last executing test programs: 14.447043688s ago: executing program 3 (id=228): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x65, 0xd, &(0x7f0000000000)="4ab459c08f3123cb88c09754b3d854d12dd7b95b6edec3e2c1c4a2a9181ce8b5a9f031397a6345cc931863dda19c703280654a33baa284f4e6d16a780d790600f8ee9ca0bed0927887e70fb7fc7fb084501117d6049c6f778ed8aeff9ef41378ad1b436877", &(0x7f0000000080)=""/13, 0x1, 0x0, 0x17, 0x0, &(0x7f00000000c0)="69cba8c73353e2567d7e43ec9d5fd9f9457bc8c6819d4a", &(0x7f0000000100), 0x7, 0x0, 0x7bd}, 0x50) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 12.72336791s ago: executing program 2 (id=236): fsopen(&(0x7f0000000000)='autofs\x00', 0x0) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.928019159s ago: executing program 3 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000780)={0x4, 0x1000000, [{0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x6, 0xffffffff}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0x4, 0xe5f, 0x2, 0x30e, 0x8001, 0x6, 0x80000001}, {0xa, 0x2bb, 0x2, 0xd, 0x3, 0x7ff, 0x400}]}) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0xf000, 0xa, 0xf, 0x3, 0x3, 0x38, 0x3, 0xff, 0x8, 0xd5, 0x2}, {0xdddd0000, 0x6000, 0xe, 0x6, 0x0, 0x9, 0x1, 0x2, 0x1, 0xa, 0x7, 0x7f}, {0x7b000, 0xffffffff, 0xa, 0x2, 0x3, 0x6, 0x5, 0x3, 0xb, 0x80, 0xfe}, {0x25000, 0x5000, 0xd, 0x6, 0x4, 0x4d, 0x5, 0x7f, 0x51, 0x5, 0x8, 0xe}, {0x8080000, 0xeeee0000, 0xa, 0xfd, 0x6, 0x1, 0x7, 0x59, 0x7, 0xb, 0xb, 0x81}, {0x4000, 0xf000, 0x9, 0x0, 0x7, 0x5, 0xfb, 0x6, 0x7, 0x1, 0x2a, 0x5}, {0x5000, 0x0, 0x1c, 0x7f, 0x80, 0xc, 0x3, 0xc, 0x7, 0x6, 0x2, 0x2}, {0x25000, 0x54000, 0xe, 0x4, 0x1, 0xff, 0x5, 0xe, 0x4, 0x3, 0x0, 0x3}, {0x26000, 0x8}, {0x2000, 0xe}, 0x1000a, 0x0, 0x0, 0x4401b8, 0xf, 0x900, 0x58000, [0xe, 0x7, 0x80000001, 0x1]}) close(r5) socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket(0xa, 0x5, 0x0) sendto$inet6(r6, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) 9.948979805s ago: executing program 3 (id=244): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 9.860206684s ago: executing program 0 (id=245): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x101200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x1, 0x1) io_setup(0x43, &(0x7f0000000140)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x7d) read$usbfs(r0, &(0x7f0000000540)=""/203, 0xcb) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x16, &(0x7f0000000240)={@broadcast, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x6, 0x0, 0x4}}, {@generic={0x10}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r3, 0x403, 0x4ec00) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102378, 0x18fea) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001b3eb00", @ANYRES32=0x0, @ANYBLOB="4884000000c0000008001d00c3000000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x10) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x20803) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120110012157d1104705066870f3010203010902120001012460085bc9f27e1b22b47009"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "a48f51ba147ad6fa", "7eec1d61a95c2d7fe09f0c315ac5e01a", "dfe584a7", "9873bdfcbff11adc"}, 0x28) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x0, 0x5a9, 0x3, 0x0, 0x8001}) 9.779972444s ago: executing program 4 (id=246): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="001b0000000000"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000001c0)={0xadc, 0x9, 0x3ac7}, 0x10) sendmmsg$alg(r2, 0x0, 0x0, 0x15) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4fb0027464657673696d3000000000000014001680100001803e5504000800000644c4cb13068529e1e10a00e4000000"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x50000, 0x0) r7 = syz_open_dev$video(&(0x7f0000000080), 0x485, 0x80400) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f00000000c0)={0x1, {0x3, 0x1ff, 0x5d, 0xb}, {0x80000000, 0xfffff665, 0x6, 0x3ff}, {0x9, 0x8000}}) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000002c0)={0xf380004, 0x7, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x990a5e, 0x6, '\x00', @string=&(0x7f0000000180)=0x6}}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.725468386s ago: executing program 2 (id=247): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf25050000000400068008000300038000"], 0x20}, 0x1, 0x0, 0x0, 0x8089}, 0x20000010) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) userfaultfd(0x80001) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000000080)=""/95, 0x5f) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000200)={'netpci0\x00', @multicast}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x8080baf}}, './file2\x00'}) mremap(&(0x7f0000633000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000ffc000/0x1000)=nil) r5 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) sendfile(r5, r5, 0x0, 0x80000000d) syz_open_dev$dri(&(0x7f00000000c0), 0xd21, 0x80c0) socket$inet6(0xa, 0x9, 