0x2630 [ 475.052731][T10553] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 475.052755][T10553] ? find_held_lock+0x2b/0x80 [ 475.052769][T10553] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 475.052781][T10553] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 475.052794][T10553] ? avc_has_perm_noaudit+0x145/0x3b0 [ 475.052807][T10553] ? avc_has_perm+0x135/0x1e0 [ 475.052818][T10553] ? __pfx_avc_has_perm+0x10/0x10 [ 475.052831][T10553] ? get_pid_task+0x106/0x250 [ 475.052880][T10553] ? ipv6_setsockopt+0xcb/0x170 [ 475.052895][T10553] ipv6_setsockopt+0xcb/0x170 [ 475.052914][T10553] sctp_setsockopt+0x161/0xb370 [ 475.052936][T10553] ? __pfx_sctp_setsockopt+0x10/0x10 [ 475.052953][T10553] ? __fget_files+0x215/0x3d0 [ 475.052968][T10553] ? selinux_socket_setsockopt+0x6a/0x80 [ 475.052982][T10553] ? sock_common_setsockopt+0x2e/0xf0 [ 475.052999][T10553] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 475.053017][T10553] do_sock_setsockopt+0xf3/0x1d0 [ 475.053035][T10553] __sys_setsockopt+0x195/0x220 [ 475.053052][T10553] __x64_sys_setsockopt+0xbd/0x160 [ 475.053065][T10553] ? do_syscall_64+0x95/0xf80 [ 475.053080][T10553] ? lockdep_hardirqs_on+0x78/0x100 [ 475.053095][T10553] do_syscall_64+0x106/0xf80 [ 475.053108][T10553] ? clear_bhb_loop+0x40/0x90 [ 475.053123][T10553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.053135][T10553] RIP: 0033:0x7f199a99c799 [ 475.053146][T10553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.053157][T10553] RSP: 002b:00007f199b76f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 475.053168][T10553] RAX: ffffffffffffffda RBX: 00007f199ac15fa0 RCX: 00007f199a99c799 [ 475.053176][T10553] RDX: 0000000000000043 RSI: 0000000000000029 RDI: 0000000000000003 [ 475.053182][T10553] RBP: 00007f199b76f090 R08: 00000000000000c7 R09: 0000000000000000 [ 475.053189][T10553] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 475.053196][T10553] R13: 00007f199ac16038 R14: 00007f199ac15fa0 R15: 00007ffc0bbc8968 [ 475.053211][T10553] [ 475.981637][T10570] pim6reg: entered allmulticast mode [ 478.080600][ T5862] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 478.134307][T10594] SELinux: ebitmap start bit (24) is not a multiple of the map unit size (64) [ 478.215085][T10594] SELinux: failed to load policy [ 478.294517][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 478.307833][ T5862] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 478.316323][ T5862] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 478.351765][ T5862] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 478.370136][ T5862] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 478.391245][ T5862] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 478.411046][ T5862] usb 2-1: config 0 has no interface number 0 [ 478.434762][ T5862] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 478.475788][ T5862] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 478.489088][ T5862] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 478.700188][ T5862] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.742626][ T5862] usb 2-1: config 0 interface 125 has no altsetting 0 [ 478.768932][ T5862] usb 2-1: config 0 interface 125 has no altsetting 2 [ 478.854121][ T5862] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 478.868625][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.888916][ T5862] usb 2-1: Product: syz [ 478.904453][ T5862] usb 2-1: Manufacturer: syz [ 478.924551][ T5862] usb 2-1: SerialNumber: syz [ 478.964672][ T5862] usb 2-1: config 0 descriptor?? [ 479.012192][ T5862] usb 2-1: selecting invalid altsetting 2 [ 479.333553][ C1] usb 2-1: async_complete: urb error -71 [ 479.339324][ C1] usb 2-1: async_complete: urb error -71 [ 479.345070][ C1] usb 2-1: async_complete: urb error -71 [ 479.350801][ C1] usb 2-1: async_complete: urb error -71 [ 479.372107][ T5862] get_1284_register: usb error -71 [ 480.625395][T10610] : renamed from bond_slave_0 (while UP) [ 480.722665][T10612] netlink: 'syz.1.1163': attribute type 5 has an invalid length. [ 481.419013][ T5862] usb 2-1: USB disconnect, device number 31 [ 482.648798][T10639] netlink: 'syz.5.1169': attribute type 12 has an invalid length. [ 482.916376][T10646] netlink: 'syz.1.1172': attribute type 13 has an invalid length. [ 482.995979][ T5978] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 483.357095][T10652] FAULT_INJECTION: forcing a failure. [ 483.357095][T10652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.371332][T10652] CPU: 0 UID: 0 PID: 10652 Comm: syz.2.1173 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.371362][T10652] Tainted: [L]=SOFTLOCKUP [ 483.371369][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.371381][T10652] Call Trace: [ 483.371388][T10652] [ 483.371395][T10652] dump_stack_lvl+0x100/0x190 [ 483.371433][T10652] should_fail_ex.cold+0x5/0xa [ 483.371459][T10652] _copy_from_user+0x2e/0xd0 [ 483.371481][T10652] copy_msghdr_from_user+0x9f/0x4f0 [ 483.371516][T10652] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 483.371555][T10652] ? kvm_sched_clock_read+0x11/0x20 [ 483.371579][T10652] ? sched_clock+0x38/0x60 [ 483.371609][T10652] ? sched_clock_cpu+0x6c/0x570 [ 483.371645][T10652] ___sys_sendmsg+0x106/0x1e0 [ 483.371679][T10652] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.371712][T10652] ? __schedule+0x2fd3/0x6120 [ 483.371769][T10652] __sys_sendmsg+0x170/0x220 [ 483.371796][T10652] ? __pfx___sys_sendmsg+0x10/0x10 [ 483.371833][T10652] ? irqentry_exit+0x180/0x670 [ 483.371877][T10652] do_syscall_64+0x106/0xf80 [ 483.371903][T10652] ? clear_bhb_loop+0x40/0x90 [ 483.371929][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.371951][T10652] RIP: 0033:0x7f969f59c799 [ 483.371968][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.371989][T10652] RSP: 002b:00007f96a04f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.372008][T10652] RAX: ffffffffffffffda RBX: 00007f969f816090 RCX: 00007f969f59c799 [ 483.372022][T10652] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 483.372035][T10652] RBP: 00007f96a04f4090 R08: 0000000000000000 R09: 0000000000000000 [ 483.372047][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.372060][T10652] R13: 00007f969f816128 R14: 00007f969f816090 R15: 00007ffef8ef1518 [ 483.372089][T10652] [ 483.658901][ T5978] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 483.668079][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.897711][ T5978] pwc: Logitech/Cisco VT Camera webcam detected. [ 486.025337][T10670] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 486.127560][ T5978] pwc: Failed to set LED on/off time (-71) [ 486.155394][ T5978] pwc: send_video_command error -71 [ 486.171905][ T5978] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 486.202742][ T5978] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 486.265990][ T5892] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 486.273901][ T5978] usb 1-1: USB disconnect, device number 35 [ 486.322162][T10673] usb usb7: usbfs: process 10673 (syz.0.1178) did not claim interface 0 before use [ 486.454917][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 486.459632][T10675] tipc: Enabling of bearer rejected, failed to enable media [ 486.481790][ T5892] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 486.489177][ T5892] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 486.554720][ T5892] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.631778][ T5892] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.661312][ T5892] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.693349][ T5892] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 486.703517][ T5892] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 486.757354][ T5892] usb 3-1: config 168 interface 0 has no altsetting 0 [ 486.768655][ T5892] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 486.776117][ T5892] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 486.795218][ T5892] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.808128][ T5892] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.811057][ T5862] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 486.822709][ T5892] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.962384][ T5892] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 486.994789][ T5892] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 487.563637][ T5892] usb 3-1: config 168 interface 0 has no altsetting 0 [ 487.569821][ T30] audit: type=1326 audit(2000000134.193:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 487.571521][ T5892] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 487.601302][ T5892] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 487.619656][T10688] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 487.627148][ T7147] Bluetooth: hci5: Frame reassembly failed (-84) [ 487.641881][ T5892] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 487.644582][ T5862] usb 2-1: unable to get BOS descriptor or descriptor too short [ 487.661160][ T5892] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.680605][ T5892] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 487.684021][ T5862] usb 2-1: not running at top speed; connect to a high speed hub [ 487.705588][ T30] audit: type=1326 audit(2000000134.193:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 487.717715][ T5892] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 487.736237][ T5862] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 487.750569][ T5862] usb 2-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 487.764016][ T30] audit: type=1326 audit(2000000134.193:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 487.857631][ T5862] usb 2-1: config 1 interface 0 has no altsetting 0 [ 487.868423][ T5892] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 487.868465][ T30] audit: type=1326 audit(2000000134.315:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 487.906118][ T5892] usb 3-1: config 168 interface 0 has no altsetting 0 [ 487.922034][ T5892] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 487.931403][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.939861][ T5862] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 487.939875][ T5892] usb 3-1: Product: syz [ 487.939894][ T5892] usb 3-1: Manufacturer: syz [ 487.965163][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.973178][ T5862] usb 2-1: Product: syz [ 487.997788][ T5892] usb 3-1: SerialNumber: syz [ 488.009810][ T5862] usb 2-1: Manufacturer: syz [ 488.014432][ T5862] usb 2-1: SerialNumber: syz [ 488.028439][T10692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.113860][ T30] audit: type=1326 audit(2000000134.315:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 488.179843][T10676] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 488.270272][ T30] audit: type=1400 audit(2000000134.633:846): avc: denied { shutdown } for pid=10689 comm="syz.5.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 488.394737][ T5892] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 488.414507][ T5862] usbhid 2-1:1.0: can't add hid device: -71 [ 488.423940][ T5862] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 488.467419][ T5862] usb 2-1: USB disconnect, device number 32 [ 488.528264][ T5892] usb 3-1: USB disconnect, device number 35 [ 489.136239][T10700] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 489.210751][ T30] audit: type=1400 audit(2000000135.728:847): avc: denied { execute } for pid=10698 comm="syz.1.1186" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 489.394228][T10702] QAT: failed to copy from user cfg_data. [ 490.391145][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 490.809075][ T5819] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 491.296945][T10716] overlayfs: failed lookup in lower (newroot/164, name='file0', err=-40): overlapping layers [ 492.200875][T10721] random: crng reseeded on system resumption [ 493.190779][ T5892] kernel read not supported for file /cpu/0/msr (pid: 5892 comm: kworker/0:5) [ 493.864371][T10720] afs: Unknown parameter 'dyf' [ 494.955518][T10732] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 494.966900][T10732] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 494.976552][T10732] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 494.984230][T10732] UDF-fs: Scanning with blocksize 512 failed [ 494.995549][T10732] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 495.006063][T10732] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 495.015691][T10732] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 495.023430][T10732] UDF-fs: Scanning with blocksize 1024 failed [ 495.033306][T10732] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 495.043631][T10732] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 495.053634][T10732] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 495.061369][T10732] UDF-fs: Scanning with blocksize 2048 failed [ 495.070444][T10732] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 495.080652][T10732] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 495.090282][T10732] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 495.097998][T10732] UDF-fs: Scanning with blocksize 4096 failed [ 495.104111][T10732] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 495.485184][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'. [ 495.494331][T10734] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1196'. [ 496.174149][T10751] only policy match revision 0 supported [ 496.174201][T10751] unable to load match [ 497.024861][ T30] audit: type=1326 audit(2000000143.046:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6537d9c799 code=0x7ffc0000 [ 497.084083][T10759] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 497.109672][ T7148] Bluetooth: hci5: Frame reassembly failed (-84) [ 497.109724][ T30] audit: type=1326 audit(2000000143.046:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6537d9c799 code=0x7ffc0000 [ 497.141192][ T30] audit: type=1326 audit(2000000143.046:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6537d9c799 code=0x7ffc0000 [ 497.141294][ T7148] Bluetooth: hci5: Frame reassembly failed (-84) [ 497.519442][ T30] audit: type=1326 audit(2000000143.130:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6537d9c799 