0x8) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000002c0)="abe60408b8807ebf8bd064f2b2c37c7338b219f610e74b057c12e2df32704817b248b79848196f63807459d949e4d29db49ca98673f7", &(0x7f00000004c0)=@tcp=r4}, 0x8b0264d2) r7 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x7}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 8.680589625s ago: executing program 1 (id=248): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x29, 0x6, 0x80000000, 0x0, 0xfa, 0x6, 0x1, 0x8, 0x3, 0x0, 0x800, 0xefc2, 0x24, 0x4, 0x1, 0x3, [0x6c, 0x7]}}) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8f30b05e82445e88cf344749de12b6dda6", @ANYRES16=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x804}, 0x40800) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, 0x0, 0x0) 8.568238279s ago: executing program 1 (id=249): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) mknod(0x0, 0x80014a6, 0x4001) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x400000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r5 = epoll_create1(0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x40002019}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000080)=0x7) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x80001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 8.567909198s ago: executing program 2 (id=250): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x4000003e, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 8.362244627s ago: executing program 3 (id=251): syz_open_dev$media(&(0x7f0000000980), 0x0, 0x8000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x4008891) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x7fe782539b0b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) lseek(r2, 0x10001, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 7.732644449s ago: executing program 1 (id=252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@private1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) 7.570773355s ago: executing program 1 (id=253): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e22fffd0000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b400000000000002000000030000000100000000000000000006000000000000000000000000000000000000000000090000000000000000002000000000000700000000000000010000000000000000000400000000008000000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb0000000000000000"], 0x104}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000680)={0xd, @pix={0xff, 0x0, 0x31435641, 0x6, 0x4, 0x4, 0x0, 0xffffffff, 0x1, 0x3, 0x2, 0x6}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1"], 0xf0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xcb}, {&(0x7f0000000400)="ec487517fecd894af18ce18fbf", 0xd}], 0x2}, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 7.084130757s ago: executing program 1 (id=254): openat$dsp(0xffffffffffffff9c, 0x0, 0xa841, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x3e00, 0x1, 0x7, 0x6, 0x200, &(0x7f0000000880)="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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.434362077s ago: executing program 4 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000780)={0x4, 0x1000000, [{0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x6, 0xffffffff}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0x4, 0xe5f, 0x2, 0x30e, 0x8001, 0x6, 0x80000001}, {0xa, 0x2bb, 0x2, 0xd, 0x3, 0x7ff, 0x400}]}) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0xf000, 0xa, 0xf, 0x3, 0x3, 0x38, 0x3, 0xff, 0x8, 0xd5, 0x2}, {0xdddd0000, 0x6000, 0xe, 0x6, 0x0, 0x9, 0x1, 0x2, 0x1, 0xa, 0x7, 0x7f}, {0x7b000, 0xffffffff, 0xa, 0x2, 0x3, 0x6, 0x5, 0x3, 0xb, 0x80, 0xfe}, {0x25000, 0x5000, 0xd, 0x6, 0x4, 0x4d, 0x5, 0x7f, 0x51, 0x5, 0x8, 0xe}, {0x8080000, 0xeeee0000, 0xa, 0xfd, 0x6, 0x1, 0x7, 0x59, 0x7, 0xb, 0xb, 0x81}, {0x4000, 0xf000, 0x9, 0x0, 0x7, 0x5, 0xfb, 0x6, 0x7, 0x1, 0x2a, 0x5}, {0x5000, 0x0, 0x1c, 0x7f, 0x80, 0xc, 0x3, 0xc, 0x7, 0x6, 0x2, 0x2}, {0x25000, 0x54000, 0xe, 0x4, 0x1, 0xff, 0x5, 0xe, 0x4, 0x3, 0x0, 0x3}, {0x26000, 0x8}, {0x2000, 0xe}, 0x1000a, 0x0, 0x0, 0x4401b8, 0xf, 0x900, 0x58000, [0xe, 0x7, 0x80000001, 0x1]}) close(r5) socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket(0xa, 0x5, 0x0) sendto$inet6(r6, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) 6.388917727s ago: executing program 0 (id=256): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x58, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.344068355s ago: executing program 1 (id=257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xad0, 0x30, 0x1, 0x0, 0x0, {}, [{0xabc, 0x1, [@m_ife={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x1, 0x8, 0x9}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x936}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0xa4, 0x6, "d217f33ee6165b9745ec7b97be019037b123ba3eb4b47d03f670b4b8799aa53c84e4cca5c604751db351293c99ddfd03df66b86a0770fa4ec99bbe7dddf4fa09dff9884b47f61aa503b896609da11b927b13f1b73eb4fc1e63593f53481e21853a1fb85b3024dd794d00a8d44e30f04e2c3e3cff37d8bb0e29a042c45883e9667b6948d97591d05e9ac3c11fe8aae854de12e7f75bf73350f5082ba155d88deb"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x1d4, 