code=0x7ffc0000 [ 497.614876][ T30] audit: type=1326 audit(2000000143.130:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6537d9c799 code=0x7ffc0000 [ 497.932358][T10765] netlink: 'syz.3.1200': attribute type 1 has an invalid length. [ 498.247917][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'. [ 498.486145][T10770] tipc: Started in network mode [ 498.491155][T10770] tipc: Node identity 84e, cluster identity 4711 [ 498.497525][T10770] tipc: Node number set to 2126 [ 499.238856][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 499.239431][T10706] Bluetooth: hci5: command 0x1003 tx timeout [ 500.934206][ T30] audit: type=1400 audit(2000000146.714:853): avc: denied { ioctl } for pid=10798 comm="syz.5.1210" path="socket:[28325]" dev="sockfs" ino=28325 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 501.931858][ T5862] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 501.933629][T10812] xt_cgroup: invalid path, errno=-2 [ 502.134714][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 502.147169][ T5862] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 502.155709][ T5862] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 502.177383][ T5862] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 502.224083][ T5862] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 502.245644][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 502.272562][ T5862] usb 4-1: config 0 has no interface number 0 [ 502.348404][ T5862] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 502.369932][ T5862] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 502.511461][ T5862] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 502.540774][ T5862] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.554309][ T5862] usb 4-1: config 0 interface 125 has no altsetting 0 [ 502.561278][ T5862] usb 4-1: config 0 interface 125 has no altsetting 2 [ 502.573772][ T30] audit: type=1326 audit(2000000148.249:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 502.602060][ T5862] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 502.632270][T10825] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 502.650796][ T7148] Bluetooth: hci5: Frame reassembly failed (-84) [ 502.659504][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.680784][ T5862] usb 4-1: Product: syz [ 502.692582][ T5862] usb 4-1: Manufacturer: syz [ 502.697259][ T5862] usb 4-1: SerialNumber: syz [ 502.708971][ T5862] usb 4-1: config 0 descriptor?? [ 502.745509][ T30] audit: type=1326 audit(2000000148.249:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 502.829236][ T30] audit: type=1326 audit(2000000148.249:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 502.883791][ T5862] usb 4-1: selecting invalid altsetting 2 [ 502.904749][ T30] audit: type=1326 audit(2000000148.352:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 502.969486][ T30] audit: type=1326 audit(2000000148.352:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969f59c799 code=0x7ffc0000 [ 503.346462][ C1] usb 4-1: async_complete: urb error -71 [ 503.352243][ C1] usb 4-1: async_complete: urb error -71 [ 503.357980][ C1] usb 4-1: async_complete: urb error -71 [ 503.367608][ T5862] get_1284_register: usb error -71 [ 503.379841][ T5862] usb 4-1: USB disconnect, device number 34 [ 504.716516][ T30] audit: type=1400 audit(2000000150.252:859): avc: denied { listen } for pid=10850 comm="syz.5.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 504.795690][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 504.795799][T10706] Bluetooth: hci5: command 0x1003 tx timeout [ 505.418438][ T30] audit: type=1400 audit(2000000150.813:860): avc: denied { read } for pid=10849 comm="syz.3.1226" path="socket:[28431]" dev="sockfs" ino=28431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 505.455749][ T30] audit: type=1400 audit(2000000150.944:861): avc: denied { remount } for pid=10843 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 506.007965][T10860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1227'. [ 506.586051][ T7148] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.611378][ T7148] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.621620][ T7148] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.664603][ T7148] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.739135][ T30] audit: type=1400 audit(2000000152.142:862): avc: denied { getopt } for pid=10849 comm="syz.3.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.786471][T10851] smc: net device wlan0 applied user defined pnetid SYZ0 [ 507.027569][T10870] netlink: 'syz.3.1231': attribute type 2 has an invalid length. [ 507.077060][T10870] 9p: Bad value for 'rfdno' [ 509.291773][ T30] audit: type=1400 audit(2000000154.519:863): avc: denied { append } for pid=10892 comm="syz.3.1238" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 509.417275][T10896] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 509.518854][ T5862] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 509.701836][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 509.754568][ T5862] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 509.785209][ T5862] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 509.877678][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 509.899381][ T5862] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 510.661055][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 510.803600][ T5862] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.196673][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 511.324004][ T5862] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 511.356929][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.369688][T10920] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 511.381041][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 511.389229][ T24] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 511.435021][ T24] usb 4-1: config 0 has no interface number 0 [ 511.441199][ T24] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 511.494987][ T24] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 511.514802][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 511.542882][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.560710][ T24] usb 4-1: Product: syz [ 511.577323][ T24] usb 4-1: Manufacturer: syz [ 511.584357][ T24] usb 4-1: SerialNumber: syz [ 511.612905][ T24] usb 4-1: config 0 descriptor?? [ 511.784574][ T5862] usb 2-1: usb_control_msg returned -71 [ 511.801125][ T5862] usbtmc 2-1:16.0: can't read capabilities [ 511.833708][ T5862] usb 2-1: USB disconnect, device number 33 [ 512.127293][ T5978] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 512.256686][T10942] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1248'. [ 512.414012][ T24] radio-si470x 4-1:0.35: si470x_get_report: usb_control_msg returned -110 [ 512.430265][ T5978] usb 6-1: Using ep0 maxpacket: 8 [ 512.447892][ T5978] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 512.452876][ T24] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 512.473647][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.498490][ T5978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 512.573614][ T5978] pvrusb2: ********** [ 512.594599][ T5978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 512.616622][ T24] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 512.716777][ T5978] pvrusb2: Important functionality might not be entirely working. [ 512.736580][ T5978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 512.771693][ T5978] pvrusb2: ********** [ 512.794178][ T2336] pvrusb2: Invalid write control endpoint [ 512.959632][ T24] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 512.983406][ T2336] pvrusb2: Invalid write control endpoint [ 513.111819][ T5862] usb 6-1: USB disconnect, device number 17 [ 513.151471][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 513.292092][ T24] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 513.320260][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 513.347941][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 513.379024][ T24] usb 3-1: config 0 has no interface number 0 [ 513.395139][ T2336] pvrusb2: Device being rendered inoperable [ 513.413126][ T24] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 513.459173][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 513.475726][ T24] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 513.506077][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 513.525795][ T24] usb 3-1: config 0 interface 113 has no altsetting 0 [ 513.551147][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 513.586098][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.613180][ T2336] pvrusb2: Attached sub-driver cx25840 [ 513.625163][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 513.651672][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.663814][ T24] usb 3-1: Product: syz [ 513.682509][ T24] usb 3-1: Manufacturer: syz [ 513.722208][ T24] usb 3-1: SerialNumber: syz [ 513.755945][ T24] usb 3-1: config 0 descriptor?? [ 513.775971][ T24] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 513.953796][ T5862] usb 4-1: USB disconnect, device number 35 [ 514.231655][T10954] tipc: Started in network mode [ 514.241808][T10954] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 514.271033][T10954] tipc: Enabled bearer , priority 10 [ 514.620802][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.674282][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.682134][ T5978] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 514.995628][T10966] option changes via remount are deprecated (pid=10961 comm=syz.1.1255) [ 515.324740][ T5978] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 515.337064][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.345178][ T976] tipc: Node number set to 4269801491 [ 515.382151][ T5978] usb 6-1: Product: syz [ 515.392041][ T5978] usb 6-1: Manufacturer: syz [ 515.406482][ T5978] usb 6-1: SerialNumber: syz [ 515.438103][ T5978] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 515.510801][ T30] audit: type=1400 audit(2000000160.349:864): avc: denied { firmware_load } for pid=976 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 515.659784][ T976] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 516.055969][T10981] only policy match revision 0 supported [ 516.056022][T10981] unable to load match [ 516.723477][ T24] usb 3-1: USB disconnect, device number 36 [ 516.851577][ T976] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 516.896329][ T976] ath9k_htc: Failed to initialize the device [ 516.970732][ T976] usb 6-1: ath9k_htc: USB layer deinitialized [ 516.982914][T10991] batadv_slave_0: Caught tx_queue_len zero misconfig [ 518.406761][ T5862] usb 6-1: USB disconnect, device number 18 [ 518.544035][ T30] audit: type=1400 audit(2000000163.194:865): avc: denied { call } for pid=11002 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 518.563781][T11003] binder_alloc: 11002: pid 11002 spamming oneway? 1 buffers allocated for a total size of 4096 [ 518.586649][T11003] binder_alloc: 11002: pid 11002 spamming oneway? 2 buffers allocated for a total size of 5120 [ 518.599323][T11004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11004 comm=syz.5.1265 [ 518.613520][T11003] binder: 11002:11003 ioctl 4140 0 returned -22 [ 518.815777][ T5978] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 519.894515][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.306187][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.368030][ T5978] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 520.383026][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.398941][ T5978] usb 2-1: config 0 descriptor?? [ 521.195922][ T30] audit: type=1400 audit(2000000165.093:866): avc: denied { create } for pid=11016 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 521.226727][ T30] audit: type=1400 audit(2000000165.103:867): avc: denied { write } for pid=11016 comm="syz.2.1268" path="socket:[30861]" dev="sockfs" ino=30861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 521.281401][ T30] audit: type=1400 audit(2000000165.149:868): avc: denied { create } for pid=11016 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 521.338567][ T30] audit: type=1400 audit(2000000165.149:869): avc: denied { getopt } for pid=11016 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 521.410441][ T5978] steelseries 0003:1038:12B6.0008: report_id 0 is invalid [ 521.438712][ T5978] steelseries 0003:1038:12B6.0008: item 0 4 1 8 parsing failed [ 521.468204][ T5978] steelseries 0003:1038:12B6.0008: probe with driver steelseries failed with error -22 [ 521.623992][ T24] usb 2-1: USB disconnect, device number 34 [ 521.809525][T11032] only policy match revision 0 supported [ 521.809544][T11032] unable to load match [ 523.094817][T11036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1277'. [ 523.113242][T11036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1277'. [ 523.134439][T11036] afs: Unknown parameter '·Ðf' [ 523.263862][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1277'. [ 523.290801][T11041] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 525.237601][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 525.450817][T11061] netlink: 'syz.1.1279': attribute type 1 has an invalid length. [ 527.158096][T11078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.540588][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.580040][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.317674][T11085] only policy match revision 0 supported [ 528.317729][T11085] unable to load match [ 528.846729][T11093] vivid-007: disconnect [ 529.534424][T11084] vivid-007: reconnect [ 530.067981][ T792] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 530.232205][ T792] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 530.241464][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.252830][T11110] comedi comedi0: pcl724: I/O port conflict (0x9,4) [ 530.252962][ T792] usb 4-1: Product: syz [ 530.294311][ T792] usb 4-1: Manufacturer: syz [ 530.407507][ T792] usb 4-1: SerialNumber: syz [ 531.469481][ T792] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 531.502456][ T5862] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 531.924181][ T976] usb 4-1: USB disconnect, device number 36 [ 532.058720][T11119] netlink: 'syz.5.1294': attribute type 1 has an invalid length. [ 532.120572][T11091] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 532.270434][T11091] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 532.297166][T11119] bond2: entered promiscuous mode [ 532.317967][T11126] fuse: Bad value for 'rootmode' [ 532.359301][T11091] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 532.371109][T11119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.188557][ T5862] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 533.195558][ T5862] ath9k_htc: Failed to initialize the device [ 533.211420][ T976] usb 4-1: ath9k_htc: USB layer deinitialized [ 533.224896][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1293'. [ 533.351469][T11091] UDF-fs: Scanning with blocksize 512 failed [ 533.456469][T11091] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 533.605450][T11091] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 533.842324][T11091] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 534.069477][ T30] audit: type=1400 audit(2000000177.680:870): avc: denied { create } for pid=11133 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.246047][T11091] UDF-fs: Scanning with blocksize 1024 failed [ 534.271947][T11091] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 534.344051][ T30] audit: type=1400 audit(2000000177.699:871): avc: denied { write } for pid=11133 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.345259][T11091] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 534.534734][ T30] audit: type=1400 audit(2000000177.708:872): avc: denied { read } for pid=11133 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.686231][T11147] sp0: Synchronizing with TNC [ 535.528020][T11091] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 535.539286][ T30] audit: type=1400 audit(2000000177.895:873): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.802816][ T30] audit: type=1400 audit(2000000177.895:874): avc: denied { open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.829308][ T30] audit: type=1400 audit(2000000177.895:875): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.868769][T11091] UDF-fs: Scanning with blocksize 2048 failed [ 536.096472][ T30] audit: type=1400 audit(2000000178.026:876): avc: denied { prog_load } for pid=11143 comm="syz.1.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 536.259366][T11091] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 536.319651][ T30] audit: type=1400 audit(2000000178.026:877): avc: denied { bpf } for pid=11143 comm="syz.1.1300" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 536.344797][ T30] audit: type=1400 audit(2000000178.026:878): avc: denied { perfmon } for pid=11143 comm="syz.1.1300" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 536.373120][ T30] audit: type=1400 audit(2000000178.026:879): avc: denied { execmem } for pid=11143 comm="syz.1.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 536.541149][T11091] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 536.571625][T11153] futex_wake_op: syz.5.1303 tries to shift op by -1; fix this program [ 536.622457][T11091] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 536.656867][T11091] UDF-fs: Scanning with blocksize 4096 failed [ 536.665772][T11091] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 536.792087][T11165] netlink: 'syz.1.1306': attribute type 1 has an invalid length. [ 536.830707][T11165] bond4: entered promiscuous mode [ 536.837534][T11165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 536.854171][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1306'. [ 536.908688][T11165] bond4: entered allmulticast mode [ 538.478806][T11179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1309'. [ 540.038715][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 540.038730][ T30] audit: type=1400 audit(2000000183.313:918): avc: denied { ioctl } for pid=11177 comm="syz.0.1310" path="socket:[30135]" dev="sockfs" ino=30135 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 540.192643][T11192] sp0: Synchronizing with TNC [ 540.285225][ T30] audit: type=1400 audit(2000000183.538:919): avc: denied { read write } for pid=11185 comm="syz.1.1312" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 540.285261][ T30] audit: type=1400 audit(2000000183.538:920): avc: denied { open } for pid=11185 comm="syz.1.1312" path="/dev/raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 540.285286][ T30] audit: type=1400 audit(2000000183.538:921): avc: denied { ioctl } for pid=11185 comm="syz.1.1312" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 540.378729][ T30] audit: type=1400 audit(2000000183.622:922): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.380026][ T30] audit: type=1400 audit(2000000183.622:923): avc: denied { search } for pid=5473 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.380074][ T30] audit: type=1400 audit(2000000183.622:924): avc: denied { search } for pid=5473 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.380111][ T30] audit: type=1400 audit(2000000183.622:925): avc: denied { read } for pid=5473 comm="dhcpcd" name="n113" dev="tmpfs" ino=6394 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 540.380135][ T30] audit: type=1400 audit(2000000183.622:926): avc: denied { open } for pid=5473 comm="dhcpcd" path="/run/udev/data/n113" dev="tmpfs" ino=6394 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 540.380159][ T30] audit: type=1400 audit(2000000183.622:927): avc: denied { getattr } for pid=5473 comm="dhcpcd" path="/run/udev/data/n113" dev="tmpfs" ino=6394 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 540.540387][ T5892] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 540.787722][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 540.796786][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.796821][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.796848][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 540.796891][ T5892] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 540.796916][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.799354][ T5892] usb 2-1: config 0 descriptor?? [ 541.489616][ T5892] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0009/input/input25 [ 541.677762][ T5892] appleir 0003:05AC:8241.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 541.865452][ T5892] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 542.196828][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 542.238031][ T5892] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.238065][ T5892] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 542.238092][ T5892] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 542.238119][ T5892] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.238161][ T5892] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.238188][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.483640][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.484099][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.486155][ T5892] usb 4-1: GET_CAPABILITIES returned 0 [ 542.486201][ T5892] usbtmc 4-1:16.0: can't read capabilities [ 542.536094][T11261] No source specified [ 542.713075][T11185] [U] è [ 542.722010][ T5892] usb 4-1: USB disconnect, device number 37 [ 543.953242][ T792] usb 2-1: USB disconnect, device number 35 [ 545.433847][T11283] program syz.3.1323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.460185][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 545.460231][ T30] audit: type=1400 audit(2000000188.311:952): avc: denied { read } for pid=11280 comm="syz.3.1323" name="sg0" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 545.553597][T11266] syz.2.1318 (11266) used greatest stack depth: 19296 bytes left [ 545.818596][T11287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1324'. [ 546.129207][ T30] audit: type=1400 audit(2000000188.320:953): avc: denied { open } for pid=11280 comm="syz.3.1323" path="/dev/sg0" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 546.196804][ T30] audit: type=1400 audit(2000000188.348:954): avc: denied { setopt } for pid=11280 comm="syz.3.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 546.298242][T11289] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1326'. [ 546.490178][ T30] audit: type=1326 audit(2000000189.340:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133eb9c799 code=0x7ffc0000 [ 546.543236][ T30] audit: type=1326 audit(2000000189.340:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133eb9c799 code=0x7ffc0000 [ 546.574131][T11296] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 546.589446][T11231] Bluetooth: hci5: Frame reassembly failed (-84) [ 546.603725][ T30] audit: type=1326 audit(2000000189.368:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f133eb9c799 code=0x7ffc0000 [ 546.692270][ T30] audit: type=1326 audit(2000000189.518:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133eb9c799 code=0x7ffc0000 [ 546.912700][ T30] audit: type=1326 audit(2000000189.518:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133eb9c799 code=0x7ffc0000 [ 548.244951][ T30] audit: type=1400 audit(2000000190.706:960): avc: denied { ioctl } for pid=11302 comm="syz.1.1329" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 548.319737][ T30] audit: type=1400 audit(2000000190.725:961): avc: denied { ioctl } for pid=11302 comm="syz.1.1329" path="socket:[30250]" dev="sockfs" ino=30250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 548.465474][T11314] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1331'. [ 548.737775][T10706] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 548.913943][ T792] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 548.982334][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 549.093107][ T792] usb 2-1: Using ep0 maxpacket: 32 [ 549.110272][ T792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 549.121196][ T24] usb 1-1: device descriptor read/64, error -71 [ 549.131744][ T792] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 549.140168][ T792] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 549.153241][ T792] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 549.162505][ T792] usb 2-1: config 128 has no interface number 0 [ 549.208268][ T5862] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 549.215945][ T792] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 196, changing to 11 [ 549.238155][ T792] usb 2-1: config 128 interface 127 has no altsetting 0 [ 549.247394][ T792] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 549.259587][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.267771][ T792] usb 2-1: Product: syz [ 549.272015][ T792] usb 2-1: Manufacturer: syz [ 549.277047][ T792] usb 2-1: SerialNumber: syz [ 549.377827][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 549.388487][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 549.395202][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.406336][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.517835][ T24] usb 1-1: device descriptor read/64, error -71 [ 549.554968][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 549.644334][ T792] usb 2-1: USB disconnect, device number 36 [ 549.650919][ T24] usb usb1-port1: attempt power cycle [ 549.661231][T10934] udevd[10934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.666479][ T5862] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 549.759263][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.801519][ T5862] usb 4-1: config 0 descriptor?? [ 550.040242][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 550.072864][ T24] usb 1-1: device descriptor read/8, error -71 [ 550.274203][ T5862] hid_parser_main: 24 callbacks suppressed [ 550.274218][ T5862] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 550.296664][ T5862] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 550.314490][ T5862] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 550.328818][ T5862] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 550.335780][ T5862] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 550.353004][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 550.384594][ T5862] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 550.404009][ T24] usb 1-1: device descriptor read/8, error -71 [ 550.483664][ T5862] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 550.492238][T11322] random: crng reseeded on system resumption [ 550.509024][ T5862] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 550.521438][ T24] usb usb1-port1: unable to enumerate USB device [ 550.658436][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 550.970993][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 550.971010][ T30] audit: type=1400 audit(2000000193.542:969): avc: denied { map } for pid=11335 comm="syz.5.1339" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 551.024111][ T5862] usb 4-1: USB disconnect, device number 38 [ 551.044159][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 551.081056][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 551.121626][ T30] audit: type=1400 audit(2000000193.542:970): avc: denied { read write } for pid=11335 comm="syz.5.1339" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 551.146705][ T24] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 551.173037][ T30] audit: type=1400 audit(2000000193.673:971): avc: denied { read write } for pid=11335 comm="syz.5.1339" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 551.197705][ T30] audit: type=1400 audit(2000000193.673:972): avc: denied { open } for pid=11335 comm="syz.5.1339" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 551.233620][ T30] audit: type=1400 audit(2000000193.673:973): avc: denied { ioctl } for pid=11335 comm="syz.5.1339" path="/dev/usbmon2" dev="devtmpfs" ino=722 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 551.480522][ T30] audit: type=1400 audit(2000000193.991:974): avc: denied { mounton } for pid=11330 comm="syz.2.1337" path="/252/file0" dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 551.523998][ T30] audit: type=1400 audit(2000000194.000:975): avc: denied { create } for pid=11330 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 551.566802][ T30] audit: type=1400 audit(2000000194.010:976): avc: denied { setopt } for pid=11330 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 551.616627][ T30] audit: type=1400 audit(2000000194.094:977): avc: denied { create } for pid=11346 comm="syz.5.