0x15, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x2, 0x3, 0x0, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, 'mptcp_pm\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'mptcp_pm\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x0, 0x3, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x4, 0xffffffffffffffff, 0x8000, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd34e, 0x1, 0xffffffffdfffffff, 0x5, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80, 0x3, 0x0, 0x5, 0xffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x22, 0x7, 0x6, 0x8, 0x9}}]}, {0xf8, 0x6, "9eebc3f0c057e3a30c576d69486f4753f27949013a2b82b2d1973600484ccec6f9689ff95f4afbe6d98b889819cb2d9ca17aef6cad9716f1afc1cddc3394c6927e7d4444e3d4028583e57879b2d44ec50e3d86ad73687eb6bf95e4ab57e2413c134a83240f7619f2fc381955e00f3945374d7966f8694b64df3c15e7d080fefe33b6220fb89df7e11eec98d23c16bcdfbdf06443925ad50a5ef5a5f140e04f12d3ada45e9dd7b0e96ba78e80c98ead2744f21bf077d3a2e08b636174b6d1a71aab17b6581d7979a1396cc5d8e3453ab95bcf3b0d089cc8ce046349fa167571e91cecca1f6f44186e707ee3cba7f385ff2f560dca"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x98, 0xd, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1ff, 0x3, 0xc979, 0x3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x8, 0x9, 0xfffffffc}, 0x3}}]}, {0x2b, 0x6, "4e7442da8bc410354a8b8cdcfb8e7032fb5199df4a2468e65fb2a0b462dc3fd7166e4ccb4bccf0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x94, 0xc, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x80, 0x3ff, 0x1, 0xb, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6ca}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfb5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xe51}]}, {0x2d, 0x6, "b10c029478b65c97cc9f011480ffa924f5e1e17d00706d0ce8d7897f303b378fa53018faa5a044a6a9"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x178, 0xc, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xf, 0x1, 0x4, 0x7}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x20000000, 0x8, 0x9}}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xe, 0x5, 0x2, 0x5}, {0x0, 0x2, 0x4, 0x80}, {0x1c0, 0x3, 0x3, 0x2}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x51, 0x0, 0x9}]}]}, {0xce, 0x6, "9f2d0a5ba435fd87516c3032742e21d8a7b9489f1277f3846fc98be414106487d216193a4f079103a37d8434e4ee617a41f81d0d475d0c18a544dfb4582b6db32b2c3caa5a210f223f670c2dec54d391be0bded727932fe876f2c35e90746d3d8ec1c4c622f7a33204de40393530ee83b36cad70be8122c133c84a12a04758bee772e0683dd1ebfe93946e58b3c39dbd866087b7e807e50f76f420c99a750fcfc61f41ae8270c4ea2aa06259401ba5598cebe2c41a41022c1032e832c18c1fe9ba50c8f63b76ec9cb905"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xe8, 0x16, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x200, 0x3, 0x1, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x78d9, 0xf0, 0x8, 0x100, 0x7}}]}, {0x8c, 0x6, "a064cf00591b56a90a66ef69a6b8b68b448dafa72d27187b928a6452dd1347bc52665c6624a49af6c3a3f98b56e811beb403cd0874ace9e75fcf4667fded6ec9f8546c520f9dd7a422e7e2ab39f6b2280f745af4ff9e02ae265f10a34c741bd30ae50b4b65c44827820d9fd5ca0d3f603977af3d61fbc69430293b9bfa365f9887cd5611cd133e85"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x130, 0x16, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_MARK={0x8, 0x5, 0xbe}, @TCA_CT_LABELS_MASK={0x14, 0x8, "95908c83d07d128baf8b4b2a3f2557ce"}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_PARMS={0x18, 0x1, {0xb, 0x2, 0x10000000, 0x5, 0x40}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}]}, {0xa5, 0x6, "5a5ec77bc18ce47574cb74e0aaefd0038703485bfd56b21a5cd907d543257aefd03557d2670da4e3e2637e8a7d5777a0587e64061a6ea52b55546f61736689191e37600ade26d8ee89f3c09da9d989f7245fa9c4fa44d1f17fbe10dd1de9f55bb873b30f27bd514f76b8f944b575cc5212e51e719f0014f73d101e802877d39d867d3f0880d7c9525131ef91fe8c2d3e65774915232bf2511666046960ccf16ed6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x174, 0x1c, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5f591a0, 0x0, 0x6, 0x7, 0x4}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x5, 0x5, 0x7f}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x8, 0x8, 0x80}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x0, 0xffffffffffffffff, 0x393aed70, 0x8}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xebc8be40, 0x7ff, 0x3, 0x4, 0xbf0}, 0x38}}]}, {0xbb, 0x6, "33d6fd2c7c6a7c9d5e837a6d8b8b34ecc5c533ce5be2366a782cc3966aac4fd7f46364f25c2b22d89d0909647498f7260846094af827ad260600fb25752866d6efb57c19197427e6e247abef58d80d22c8c16f97a76f68a43b4b3d39b1ffff71e99e2a11538e1e2293d0ffc886535050b77307344414643ab32beb9bada9629336bf9a130538c6a29be58761101144f54e58931091bb23d48af5d0c0d88032a96888da614b41e6704606f1863e0275432a038bda6cf484"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x184, 0xb, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x3}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88b5}, @TCA_MPLS_PROTO={0x6, 0x4, 0xc}, @TCA_MPLS_LABEL={0x8, 