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 551.639126][ T30] audit: type=1400 audit(2000000194.169:978): avc: denied { unlink } for pid=11345 comm="syz.3.1341" name="#33" dev="tmpfs" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 551.732205][T11351] IPVS: dh: FWM 3 0x00000003 - no destination available [ 551.996398][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1347'. [ 552.040615][T11359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1345'. [ 552.279677][T11365] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 552.330457][ T249] Bluetooth: hci5: Frame reassembly failed (-84) [ 554.284269][T10706] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 554.351846][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 554.373714][T11409] netlink: 'syz.2.1358': attribute type 30 has an invalid length. [ 554.457566][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 554.469084][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 554.688148][T11412] netlink: 'syz.2.1358': attribute type 30 has an invalid length. [ 555.000070][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 555.189929][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 555.230582][ T24] usb 2-1: config 0 has no interface number 0 [ 555.506311][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 555.524160][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.572160][ T24] usb 2-1: Product: syz [ 555.582484][ T24] usb 2-1: Manufacturer: syz [ 555.593983][ T24] usb 2-1: SerialNumber: syz [ 555.612704][ T24] usb 2-1: config 0 descriptor?? [ 555.929165][ T24] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 555.967666][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 555.989272][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 556.010611][ T24] usb 2-1: media controller created [ 556.048502][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.199940][T11449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.208749][T11449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.480084][T11455] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1371'. [ 556.494549][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 556.494760][ T30] audit: type=1400 audit(2000000198.698:1065): avc: denied { map } for pid=11451 comm="syz.5.1370" path="/dev/comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.654807][ T30] audit: type=1400 audit(2000000198.698:1066): avc: denied { execute } for pid=11451 comm="syz.5.1370" path="/dev/comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.703322][ T30] audit: type=1326 audit(2000000198.904:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11454 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 556.765448][T11459] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 556.853149][T11231] Bluetooth: hci5: Frame reassembly failed (-84) [ 556.876903][ T30] audit: type=1326 audit(2000000198.904:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11454 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 556.930868][ T30] audit: type=1326 audit(2000000198.904:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11454 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 557.080551][ T30] audit: type=1326 audit(2000000199.250:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11454 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 557.125020][ T30] audit: type=1326 audit(2000000199.250:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11454 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9c799 code=0x7ffc0000 [ 557.202915][ T24] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 557.319858][ T24] usb 2-1: USB disconnect, device number 37 [ 557.321292][ T30] audit: type=1400 audit(2000000199.334:1072): avc: denied { create } for pid=11460 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 557.510195][ T30] audit: type=1400 audit(2000000199.652:1073): avc: denied { create } for pid=11460 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 557.718018][ T30] audit: type=1400 audit(2000000199.652:1074): avc: denied { setopt } for pid=11460 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 558.124259][T11480] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1378'. [ 558.995257][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 562.150530][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 562.150551][ T30] audit: type=1400 audit(2000000203.339:1082): avc: denied { setopt } for pid=11490 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 562.177156][ T30] audit: type=1400 audit(2000000203.461:1083): avc: denied { getopt } for pid=11490 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 562.211936][ T30] audit: type=1400 audit(2000000203.658:1084): avc: denied { read write } for pid=11490 comm="syz.1.1380" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 562.422907][ T30] audit: type=1400 audit(2000000203.658:1085): avc: denied { open } for pid=11490 comm="syz.1.1380" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 562.717733][ T30] audit: type=1400 audit(2000000203.789:1086): avc: denied { ioctl } for pid=11490 comm="syz.1.1380" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 562.747797][ T30] audit: type=1400 audit(2000000204.200:1087): avc: denied { name_bind } for pid=11502 comm="syz.3.1383" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 562.994066][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'. [ 563.105448][T11514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.558041][ T30] audit: type=1400 audit(2000000204.210:1088): avc: denied { connect } for pid=11502 comm="syz.3.1383" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 563.611525][ T30] audit: type=1400 audit(2000000204.322:1089): avc: denied { ioctl } for pid=11504 comm="syz.2.1384" path="socket:[30545]" dev="sockfs" ino=30545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 563.659104][ T30] audit: type=1400 audit(2000000205.220:1090): avc: denied { create } for pid=11510 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 563.681777][ T30] audit: type=1400 audit(2000000205.305:1091): avc: denied { connect } for pid=11510 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 565.191416][T11562] Mount JFS Failure: -22 [ 565.195783][T11562] jfs_mount failed w/return code = -22 [ 566.015823][ T5862] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 566.022657][T11580] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1406'. [ 566.176234][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 566.176299][ T5892] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 566.183526][ T5862] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.201771][ T792] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 566.219818][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 566.227228][ T5862] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 566.236424][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.272741][ T5862] usb 3-1: config 0 descriptor?? [ 566.378500][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 566.379192][ T792] usb 4-1: Using ep0 maxpacket: 8 [ 566.409117][ T792] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 566.426946][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 566.430479][ T792] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 566.451689][ T792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 566.463220][ T792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 566.463540][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 566.493020][ T792] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.508639][ T792] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 566.522672][ T5892] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 566.524288][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.540370][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=237, SerialNumber=3 [ 566.553058][ T5892] usb 6-1: Product: syz [ 566.557481][ T5892] usb 6-1: SerialNumber: syz [ 566.592940][ T5892] usb 6-1: config 0 descriptor?? [ 566.607670][T11576] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 566.822094][ T792] usb 4-1: GET_CAPABILITIES returned 0 [ 566.829409][ T792] usbtmc 4-1:16.0: can't read capabilities [ 566.899971][T11587] netlink: 'syz.0.1407': attribute type 4 has an invalid length. [ 567.063266][ T5892] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 567.080179][ T5862] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 567.124729][ T5892] usb 6-1: USB disconnect, device number 19 [ 567.148948][ T976] usb 4-1: USB disconnect, device number 39 [ 567.566610][T11595] No source specified [ 567.572584][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 567.572600][ T30] audit: type=1400 audit(2000000209.067:1109): avc: denied { read write } for pid=11594 comm="syz.5.1408" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 567.606881][ T30] audit: type=1400 audit(2000000209.067:1110): avc: denied { open } for pid=11594 comm="syz.5.1408" path="/dev/video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 567.750099][T11543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 567.783408][ T5892] usb 3-1: USB disconnect, device number 37 [ 567.903826][ T30] audit: type=1400 audit(2000000209.385:1111): avc: denied { write } for pid=11598 comm="syz.1.1409" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 567.981534][ T30] audit: type=1400 audit(2000000209.450:1112): avc: denied { ioctl } for pid=11598 comm="syz.1.1409" path="socket:[32170]" dev="sockfs" ino=32170 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 568.050519][ T30] audit: type=1400 audit(2000000209.450:1113): avc: denied { ioctl } for pid=11598 comm="syz.1.1409" path="socket:[32170]" dev="sockfs" ino=32170 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 568.125391][ T30] audit: type=1400 audit(2000000209.497:1114): avc: denied { read } for pid=11599 comm="syz.0.1410" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 568.176157][ T30] audit: type=1400 audit(2000000209.497:1115): avc: denied { ioctl } for pid=11599 comm="syz.0.1410" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 568.238152][ T30] audit: type=1400 audit(2000000209.694:1116): avc: denied { read open } for pid=11607 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.300221][ T30] audit: type=1400 audit(2000000209.694:1117): avc: denied { getattr } for pid=11607 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.479388][ T30] audit: type=1400 audit(2000000209.881:1118): avc: denied { ioctl } for pid=11594 comm="syz.5.1408" path="/dev/video1" dev="devtmpfs" ino=933 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 570.055143][ T5892] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 570.457965][ T5892] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 570.468217][ T5892] usb 4-1: config 0 has no interface number 0 [ 571.225507][ T792] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 571.267098][ T5892] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 571.284086][ T5892] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 571.293251][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 571.302009][ T5892] usb 4-1: Manufacturer: syz [ 571.308771][ T5892] usb 4-1: SerialNumber: syz [ 571.330595][ T5892] usb 4-1: config 0 descriptor?? [ 572.363451][ T5892] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 572.384963][ T5892] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 572.459540][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 572.466486][ T792] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 572.478667][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 572.490656][ T5892] usb 4-1: USB disconnect, device number 40 [ 572.511775][ T792] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 572.540140][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.980358][ T792] usb 2-1: Product: syz [ 573.023782][ T792] usb 2-1: Manufacturer: syz [ 573.034835][ T792] usb 2-1: SerialNumber: syz [ 573.094035][ T792] usb 2-1: config 0 descriptor?? [ 573.106296][ T792] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 573.128993][ T792] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 573.432373][ T792] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 573.462479][ T792] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 573.510346][ T792] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 573.543112][ T792] em28xx 2-1:0.0: No AC97 audio processor [ 573.574601][ T792] usb 2-1: USB disconnect, device number 38 [ 573.597497][ T792] em28xx 2-1:0.0: Disconnecting em28xx [ 573.684398][ T792] em28xx 2-1:0.0: Freeing device [ 573.789164][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 573.789181][ T30] audit: type=1400 audit(2000000214.887:1132): avc: denied { create } for pid=11670 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 573.936917][ T30] audit: type=1400 audit(2000000214.906:1133): avc: denied { connect } for pid=11670 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 574.027970][ T30] audit: type=1400 audit(2000000214.906:1134): avc: denied { ioctl } for pid=11670 comm="syz.3.1424" path="socket:[32338]" dev="sockfs" ino=32338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 574.094457][ T30] audit: type=1400 audit(2000000214.906:1135): avc: denied { write } for pid=11670 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 574.168157][ T30] audit: type=1400 audit(2000000214.962:1136): avc: denied { read write } for pid=11662 comm="syz.1.1423" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 574.196040][T11679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1426'. [ 574.286936][ T30] audit: type=1400 audit(2000000214.962:1137): avc: denied { open } for pid=11662 comm="syz.1.1423" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 574.341897][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 574.641939][T11689] mkiss: ax0: crc mode is auto. [ 574.813375][ T5892] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 