0x5, 0x2aff3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x64fc4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x70, 0x8, 0xffffffffffffffff, 0x10000, 0x7}, 0x3}}]}, {0xf5, 0x6, "6e48d7fe37acff86ce2f9a8eb3e079deb6b84e6aad7e9b63fa784de7c7c584d3c10db510bbdcbbb2b9329b80f9510f103fbf88be3ac781eaa9c308346b3d56408c08e15c80024901ba49168374c2ee192e1b018d0aae1a23df03438c75da09fb6546ac8264ab46e345e881902f28f05e71c816269ace1362c09b3af178acec97c33fbb2a8089e201e2d83b178db8e0be9838ca38c0fec3dbd41e102ac6c9d8923cbea8f98c29cae2177d97dee5647ed21c1df7709f8795b102b8808b6cb2acac671b89f16ccc61bb293c50d8f9b7c8f1bf15bc35be83dfda7be7251ea0df447a04a630dece524d42761fafc612c884a42f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xad0}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x1) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c8"], 0xd) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) landlock_restrict_self(r5, 0x9) r6 = syz_open_dev$media(&(0x7f0000000240), 0x87e, 0x926c1) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000480)) sendto$inet6(r2, &(0x7f0000000400)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0003000d0085a168d0bf46d32345653600648d0a08000000000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) 5.245279848s ago: executing program 4 (id=258): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x8, @empty, 0xfffffffa}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 5.226964548s ago: executing program 3 (id=259): fchdir(0xffffffffffffffff) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000c000000000000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, &(0x7f00000000c0)=r2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = fanotify_init(0x48, 0x2) fanotify_mark(r3, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80) 5.219433645s ago: executing program 0 (id=260): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$tipc(r0, &(0x7f0000002c80)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2}}, 0x10) 4.998264827s ago: executing program 0 (id=261): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x4004084) 4.674389081s ago: executing program 2 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000003c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x1002001, 0xde60fe10fea4447b, 0x3ff, 0x7fff, 0x0, 0x40000006, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) openat(0xffffffffffffff9c, 0x0, 0x12800, 0x14) io_submit(r9, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r8, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r8, r6, 0x0) 3.66708636s ago: executing program 2 (id=263): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) mknod(0x0, 0x80014a6, 0x4001) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x400000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r5 = epoll_create1(0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x40002019}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000080)=0x7) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x80001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 3.453985359s ago: executing program 3 (id=264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB="02c92012000e0005001d7f0a00080020018100ff070400"], 0x17) write(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161182) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) 3.443941614s ago: executing program 4 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB="02c92012000e0005001d7f0a00080020018100ff070400"], 0x17) write(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161182) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) 3.398039056s ago: executing program 0 (id=266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x30, r1, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x3f, 0x0, 0x1, {0x8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 2.420356264s ago: executing program 2 (id=267): r0 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0xc0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c8c4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) close(0x3) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x17) ioctl$KVM_SET_TSC_KHZ_vm(r10, 0xaea2, 0xffff) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40186f40, &(0x7f0000000440)=0x10) ioctl$TIOCL_SETVESABLANK(r12, 0x541c, &(0x7f00000001c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES32, @ANYRES16=r12], 0x1a0}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c) 1.028260192s ago: executing program 4 (id=268): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) (fail_nth: 3) 339.364701ms ago: executing program 0 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000780)={0x4, 0x1000000, [{0x6, 0x4, 0x0, 0x8001, 0x29, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0x4, 0xe5f, 0x2, 0x30e, 0x8001, 0x6, 0x80000001}, {0xa, 0x2bb, 0x2, 0xd, 0x3, 0x7ff, 0x400}]}) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0xf000, 0xa, 0xf, 0x3, 0x3, 0x38, 0x3, 0xff, 0x8, 0xd5, 0x2}, {0xdddd0000, 0x6000, 0xe, 0x6, 0x0, 0x9, 0x1, 0x2, 0x1, 0xa, 0x7, 0x7f}, {0x7b000, 0xffffffff, 0xa, 0x2, 0x3, 0x6, 0x5, 0x3, 0xb, 0x80, 0xfe}, {0x25000, 0x5000, 0xd, 0x6, 0x4, 0x4d, 0x5, 0x7f, 0x51, 0x5, 0x8, 0xe}, {0x8080000, 0xeeee0000, 0xa, 0xfd, 0x6, 0x1, 0x7, 0x59, 0x7, 0xb, 0xb, 0x81}, {0x4000, 0xf000, 0x9, 0x0, 0x7, 0x5, 0xfb, 0x6, 0x7, 0x1, 0x2a, 0x5}, {0x5000, 0x0, 0x1c, 0x7f, 0x80, 0xc, 0x3, 0xc, 0x7, 0x6, 0x2, 0x2}, {0x25000, 0x54000, 0xe, 0x4, 0x1, 0xff, 0x5, 0xe, 0x4, 0x3, 0x0, 0x3}, {0x26000, 0x8}, {0x2000, 0xe}, 0x1000a, 0x0, 0x0, 0x4401b8, 0xf, 0x900, 0x58000, [0xe, 0x7, 0x80000001, 0x1]}) close(r5) socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket(0xa, 0x5, 0x0) sendto$inet6(r6, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 4 (id=270): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x8, @empty, 0xfffffffa}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) (fail_nth: 3) kernel console output (not intermixed with test programs): le the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.036173][ T50] Bluetooth: hci4: command tx timeout [ 61.061953][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.067553][ T5631] Bluetooth: hci2: command tx timeout [ 61.079082][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.090452][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.116545][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.141308][ T5615] team0: Port device team_slave_0 added [ 61.158684][ T5627] team0: Port device team_slave_0 added [ 61.164869][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.172181][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.198294][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.211579][ T5615] team0: Port device team_slave_1 added [ 61.220547][ T5627] team0: Port device team_slave_1 added [ 61.226644][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.233666][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.259874][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.329239][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.336297][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.362219][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.378491][ T5614] hsr_slave_0: entered promiscuous mode [ 61.385028][ T5614] hsr_slave_1: entered promiscuous mode [ 61.395214][ T5625] hsr_slave_0: entered promiscuous mode [ 61.401634][ T5625] hsr_slave_1: entered promiscuous mode [ 61.407712][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 61.413487][ T5625] Cannot create hsr debugfs directory [ 61.420597][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.427764][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.454894][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.467054][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.474025][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.499954][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.511289][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.518439][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.544605][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.603460][ T5624] hsr_slave_0: entered promiscuous mode [ 61.609949][ T5624] hsr_slave_1: entered promiscuous mode [ 61.616077][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 61.621805][ T5624] Cannot create hsr debugfs directory [ 61.694015][ T5627] hsr_slave_0: entered promiscuous mode [ 61.700606][ T5627] hsr_slave_1: entered promiscuous mode [ 61.707195][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 61.712955][ T5627] Cannot create hsr debugfs directory [ 61.726683][ T5615] hsr_slave_0: entered promiscuous mode [ 61.732762][ T5615] hsr_slave_1: entered promiscuous mode [ 61.738818][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 61.744665][ T5615] Cannot create hsr debugfs directory [ 62.062183][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.075311][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.084623][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.094594][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.118439][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.128789][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.136620][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.145511][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.182435][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.192626][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.201226][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.209824][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.217861][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.226559][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.239405][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.248463][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.318350][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.332339][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.345298][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.355227][