575.021314][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 575.098943][ T30] audit: type=1400 audit(2000000216.057:1138): avc: denied { read write } for pid=11692 comm="syz.1.1430" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 575.159140][ T30] audit: type=1400 audit(2000000216.057:1139): avc: denied { open } for pid=11692 comm="syz.1.1430" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 575.191977][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'. [ 575.216781][ T5892] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 575.224882][ T5892] usb 4-1: config 95 has no interface number 0 [ 575.258799][ T5892] usb 4-1: config 95 interface 1 has no altsetting 0 [ 575.283832][ T5892] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 575.316529][T11694] FAULT_INJECTION: forcing a failure. [ 575.316529][T11694] name failslab, interval 1, probability 0, space 0, times 0 [ 575.316774][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.344348][T11694] CPU: 1 UID: 0 PID: 11694 Comm: syz.1.1430 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.344381][T11694] Tainted: [L]=SOFTLOCKUP [ 575.344388][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.344399][T11694] Call Trace: [ 575.344405][T11694] [ 575.344412][T11694] dump_stack_lvl+0x100/0x190 [ 575.344450][T11694] should_fail_ex.cold+0x5/0xa [ 575.344479][T11694] should_failslab+0xc2/0x120 [ 575.344501][T11694] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 575.344533][T11694] ? __alloc_skb+0x140/0x710 [ 575.344564][T11694] __alloc_skb+0x140/0x710 [ 575.344587][T11694] ? __alloc_skb+0x5b7/0x710 [ 575.344612][T11694] ? __pfx___alloc_skb+0x10/0x10 [ 575.344634][T11694] ? rtnl_prop_list_size+0x144/0x2c0 [ 575.344661][T11694] ? if_nlmsg_size+0x4a4/0xb30 [ 575.344691][T11694] rtmsg_ifinfo_build_skb+0x81/0x260 [ 575.344733][T11694] rtmsg_ifinfo+0xa4/0x1b0 [ 575.344769][T11694] netif_state_change+0x17f/0x380 [ 575.344801][T11694] ? __pfx_netif_state_change+0x10/0x10 [ 575.344838][T11694] ? netif_change_flags+0x10d/0x160 [ 575.344867][T11694] do_setlink.isra.0+0x31c5/0x3e50 [ 575.344903][T11694] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 575.344934][T11694] ? __lock_acquire+0x4a5/0x2630 [ 575.344955][T11694] ? lockdep_hardirqs_on+0x78/0x100 [ 575.344993][T11694] ? lock_acquire+0x1cf/0x380 [ 575.345019][T11694] ? rcu_is_watching+0x12/0xc0 [ 575.345045][T11694] ? trace_contention_end+0x140/0x180 [ 575.345069][T11694] ? __mutex_lock+0x26a/0x1b90 [ 575.345099][T11694] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 575.345130][T11694] ? rtnl_newlink+0x8bb/0x2380 [ 575.345162][T11694] ? __pfx___mutex_lock+0x10/0x10 [ 575.345192][T11694] ? rcu_is_watching+0x12/0xc0 [ 575.345216][T11694] ? cap_capable+0x107/0x460 [ 575.345258][T11694] rtnl_newlink+0x1b79/0x2380 [ 575.345296][T11694] ? __pfx_rtnl_newlink+0x10/0x10 [ 575.345322][T11694] ? find_held_lock+0x2b/0x80 [ 575.345349][T11694] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 575.345371][T11694] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 575.345402][T11694] ? irqentry_exit+0x180/0x670 [ 575.345428][T11694] ? lockdep_hardirqs_on+0x78/0x100 [ 575.345457][T11694] ? __lock_acquire+0x4a5/0x2630 [ 575.345493][T11694] ? find_held_lock+0x2b/0x80 [ 575.345520][T11694] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 575.345546][T11694] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 575.345576][T11694] ? __pfx_rtnl_newlink+0x10/0x10 [ 575.345604][T11694] rtnetlink_rcv_msg+0x95e/0xe90 [ 575.345634][T11694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.345671][T11694] ? ref_tracker_free+0x37e/0x6c0 [ 575.345699][T11694] netlink_rcv_skb+0x159/0x420 [ 575.345736][T11694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.345766][T11694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.345809][T11694] ? netlink_deliver_tap+0x1ae/0xcc0 [ 575.345844][T11694] netlink_unicast+0x5aa/0x870 [ 575.345878][T11694] ? __pfx_netlink_unicast+0x10/0x10 [ 575.345920][T11694] netlink_sendmsg+0x8b0/0xda0 [ 575.345956][T11694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.345999][T11694] ____sys_sendmsg+0x9e1/0xb70 [ 575.346030][T11694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.346063][T11694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.346111][T11694] ___sys_sendmsg+0x190/0x1e0 [ 575.346147][T11694] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.346219][T11694] __sys_sendmsg+0x170/0x220 [ 575.346246][T11694] ? __pfx___sys_sendmsg+0x10/0x10 [ 575.346294][T11694] do_syscall_64+0x106/0xf80 [ 575.346321][T11694] ? clear_bhb_loop+0x40/0x90 [ 575.346348][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.346370][T11694] RIP: 0033:0x7f6537d9c799 [ 575.346387][T11694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.346407][T11694] RSP: 002b:00007f6538bba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.346428][T11694] RAX: ffffffffffffffda RBX: 00007f6538016090 RCX: 00007f6537d9c799 [ 575.346442][T11694] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 575.346455][T11694] RBP: 00007f6538bba090 R08: 0000000000000000 R09: 0000000000000000 [ 575.346468][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.346480][T11694] R13: 00007f6538016128 R14: 00007f6538016090 R15: 00007ffd4e55d0e8 [ 575.346512][T11694] [ 575.356029][ T5892] usb 4-1: Product: syz [ 575.897053][T11702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.935087][ T30] audit: type=1400 audit(2000000216.862:1140): avc: denied { create } for pid=11701 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 576.103853][T11702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.177878][ T5892] usb 4-1: Manufacturer: syz [ 576.183065][ T5892] usb 4-1: SerialNumber: syz [ 576.392073][ T5978] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 576.552243][ T5978] usb 1-1: Using ep0 maxpacket: 8 [ 576.570101][ T5978] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 576.580724][ T5978] usb 1-1: config 179 has no interface number 0 [ 576.599503][ T5978] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 576.612960][ T5978] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 576.615157][ T5892] usb 4-1: USB disconnect, device number 41 [ 576.633126][ T5978] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 576.648733][ T5978] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 576.661221][ T5978] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 576.676148][ T5978] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 576.701671][T11591] udevd[11591]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 576.711301][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.765827][T11703] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 577.022549][ T5892] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input29 [ 577.210463][ T30] audit: type=1400 audit(2000000218.088:1141): avc: denied { ioctl } for pid=11701 comm="syz.0.1433" path="socket:[33130]" dev="sockfs" ino=33130 ioctlcmd=0x89fd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 577.284815][ T24] usb 1-1: USB disconnect, device number 40 [ 577.284841][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 577.299243][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 577.807592][T11733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 577.818280][T11733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 577.827957][T11733] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 577.835911][T11733] UDF-fs: Scanning with blocksize 512 failed [ 577.846758][T11733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 577.857779][T11733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 577.867459][T11733] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 577.875134][T11733] UDF-fs: Scanning with blocksize 1024 failed [ 577.885059][T11733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 577.895338][T11733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 577.904989][T11733] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 577.913129][T11733] UDF-fs: Scanning with blocksize 2048 failed [ 577.922172][T11733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 577.932403][T11733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 577.942059][T11733] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 577.949731][T11733] UDF-fs: Scanning with blocksize 4096 failed [ 577.955886][T11733] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 579.155618][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 579.155634][ T30] audit: type=1400 audit(2000000219.912:1156): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 579.232412][ T30] audit: type=1400 audit(2000000219.978:1157): avc: denied { bpf } for pid=11749 comm="syz.2.1444" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 579.294903][ T30] audit: type=1400 audit(2000000219.997:1158): avc: denied { create } for pid=11750 comm="syz.3.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 579.323915][ T30] audit: type=1400 audit(2000000220.006:1159): avc: denied { map_create } for pid=11749 comm="syz.2.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 579.344191][ T30] audit: type=1400 audit(2000000220.025:1160): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 579.369126][ T30] audit: type=1400 audit(2000000220.072:1161): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 579.497140][ T30] audit: type=1400 audit(2000000220.156:1162): avc: denied { create } for pid=11755 comm="syz.2.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 579.571714][ T30] audit: type=1400 audit(2000000220.193:1163): avc: denied { allowed } for pid=11753 comm="syz.3.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 579.622298][ T30] audit: type=1400 audit(2000000220.193:1164): avc: denied { read } for pid=11753 comm="syz.3.1446" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 579.754504][ T30] audit: type=1400 audit(2000000220.212:1165): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 581.292527][T11786] netlink: 'syz.0.1458': attribute type 8 has an invalid length. [ 581.371785][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1458'. [ 581.542795][T11786] bond0: entered promiscuous mode [ 581.595652][T11786] bond_slave_0: entered promiscuous mode [ 581.646991][T11786] bond_slave_1: entered promiscuous mode [ 581.667859][T11786] gretap0: entered promiscuous mode [ 581.709507][T11786] team_slave_0: entered promiscuous mode [ 581.719607][T11786] team_slave_0: left promiscuous mode [ 581.737622][T11786] bond0: left promiscuous mode [ 581.742419][T11786] bond_slave_0: left promiscuous mode [ 581.756597][T11786] bond_slave_1: left promiscuous mode [ 581.774439][T11786] gretap0: left promiscuous mode [ 582.370493][T11805] only policy match revision 0 supported [ 582.370506][T11805] unable to load match [ 582.460259][T11807] bridge1: entered allmulticast mode [ 582.485448][T11807] team0: Port device bridge1 added [ 584.514438][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 584.514456][ T30] audit: type=1400 audit(2000000224.928:1284): avc: denied { read } for pid=11829 comm="syz.0.1471" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 584.598868][ T30] audit: type=1400 audit(2000000224.966:1285): avc: denied { create } for pid=11829 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 584.624506][ T30] audit: type=1400 audit(2000000224.966:1286): avc: denied { read } for pid=11829 comm="syz.0.1471" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 584.653426][ T30] audit: type=1400 audit(2000000224.966:1287): avc: denied { create } for pid=11829 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 584.698391][ T30] audit: type=1400 audit(2000000224.966:1288): avc: denied { create } for pid=11829 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 584.727045][ T30] audit: type=1400 audit(2000000224.966:1289): avc: denied { create } for pid=11829 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 584.767484][ T30] audit: type=1400 audit(2000000224.994:1290): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 584.792208][ T30] audit: type=1400 audit(2000000225.013:1291): avc: denied { create } for pid=11836 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 585.159685][ T30] audit: type=1400 audit(2000000225.144:1292): avc: denied { execmem } for pid=11838 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 585.255250][ T30] audit: type=1400 audit(2000000225.162:1293): avc: denied { write } for pid=11836 comm="syz.1.1473" name="mcfilter" dev="proc" ino=4026533001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 587.480754][T11860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11860 comm=syz.0.1479 [ 587.648432][T11871] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 587.854863][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 587.925914][T11860] bond4: (slave bridge0): making interface the new active one [ 587.944418][T11860] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 588.815593][T11892] sit0: Caught tx_queue_len zero misconfig [ 589.388727][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 590.148047][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 590.148059][ T30] audit: type=1400 audit(2000000230.197:1394): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 590.213249][ T30] audit: type=1400 audit(2000000230.253:1395): avc: denied { create } for pid=11913 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 590.246724][ T30] audit: type=1400 audit(2000000230.291:1396): avc: denied { read } for pid=11913 comm="syz.1.1495" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=0 [ 590.385662][T11916] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 590.476315][ T30] audit: type=1400 audit(2000000230.412:1397): avc: denied { allowed } for pid=11913 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 590.583111][ T30] audit: type=1400 audit(2000000230.412:1398): avc: denied { read write } for pid=11913 comm="syz.1.1495" name="cec1" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 590.640613][T11916] 8021q: adding VLAN 0 to HW filter on device bond5 [ 590.734990][ T30] audit: type=1400 audit(2000000230.412:1399): avc: denied { create } for pid=11913 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 590.808390][ T30] audit: type=1400 audit(2000000230.412:1400): avc: denied { create } for pid=11913 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 591.010062][ T30] audit: type=1400 audit(2000000230.543:1401): avc: denied { read write } for pid=6975 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 591.086471][ T30] audit: type=1400 audit(2000000230.571:1402): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 591.217517][ T30] audit: type=1400 audit(2000000230.581:1403): avc: denied { create } for pid=11918 comm="syz.5.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 591.629881][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1503'. [ 593.196847][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.210812][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 595.425315][T12000] syzkaller0: entered promiscuous mode [ 595.445209][T12000] syzkaller0: entered allmulticast mode [ 595.509979][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 595.509991][ T30] audit: type=1400 audit(2000000235.222:1546): avc: denied { create } for pid=12003 comm="syz.2.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 595.614248][ T30] audit: type=1400 audit(2000000235.297:1547): avc: denied { read } for pid=12001 comm="syz.5.1523" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=0 [ 595.638095][ T30] audit: type=1400 audit(2000000235.297:1548): avc: denied { create } for pid=12001 comm="syz.5.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 595.658370][ T30] audit: type=1400 audit(2000000235.297:1549): avc: denied { create } for pid=12001 comm="syz.5.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 595.680552][ T30] audit: type=1400 audit(2000000235.297:1550): avc: denied { create } for pid=12001 comm="syz.5.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 595.803125][ T30] audit: type=1400 audit(2000000235.494:1551): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 595.953383][ T30] audit: type=1400 audit(2000000235.522:1552): avc: denied { execmem } for pid=12007 comm="syz.3.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 596.049083][ T30] audit: type=1400 audit(2000000235.531:1553): avc: denied { read write } for pid=12003 comm="syz.2.1524" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 596.192988][ T30] audit: type=1400 audit(2000000235.540:1554): avc: denied { read write } for pid=6975 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 596.269173][ T30] audit: type=1400 audit(2000000235.597:1555): avc: denied { read } for pid=12009 comm="syz.5.1527" dev="nsfs" ino=4026533635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 596.825629][T12035] FAULT_INJECTION: forcing a failure. [ 596.825629][T12035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.101521][T12035] CPU: 1 UID: 0 PID: 12035 Comm: syz.5.1531 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.101555][T12035] Tainted: [L]=SOFTLOCKUP [ 597.101562][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.101580][T12035] Call Trace: [ 597.101586][T12035] [ 597.101594][T12035] dump_stack_lvl+0x100/0x190 [ 597.101633][T12035] should_fail_ex.cold+0x5/0xa [ 597.101660][T12035] _copy_to_user+0x32/0xd0 [ 597.101682][T12035] simple_read_from_buffer+0xcb/0x170 [ 597.101703][T12035] proc_fail_nth_read+0x1af/0x230 [ 597.101721][T12035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 597.101738][T12035] ? rw_verify_area+0xce/0x6d0 [ 597.101754][T12035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 597.101770][T12035] vfs_read+0x1e4/0xb30 [ 597.101789][T12035] ? __pfx_vfs_read+0x10/0x10 [ 597.101806][T12035] ? __fget_files+0x215/0x3d0 [ 597.101822][T12035] ? __fget_files+0x21f/0x3d0 [ 597.101838][T12035] ksys_read+0x12a/0x250 [ 597.101855][T12035] ? __pfx_ksys_read+0x10/0x10 [ 597.101877][T12035] do_syscall_64+0x106/0xf80 [ 597.101893][T12035] ? clear_bhb_loop+0x40/0x90 [ 597.101907][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.101920][T12035] RIP: 0033:0x7f199a95cfce [ 597.101930][T12035] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 597.101941][T12035] RSP: 002b:00007f199b76efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 597.101953][T12035] RAX: ffffffffffffffda RBX: 00007f199b76f6c0 RCX: 00007f199a95cfce [ 597.101960][T12035] RDX: 000000000000000f RSI: 00007f199b76f0a0 RDI: 0000000000000004 [ 597.101967][T12035] RBP: 00007f199b76f090 R08: 0000000000000000 R09: 0000000000000000 [ 597.101974][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.101981][T12035] R13: 00007f199ac16038 R14: 00007f199ac15fa0 R15: 00007ffc0bbc8968 [ 597.101996][T12035] [ 598.001529][T12047] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1540'. [ 598.253253][T12059] FAULT_INJECTION: forcing a failure. [ 598.253253][T12059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.418255][T12059] CPU: 0 UID: 0 PID: 12059 Comm: syz.0.1542 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.418286][T12059] Tainted: [L]=SOFTLOCKUP [ 598.418291][T12059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.418297][T12059] Call Trace: [ 598.418302][T12059] [ 598.418306][T12059] dump_stack_lvl+0x100/0x190 [ 598.418330][T12059] should_fail_ex.cold+0x5/0xa [ 598.418346][T12059] _copy_from_user+0x2e/0xd0 [ 598.418358][T12059] copy_msghdr_from_user+0x9f/0x4f0 [ 598.418378][T12059] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 598.418404][T12059] ___sys_sendmsg+0x106/0x1e0 [ 598.418425][T12059] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.418462][T12059] __sys_sendmsg+0x170/0x220 [ 598.418480][T12059] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.418505][T12059] do_syscall_64+0x106/0xf80 [ 598.418520][T12059] ? clear_bhb_loop+0x40/0x90 [ 598.418534][T12059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.418547][T12059] RIP: 0033:0x7f26c4f9c799 [ 598.418560][T12059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.418579][T12059] RSP: 002b:00007f26c5edd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.418599][T12059] RAX: ffffffffffffffda RBX: 00007f26c5215fa0 RCX: 00007f26c4f9c799 [ 598.418612][T12059] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 598.418625][T12059] RBP: 00007f26c5edd090 R08: 0000000000000000 R09: 0000000000000000 [ 598.418638][T12059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.418650][T12059] R13: 00007f26c5216038 R14: 00007f26c5215fa0 R15: 00007ffd083a6408 [ 598.418681][T12059] [ 600.876199][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 600.876211][ T30] audit: type=1400 audit(2000000240.238:1715): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 601.433784][T12098] futex_wake_op: syz.3.1557 tries to shift op by 32; fix this program [ 601.484313][ T30] audit: type=1400 audit(2000000240.809:1716): avc: denied { write } for pid=12090 comm="syz.1.1555" name="sockstat" dev="proc" ino=4026533011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 601.561432][ T30] audit: type=1400 audit(2000000240.884:1717): avc: denied { read } for pid=12096 comm="syz.3.1557" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 601.704070][ T30] audit: type=1400 audit(2000000240.884:1718): avc: denied { read } for pid=12090 comm="syz.1.1555" dev="nsfs" ino=4026532950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 601.817097][ T30] audit: type=1400 audit(2000000240.940:1719): avc: denied { read } for pid=12096 comm="syz.3.1557" dev="nsfs" ino=4026533149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 602.212852][ T30] audit: type=1400 audit(2000000240.940:1720): avc: denied { execmem } for pid=12096 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 602.396943][ T30] audit: type=1400 audit(2000000240.987:1721): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 602.499959][T12106] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 602.511766][ T30] audit: type=1400 audit(2000000241.108:1722): avc: denied { prog_load } for pid=12096 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 602.803215][ T30] audit: type=1400 audit(2000000241.165:1723): avc: denied { create } for pid=12101 comm="syz.0.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 602.848068][T12106] 8021q: adding VLAN 0 to HW filter on device bond5 [ 602.911083][ T30] audit: type=1400 audit(2000000241.165:1724): avc: denied { create } for pid=12096 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 604.116416][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1570'. [ 606.264417][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 606.264432][ T30] audit: type=1400 audit(2000000245.282:1823): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 606.410498][ T30] audit: type=1400 audit(2000000245.394:1824): avc: denied { create } for pid=12163 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 606.437000][ T30] audit: type=1400 audit(2000000245.404:1825): avc: denied { create } for pid=12163 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 606.473485][ T30] audit: type=1400 audit(2000000245.404:1826): avc: denied { create } for pid=12163 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 607.100964][ T30] audit: type=1400 audit(2000000245.413:1827): avc: denied { prog_load } for pid=12163 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 607.125579][ T30] audit: type=1400 audit(2000000245.535:1828): avc: denied { read } for pid=12169 comm="syz.3.1580" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 607.223990][ T30] audit: type=1400 audit(2000000245.535:1829): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 607.301185][ T30] audit: type=1400 audit(2000000245.619:1830): avc: denied { read } for pid=12171 comm="syz.1.1581" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 607.347463][ T30] audit: type=1400 audit(2000000245.619:1831): avc: denied { create } for pid=12171 comm="syz.1.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 607.461325][ T30] audit: type=1400 audit(2000000245.675:1832): avc: denied { allowed } for pid=12169 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 607.665655][T12193] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 609.871939][T10706] Bluetooth: hci5: command 0x1003 tx timeout [ 609.881731][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 610.074145][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1609'. [ 611.429521][T12283] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 611.473557][T11231] Bluetooth: hci5: Frame reassembly failed (-84) [ 611.661511][ T30] kauditd_printk_skb: 245 callbacks suppressed [ 611.661522][ T30] audit: type=1400 audit(2000000250.326:2078): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 612.060554][ T30] audit: type=1400 audit(2000000250.700:2079): avc: denied { prog_load } for pid=12288 comm="syz.2.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 612.095893][ T30] audit: type=1400 audit(2000000250.738:2080): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 612.142848][ T30] audit: type=1400 audit(2000000250.785:2081): avc: denied { read write } for pid=6975 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 612.331049][ T30] audit: type=1400 audit(2000000250.925:2082): avc: denied { create } for pid=12292 comm="syz.5.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 612.403035][ T30] audit: type=1400 audit(2000000250.925:2083): avc: denied { create } for pid=12292 comm="syz.5.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 612.443277][ T30] audit: type=1400 audit(2000000250.925:2084): avc: denied { create } for pid=12292 comm="syz.5.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 612.465259][ T30] audit: type=1400 audit(2000000250.925:2085): avc: denied { read } for pid=12292 comm="syz.5.1625" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 612.488811][ T30] audit: type=1400 audit(2000000251.009:2086): avc: denied { create } for pid=12290 comm="syz.2.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 612.510885][ T30] audit: type=1400 audit(2000000251.009:2087): avc: denied { create } for pid=12290 comm="syz.2.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 613.657779][T10706] Bluetooth: hci5: command 0x1003 tx timeout [ 613.657888][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 613.693688][T12311] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1628'. [ 614.352188][T12335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28852 sclass=netlink_route_socket pid=12335 comm=syz.5.1639 [ 615.156648][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1646'. [ 615.750643][T12370] syz.2.1651 (12370): attempted to duplicate a private mapping with mremap. This is not supported. [ 617.159315][ T30] kauditd_printk_skb: 2639 callbacks suppressed [ 617.159332][ T30] audit: type=1400 audit(2000000255.183:4664): avc: denied { execute } for pid=12403 comm="syz.1.1662" name="file1" dev="tmpfs" ino=1844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 617.207202][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 617.238297][ T5473] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 617.261122][ T30] audit: type=1400 audit(2000000255.407:4665): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 617.282525][ T5473] audit: backlog limit exceeded [ 617.300841][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 617.381030][ T5473] audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 [ 617.401552][ T30] audit: type=1400 audit(2000000255.407:4666): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 617.535915][ T5473] audit: backlog limit exceeded [ 617.585453][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.066923][T12410] FAULT_INJECTION: forcing a failure. [ 618.066923][T12410] name failslab, interval 1, probability 0, space 0, times 0 [ 618.146149][T12410] CPU: 1 UID: 0 PID: 12410 Comm: syz.3.1665 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.146183][T12410] Tainted: [L]=SOFTLOCKUP [ 618.146191][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.146202][T12410] Call Trace: [ 618.146209][T12410] [ 618.146217][T12410] dump_stack_lvl+0x100/0x190 [ 618.146255][T12410] should_fail_ex.cold+0x5/0xa [ 618.146282][T12410] ? constrain_params_by_rules+0x175/0xcc0 [ 618.146306][T12410] should_failslab+0xc2/0x120 [ 618.146327][T12410] __kmalloc_noprof+0xe0/0x850 [ 618.146352][T12410] ? __kernel_text_address+0xd/0x30 [ 618.146382][T12410] constrain_params_by_rules+0x175/0xcc0 [ 618.146419][T12410] ? __pfx_stack_trace_save+0x10/0x10 [ 618.146448][T12410] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 618.146489][T12410] ? __mutex_lock+0x26a/0x1b90 [ 618.146518][T12410] ? snd_interval_refine+0x2d0/0x580 [ 618.146551][T12410] snd_pcm_hw_refine+0x7e7/0xad0 [ 618.146581][T12410] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 618.146611][T12410] ? do_raw_spin_lock+0x128/0x260 [ 618.146641][T12410] ? mark_held_locks+0x40/0x70 [ 618.146679][T12410] snd_pcm_hw_params+0x3f1/0x1cb0 [ 618.146705][T12410] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 618.146739][T12410] ? kfree+0x1f6/0x6b0 [ 618.146761][T12410] ? snd_pcm_hw_param_last+0x2dc/0x660 [ 618.146798][T12410] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 618.146824][T12410] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 618.146864][T12410] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 618.146906][T12410] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 618.146935][T12410] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 618.146993][T12410] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 618.147028][T12410] ? __pfx___mutex_lock+0x10/0x10 [ 618.147054][T12410] ? find_held_lock+0x2b/0x80 [ 618.147104][T12410] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 618.147131][T12410] snd_pcm_oss_get_formats+0x7d/0x350 [ 618.147153][T12410] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 618.147187][T12410] snd_pcm_oss_ioctl+0x17d7/0x3720 [ 618.147211][T12410] ? __fget_files+0x215/0x3d0 [ 618.147232][T12410] ? hook_file_ioctl_common+0x146/0x410 [ 618.147267][T12410] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 618.147295][T12410] ? selinux_file_ioctl+0x139/0x290 [ 618.147323][T12410] ? selinux_file_ioctl+0xb4/0x290 [ 618.147355][T12410] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 618.147379][T12410] __x64_sys_ioctl+0x18e/0x210 [ 618.147414][T12410] do_syscall_64+0x106/0xf80 [ 618.147440][T12410] ? clear_bhb_loop+0x40/0x90 [ 618.147466][T12410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.147488][T12410] RIP: 0033:0x7f133eb9c799 [ 618.147507][T12410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.147526][T12410] RSP: 002b:00007f133fb21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.147547][T12410] RAX: ffffffffffffffda RBX: 00007f133ee15fa0 RCX: 00007f133eb9c799 [ 618.147561][T12410] RDX: 0000200000000640 RSI: 00000000c0045005 RDI: 0000000000000003 [ 618.147574][T12410] RBP: 00007f133fb21090 R08: 0000000000000000 R09: 0000000000000000 [ 618.147586][T12410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 618.147599][T12410] R13: 00007f133ee16038 R14: 00007f133ee15fa0 R15: 00007ffd39f62548 [ 618.147631][T12410] [ 620.206530][T12448] netlink: 'syz.5.1681': attribute type 11 has an invalid length. [ 620.904591][T12458] vlan1: Caught tx_queue_len zero misconfig [ 620.959719][T12461] netlink: 'syz.5.1685': attribute type 10 has an invalid length. [ 620.989554][T12461] bond0: (slave wlan1): Opening slave failed [ 621.282371][T12471] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 621.295350][ T1160] Bluetooth: hci5: Frame reassembly failed (-84) [ 621.419679][T12476] --map-set only usable from mangle table [ 621.646355][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 622.033520][T12483] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 622.514530][ T30] kauditd_printk_skb: 7121 callbacks suppressed [ 622.514547][ T30] audit: type=1400 audit(2000000260.489:9890): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 622.545306][ T30] audit: type=1400 audit(2000000260.489:9891): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 622.567748][ T30] audit: type=1400 audit(2000000260.489:9892): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 622.590244][ T30] audit: type=1400 audit(2000000260.489:9893): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 622.613483][ T30] audit: type=1400 audit(2000000260.489:9894): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 622.636485][ T30] audit: type=1400 audit(2000000260.489:9895): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 622.659400][ T30] audit: type=1400 audit(2000000260.489:9896): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 622.676999][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 622.680701][ T30] audit: type=1400 audit(2000000260.489:9897): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 622.708224][ T30] audit: type=1400 audit(2000000260.489:9898): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 623.457691][T10706] Bluetooth: hci5: command 0x1003 tx timeout [ 623.465568][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 625.272475][T12570] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1725'. [ 626.088250][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1735'. [ 627.867498][ T30] kauditd_printk_skb: 6609 callbacks suppressed [ 627.867514][ T30] audit: type=1400 audit(2000000265.486:16506): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 627.982354][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 627.997177][ T30] audit: type=1400 audit(2000000265.505:16507): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 628.229950][ T5473] audit: audit_lost=660 audit_rate_limit=0 audit_backlog_limit=64 [ 628.251512][ T5473] audit: backlog limit exceeded [ 628.256473][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.280224][ T30] audit: type=1400 audit(2000000265.505:16508): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 628.282934][ T5473] audit: audit_lost=661 audit_rate_limit=0 audit_backlog_limit=64 [ 628.333420][ T5815] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.358284][ T5815] audit: audit_lost=662 audit_rate_limit=0 audit_backlog_limit=64 [ 628.371024][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1746'. [ 631.941608][T12692] netlink: 'syz.0.1764': attribute type 21 has an invalid length. [ 631.950189][T12692] IPv6: NLM_F_CREATE should be specified when creating new route [ 633.305817][ T30] kauditd_printk_skb: 4190 callbacks suppressed [ 633.305836][ T30] audit: type=1400 audit(2000000270.567:20071): avc: denied { read write } for pid=6975 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 633.481701][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.489429][T12721] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.493136][ T5473] audit: audit_lost=872 audit_rate_limit=0 audit_backlog_limit=64 [ 633.504209][T12721] audit: audit_lost=873 audit_rate_limit=0 audit_backlog_limit=64 [ 633.505080][ T30] audit: type=1400 audit(2000000270.502:20070): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 633.538875][ T5473] audit: backlog limit exceeded [ 633.544076][T12721] audit: backlog limit exceeded [ 633.554371][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.561465][ T5473] audit: audit_lost=874 audit_rate_limit=0 audit_backlog_limit=64 [ 635.961942][T12770] xt_TCPMSS: Only works on TCP SYN packets [ 637.461576][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.486277][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.924959][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.991681][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.397161][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.468778][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.659646][ T30] kauditd_printk_skb: 9337 callbacks suppressed [ 638.659663][ T30] audit: type=1400 audit(2000000275.602:27395): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 638.722144][ T30] audit: type=1400 audit(2000000275.602:27396): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 638.817022][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.840530][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.856910][ T30] audit: type=1400 audit(2000000275.602:27397): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 638.859341][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.914537][ T5473] audit: audit_lost=1546 audit_rate_limit=0 audit_backlog_limit=64 [ 638.921893][ T30] audit: type=1400 audit(2000000275.602:27398): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 638.922745][ T5473] audit: backlog limit exceeded [ 638.955038][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.975455][ T30] audit: type=1400 audit(2000000275.602:27399): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 638.975638][ T5473] audit: audit_lost=1547 audit_rate_limit=0 audit_backlog_limit=64 [ 639.168001][T12803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1799'. [ 639.230274][ T49] bridge_slave_1: left allmulticast mode [ 639.236001][ T49] bridge_slave_1: left promiscuous mode [ 639.299768][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.346751][ T49] bridge_slave_0: left allmulticast mode [ 639.352961][ T49] bridge_slave_0: left promiscuous mode [ 639.366480][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.992314][ T49] bond0 (unregistering): (slave 30): Releasing backup interface [ 640.012414][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.035377][ T49] bond0 (unregistering): Released all slaves [ 640.089410][ T49] bond1 (unregistering): Released all slaves [ 640.125019][ T49] bond2 (unregistering): Released all slaves [ 640.136509][ T49] bond3 (unregistering): Released all slaves [ 640.147804][ T49] bond4 (unregistering): Released all slaves [ 640.273235][ T49] tipc: Disabling bearer [ 640.299062][ T49] tipc: Left network mode [ 640.895226][ T49] hsr_slave_0: left promiscuous mode [ 640.926692][ T49] hsr_slave_1: left promiscuous mode [ 640.949525][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.956897][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.000404][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.007793][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.053796][ T49] veth0_macvtap: left promiscuous mode [ 641.060329][ T49] veth1_vlan: left promiscuous mode [ 641.068470][ T49] veth0_vlan: left promiscuous mode [ 641.954557][ T49] team0 (unregistering): Port device team_slave_1 removed [ 641.992313][ T49] team0 (unregistering): Port device team_slave_0 removed [ 642.698686][ T49] IPVS: stop unused estimator thread 0... [ 643.667518][T12860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1817'. [ 644.013217][ T30] kauditd_printk_skb: 9007 callbacks suppressed [ 644.013234][ T30] audit: type=1400 audit(2000000280.599:36406): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 644.047845][ T30] audit: type=1400 audit(2000000280.637:36407): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 644.071851][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.078460][ T5473] audit: audit_lost=1548 audit_rate_limit=0 audit_backlog_limit=64 [ 644.086448][ T5473] audit: backlog limit exceeded [ 644.091507][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.098102][ T5473] audit: audit_lost=1549 audit_rate_limit=0 audit_backlog_limit=64 [ 644.198439][ T30] audit: type=1400 audit(2000000280.637:36408): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 644.223029][ T5473] audit: backlog limit exceeded [ 644.239309][ T30] audit: type=1400 audit(2000000280.637:36409): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 644.593837][T12869] erspan0: entered promiscuous mode [ 645.767046][T12874] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1826'. [ 645.791188][T12877] only policy match revision 0 supported [ 645.791207][T12877] unable to load match [ 645.804968][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1826'. [ 646.132721][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1824'. [ 646.148584][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1824'. [ 646.157980][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1824'. [ 648.616956][T12906] Device name cannot be null; rc = [-22] [ 649.367002][ T30] kauditd_printk_skb: 13087 callbacks suppressed [ 649.367020][ T30] audit: type=1400 audit(2000000285.624:49194): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 649.396143][ T30] audit: type=1400 audit(2000000285.624:49195): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 649.417926][ T30] audit: type=1400 audit(2000000285.624:49196): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 649.440831][ T30] audit: type=1400 audit(2000000285.624:49197): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 649.463143][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 649.469657][ T5473] audit: audit_lost=1651 audit_rate_limit=0 audit_backlog_limit=64 [ 649.477771][ T30] audit: type=1400 audit(2000000285.624:49198): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 649.499059][ T30] audit: type=1400 audit(2000000285.624:49199): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 649.499069][ T5473] audit: backlog limit exceeded [ 649.499101][ T30] audit: type=1400 audit(2000000285.624:49200): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 650.718384][T12917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1834'. [ 650.731131][T12917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1834'. [ 650.740609][T12917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1834'. [ 651.815436][T12922] only policy match revision 0 supported [ 651.815454][T12922] unable to load match [ 654.720592][ T30] kauditd_printk_skb: 19860 callbacks suppressed [ 654.720608][ T30] audit: type=1400 audit(2000000290.622:68959): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 654.756313][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 654.763062][ T5473] audit: audit_lost=1686 audit_rate_limit=0 audit_backlog_limit=64 [ 654.773863][ T5473] audit: backlog limit exceeded [ 654.778796][ T30] audit: type=1400 audit(2000000290.659:68960): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 654.800242][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 654.806894][ T5473] audit: audit_lost=1687 audit_rate_limit=0 audit_backlog_limit=64 [ 654.814779][ T5473] audit: backlog limit exceeded [ 654.819815][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 654.827735][ T30] audit: type=1400 audit(2000000290.659:68961): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 655.724144][T12959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1847'. [ 655.744385][T12959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1847'. [ 655.765586][T12959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1847'. [ 