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.363040][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.371508][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.379425][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.388839][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.491830][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.504259][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.517832][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.529647][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.537530][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.547625][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.562934][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.572619][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.609466][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.640187][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.666384][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.700806][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.710391][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.718812][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.728023][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.738286][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.745875][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.760228][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.767804][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.777152][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.789875][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.798785][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.810461][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.817600][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.838065][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.845202][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.867561][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.874654][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.905995][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.955598][ T50] Bluetooth: hci0: command tx timeout [ 62.965179][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.971892][ T50] Bluetooth: hci1: command tx timeout [ 62.991862][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.998976][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.008134][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.015255][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.035494][ T50] Bluetooth: hci3: command tx timeout [ 63.117084][ T50] Bluetooth: hci4: command tx timeout [ 63.117201][ T5631] Bluetooth: hci2: command tx timeout [ 63.146916][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.219438][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.243863][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.251046][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.280179][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.287503][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.344937][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.435123][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.484195][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.491416][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.527129][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.534278][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.744024][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.903720][ T5614] veth0_vlan: entered promiscuous mode [ 63.939691][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.975902][ T5614] veth1_vlan: entered promiscuous mode [ 64.003562][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.132428][ T5614] veth0_macvtap: entered promiscuous mode [ 64.177581][ T5614] veth1_macvtap: entered promiscuous mode [ 64.201556][ T5624] veth0_vlan: entered promiscuous mode [ 64.227183][ T5624] veth1_vlan: entered promiscuous mode [ 64.252564][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.307868][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.352556][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.368571][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.382509][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.406923][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.432638][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.456030][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.486996][ T5624] veth0_macvtap: entered promiscuous mode [ 64.540138][ T5625] veth0_vlan: entered promiscuous mode [ 64.547152][ T5624] veth1_macvtap: entered promiscuous mode [ 64.579047][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.585170][ T5625] veth1_vlan: entered promiscuous mode [ 64.594041][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.634623][ T286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.640328][ T5615] veth0_vlan: entered promiscuous mode [ 64.648050][ T286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.676744][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 64.676758][ T29] audit: type=1400 audit(1780415631.594:153): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.onsuPO/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.709471][ T29] audit: type=1400 audit(1780415631.634:154): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.723030][ T5615] veth1_vlan: entered promiscuous mode [ 64.741696][ T29] audit: type=1400 audit(1780415631.634:155): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.onsuPO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.770302][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.781269][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.783535][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.788978][ T29] audit: type=1400 audit(1780415631.634:156): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.823674][ T5627] veth0_vlan: entered promiscuous mode [ 64.833233][ T29] audit: type=1400 audit(1780415631.634:157): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.onsuPO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.834680][ T5625] veth0_macvtap: entered promiscuous mode [ 64.861313][ T29] audit: type=1400 audit(1780415631.644:158): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.onsuPO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.894042][ T29] audit: type=1400 audit(1780415631.664:159): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.914710][ T29] audit: type=1400 audit(1780415631.664:160): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.943554][ T5625] veth1_macvtap: entered promiscuous mode [ 64.944150][ T29] audit: type=1400 audit(1780415631.664:161): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="gadgetfs" ino=6821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.954969][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.972551][ T29] audit: type=1400 audit(1780415631.674:162): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.042533][ T5631] Bluetooth: hci1: command tx timeout [ 65.043085][ T50] Bluetooth: hci0: command tx timeout [ 65.056733][ T5627] veth1_vlan: entered promiscuous mode [ 65.067843][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.080925][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.100947][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.116189][ T5631] Bluetooth: hci3: command tx timeout [ 65.132725][ T5615] veth0_macvtap: entered promiscuous mode [ 65.147380][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.166367][ T5615] veth1_macvtap: entered promiscuous mode [ 65.196593][ T5631] Bluetooth: hci2: command tx timeout [ 65.205629][ T5631] Bluetooth: hci4: command tx timeout [ 65.215617][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.245052][ T294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.270870][ T294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.284505][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.294236][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.304664][ T5627] veth0_macvtap: entered promiscuous mode [ 65.323027][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.332026][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.368503][ T5627] veth1_macvtap: entered promiscuous mode [ 65.377101][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.414072][ T294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.423060][ T294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.444867][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.490963][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.502492][ T294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.511745][ T294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.540936][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.566417][ T294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.621695][ T294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.650277][ T294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.660887][ T294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.679955][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.707563][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.732060][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.742883][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.761761][ T5809] ======================================================= [ 65.761761][ T5809] WARNING: The mand mount option has been deprecated and [ 65.761761][ T5809] and is ignored by this kernel. Remove the mand [ 65.761761][ T5809] option from the mount to silence this warning. [ 65.761761][ T5809] ======================================================= [ 65.770014][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.808713][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.866375][ T992] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.968660][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.998126][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.016799][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.024190][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.031490][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 