657.550102][T12970] only policy match revision 0 supported [ 657.550120][T12970] unable to load match [ 657.722530][T12966] ptrace attach of "./syz-executor exec"[12969] was attempted by "./syz-executor exec"[12966] [ 658.848283][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 658.854611][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.508514][T12981] FAULT_INJECTION: forcing a failure. [ 659.508514][T12981] name failslab, interval 1, probability 0, space 0, times 0 [ 659.543312][T12981] CPU: 1 UID: 0 PID: 12981 Comm: syz.5.1857 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.543343][T12981] Tainted: [L]=SOFTLOCKUP [ 659.543351][T12981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 659.543363][T12981] Call Trace: [ 659.543369][T12981] [ 659.543376][T12981] dump_stack_lvl+0x100/0x190 [ 659.543413][T12981] should_fail_ex.cold+0x5/0xa [ 659.543438][T12981] ? tomoyo_realpath_from_path+0xb6/0x690 [ 659.543466][T12981] should_failslab+0xc2/0x120 [ 659.543487][T12981] __kmalloc_noprof+0xe0/0x850 [ 659.543523][T12981] tomoyo_realpath_from_path+0xb6/0x690 [ 659.543558][T12981] tomoyo_path_number_perm+0x23c/0x580 [ 659.543584][T12981] ? tomoyo_path_number_perm+0x22e/0x580 [ 659.543613][T12981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 659.543669][T12981] ? find_held_lock+0x2b/0x80 [ 659.543695][T12981] ? __fget_files+0x215/0x3d0 [ 659.543716][T12981] ? hook_file_ioctl_common+0x146/0x410 [ 659.543756][T12981] ? __fget_files+0x21f/0x3d0 [ 659.543783][T12981] security_file_ioctl+0xd3/0x230 [ 659.543821][T12981] __x64_sys_ioctl+0xb7/0x210 [ 659.543855][T12981] do_syscall_64+0x106/0xf80 [ 659.543883][T12981] ? clear_bhb_loop+0x40/0x90 [ 659.543912][T12981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.543934][T12981] RIP: 0033:0x7f199a99c799 [ 659.543951][T12981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.543972][T12981] RSP: 002b:00007f199b76f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.543991][T12981] RAX: ffffffffffffffda RBX: 00007f199ac15fa0 RCX: 00007f199a99c799 [ 659.544006][T12981] RDX: 0000000000000000 RSI: 0000000000004b49 RDI: 0000000000000003 [ 659.544017][T12981] RBP: 00007f199b76f090 R08: 0000000000000000 R09: 0000000000000000 [ 659.544029][T12981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.544040][T12981] R13: 00007f199ac16038 R14: 00007f199ac15fa0 R15: 00007ffc0bbc8968 [ 659.544070][T12981] [ 659.544145][T12981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 660.074355][ T30] kauditd_printk_skb: 22539 callbacks suppressed [ 660.074371][ T30] audit: type=1400 audit(2000000295.628:86645): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 660.102576][ T30] audit: type=1400 audit(2000000295.637:86646): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 660.124584][ T30] audit: type=1400 audit(2000000295.637:86647): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 660.148418][ T30] audit: type=1400 audit(2000000295.637:86648): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 660.170008][ T30] audit: type=1400 audit(2000000295.637:86649): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 660.191624][ T30] audit: type=1400 audit(2000000295.637:86650): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 660.213097][ T30] audit: type=1400 audit(2000000295.637:86651): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 660.234871][ T30] audit: type=1400 audit(2000000295.637:86652): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 660.256122][ T30] audit: type=1400 audit(2000000295.637:86653): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 660.277621][ T30] audit: type=1400 audit(2000000295.637:86654): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 662.953457][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.996656][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.226234][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.248507][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.382341][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.408402][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.559802][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.579400][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.957529][ T12] bridge_slave_1: left allmulticast mode [ 663.988377][ T12] bridge_slave_1: left promiscuous mode [ 663.994057][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.020065][ T12] bridge_slave_0: left allmulticast mode [ 664.026152][ T12] bridge_slave_0: left promiscuous mode [ 664.039778][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.273292][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.285779][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.297026][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 664.309839][ T12] bond0 (unregistering): Released all slaves [ 664.332870][ T12] bond1 (unregistering): Released all slaves [ 664.351584][ T12] bond2 (unregistering): Released all slaves [ 664.459058][ T12] : left promiscuous mode [ 664.894687][ T12] hsr_slave_0: left promiscuous mode [ 664.901105][ T12] hsr_slave_1: left promiscuous mode [ 664.908518][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.916833][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.929128][ T12] veth1_macvtap: left promiscuous mode [ 664.935169][ T12] veth0_macvtap: left promiscuous mode [ 664.941738][ T12] veth1_vlan: left promiscuous mode [ 664.946990][ T12] veth0_vlan: left promiscuous mode [ 665.212801][ T12] team0 (unregistering): Port device team_slave_1 removed [ 665.239951][ T12] team0 (unregistering): Port device team_slave_0 removed [ 665.428774][ T30] kauditd_printk_skb: 14673 callbacks suppressed [ 665.428791][ T30] audit: type=1400 audit(2000000300.644:101328): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 665.441929][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 665.458360][ T30] audit: type=1400 audit(2000000300.653:101329): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 665.464048][ T5473] audit: audit_lost=3307 audit_rate_limit=0 audit_backlog_limit=64 [ 665.484305][ T30] audit: type=1400 audit(2000000300.653:101330): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 665.502843][ T5473] audit: backlog limit exceeded [ 665.515106][ T30] audit: type=1400 audit(2000000300.653:101331): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 665.538610][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 665.546251][ T30] audit: type=1400 audit(2000000300.653:101332): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 665.546695][ T5473] audit: audit_lost=3308 audit_rate_limit=0 audit_backlog_limit=64 [ 665.779653][ T12] IPVS: stop unused estimator thread 0... [ 665.897618][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.910916][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.986386][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.996773][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.069686][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.080207][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.172008][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.183525][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.414396][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.499216][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.594230][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.685257][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.929350][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.942349][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20044 - 0 [ 667.035115][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.045584][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20044 - 0 [ 667.141491][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.153285][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20044 - 0 [ 667.256835][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.269755][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20044 - 0 [ 667.467064][ T12] vlan2: left promiscuous mode [ 667.473929][ T12] dummy0: left promiscuous mode [ 667.480703][ T12] bridge0: port 3(vlan2) entered disabled state [ 667.489894][ T12] bridge_slave_1: left allmulticast mode [ 667.496602][ T12] bridge_slave_1: left promiscuous mode [ 667.503317][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.513842][ T12] bridge_slave_0: left allmulticast mode [ 667.519497][ T12] bridge_slave_0: left promiscuous mode [ 667.526923][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.545450][ T12] vlan2: left allmulticast mode [ 667.550861][ T12] geneve0: left allmulticast mode [ 667.557561][ T12] vlan2: left promiscuous mode [ 667.562854][ T12] geneve0: left promiscuous mode [ 667.568695][ T12] bridge0: port 3(vlan2) entered disabled state [ 667.580655][ T12] bridge_slave_1: left allmulticast mode [ 667.586325][ T12] bridge_slave_1: left promiscuous mode [ 667.592552][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.602210][ T12] bridge_slave_0: left allmulticast mode [ 667.607873][ T12] bridge_slave_0: left promiscuous mode [ 667.614755][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.105281][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.119010][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.129902][ T12] bond0 (unregistering): Released all slaves [ 668.145315][ T12] bond1 (unregistering): Released all slaves [ 668.161203][ T12] bond2 (unregistering): Released all slaves [ 668.177693][ T12] bond3 (unregistering): Released all slaves [ 668.196643][ T12] bond4 (unregistering): Released all slaves [ 668.217832][ T12] bond5 (unregistering): Released all slaves [ 668.363441][ T12] bond3 (unregistering): (slave geneve2): Releasing active interface [ 668.449750][ T12] team0: Port device bridge1 removed [ 668.511889][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.526273][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.537089][ T12] bond0 (unregistering): Released all slaves [ 668.551830][ T12] bond1 (unregistering): Released all slaves [ 668.570406][ T12] bond2 (unregistering): Released all slaves [ 668.588449][ T12] bond3 (unregistering): Released all slaves [ 668.609065][ T12] bond4 (unregistering): Released all slaves [ 668.637712][ T12] bond5 (unregistering): Released all slaves [ 668.785124][ T12] bond4 (unregistering): (slave bridge0): Releasing active interface [ 668.841176][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.855227][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.866685][ T12] bond0 (unregistering): Released all slaves [ 668.882872][ T12] bond1 (unregistering): Released all slaves [ 668.901784][ T12] bond2 (unregistering): Released all slaves [ 668.920426][ T12] bond3 (unregistering): Released all slaves [ 668.944826][ T12] bond4 (unregistering): Released all slaves [ 669.122180][ T12] tipc: Left network mode [ 669.136842][ T12] tipc: Left network mode [ 669.142731][ T12] tipc: Disabling bearer [ 669.152840][ T12] tipc: Left network mode [ 669.705744][ T12] hsr_slave_0: left promiscuous mode [ 669.711717][ T12] hsr_slave_1: left promiscuous mode [ 669.723683][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.731291][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.739385][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.747006][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.759416][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.767390][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.774777][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.785237][ T12] hsr_slave_0: left promiscuous mode [ 669.792099][ T12] hsr_slave_1: left promiscuous mode [ 669.798036][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.806494][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.815133][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.822731][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.854066][ T12] veth1_macvtap: left promiscuous mode [ 669.859570][ T12] veth0_macvtap: left promiscuous mode [ 669.865372][ T12] veth1_vlan: left promiscuous mode [ 669.870625][ T12] veth0_vlan: left promiscuous mode [ 669.878349][ T12] dummy0: left promiscuous mode [ 669.883954][ T12] veth1_macvtap: left promiscuous mode [ 669.890081][ T12] veth0_macvtap: left promiscuous mode [ 669.897005][ T12] veth1_vlan: left promiscuous mode [ 669.902857][ T12] veth0_vlan: left promiscuous mode [ 669.910243][ T12] veth1_macvtap: left promiscuous mode [ 669.917299][ T12] veth0_macvtap: left promiscuous mode [ 669.923457][ T12] veth1_vlan: left promiscuous mode [ 669.929545][ T12] veth0_vlan: left promiscuous mode [ 670.232296][ T12] pim6reg (unregistering): left allmulticast mode [ 670.437694][ T12] team0 (unregistering): Port device team_slave_1 removed [ 670.456007][ T12] team0 (unregistering): Port device team_slave_0 removed [ 670.594989][ T12] team0 (unregistering): Port device dummy0 removed [ 670.641311][ T12] pim6reg (unregistering): left allmulticast mode [ 670.781924][ T30] kauditd_printk_skb: 22083 callbacks suppressed [ 670.781942][ T30] audit: type=1400 audit(2000000305.660:123415): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 670.795611][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 670.816625][ T5473] audit: audit_lost=3309 audit_rate_limit=0 audit_backlog_limit=64 [ 670.824839][ T5473] audit: backlog limit exceeded [ 670.829850][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 670.837892][ T5473] audit: audit_lost=3310 audit_rate_limit=0 audit_backlog_limit=64 [ 670.840690][ T30] audit: type=1400 audit(2000000305.660:123416): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 670.846294][ T5473] audit: backlog limit exceeded [ 670.872941][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 670.876275][ T30] audit: type=1400 audit(2000000305.660:123417): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 670.907120][ T12] team0 (unregistering): Port device team_slave_1 removed [ 670.923290][ T12] team0 (unregistering): Port device team_slave_0 removed [ 671.259106][ T12] team0 (unregistering): Port device team_slave_1 removed [ 671.284571][ T12] team0 (unregistering): Port device team_slave_0 removed [ 672.266482][ T12] IPVS: stop unused estimator thread 0... [ 672.280330][ T12] IPVS: stop unused estimator thread 0...