66.250862][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.407794][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.429420][ T992] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 66.460955][ T992] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 66.479659][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.117363][ T5631] Bluetooth: hci1: command tx timeout [ 67.158901][ T5631] Bluetooth: hci0: command tx timeout [ 67.173337][ T294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.195707][ T5631] Bluetooth: hci3: command tx timeout [ 67.204949][ T992] usb 1-1: config 0 descriptor?? [ 67.235763][ T294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.245999][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.260011][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.277866][ T5631] Bluetooth: hci4: command tx timeout [ 67.277919][ T50] Bluetooth: hci2: command tx timeout [ 67.381276][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.410105][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.764473][ T5830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10'. [ 67.854704][ T992] shield 0003:0955:7214.0001: unknown main item tag 0x1 [ 67.865440][ T5737] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.886354][ T992] shield 0003:0955:7214.0001: unbalanced collection at end of report description [ 67.917745][ T992] shield 0003:0955:7214.0001: Parse failed [ 67.940882][ T992] shield 0003:0955:7214.0001: probe with driver shield failed with error -22 [ 68.029508][ T5737] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 68.043944][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.063518][ T5737] usb 4-1: Product: syz [ 68.068131][ T5737] usb 4-1: Manufacturer: syz [ 68.080454][ T5737] usb 4-1: SerialNumber: syz [ 68.418296][ T5840] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 68.425185][ T5840] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 68.434509][ T5840] vhci_hcd vhci_hcd.0: Device attached [ 68.722676][ T5737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 68.756150][ T5737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 68.767002][ T992] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.782985][ T5737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 68.810802][ T5737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 68.833665][ T5737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 68.846586][ T5810] usb 42-1: SetAddress Request (2) to port 0 [ 68.857506][ T5810] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 68.872649][ T5737] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 68.940143][ T992] usb 5-1: device descriptor read/64, error -71 [ 69.356467][ T992] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.786784][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 69.786803][ T29] audit: type=1400 audit(1780415636.454:210): avc: denied { create } for pid=5847 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.846420][ T992] usb 5-1: device descriptor read/64, error -71 [ 69.969169][ T29] audit: type=1400 audit(1780415636.854:211): avc: denied { setopt } for pid=5853 comm="syz.0.12" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.007475][ T5857] comedi comedi3: comedi_config --init_data is deprecated [ 70.100245][ T29] audit: type=1400 audit(1780415636.904:212): avc: denied { ioctl } for pid=5853 comm="syz.0.12" path="socket:[8604]" dev="sockfs" ino=8604 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.200104][ T29] audit: type=1400 audit(1780415637.124:213): avc: denied { create } for pid=5861 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.220306][ T5858] pim6reg: entered allmulticast mode [ 70.255519][ T992] usb usb5-port1: attempt power cycle [ 70.303845][ T29] audit: type=1400 audit(1780415637.124:214): avc: denied { name_bind } for pid=5863 comm="syz.1.14" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.331992][ T5859] team0: entered allmulticast mode [ 70.340219][ T5859] team_slave_0: entered allmulticast mode [ 70.425734][ T5859] team_slave_1: entered allmulticast mode [ 70.433874][ T5865] team0: left allmulticast mode [ 70.439067][ T5865] team_slave_0: left allmulticast mode [ 70.445565][ T5865] team_slave_1: left allmulticast mode [ 70.454379][ T5865] pim6reg: left allmulticast mode [ 70.488476][ T29] audit: type=1400 audit(1780415637.124:215): avc: denied { node_bind } for pid=5863 comm="syz.1.14" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.510014][ T5869] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=1 [ 70.513628][ T5868] loop2: detected capacity change from 0 to 7 [ 70.555213][ T29] audit: type=1400 audit(1780415637.214:216): avc: denied { create } for pid=5861 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 70.587243][ T5868] Dev loop2: unable to read RDB block 7 [ 70.616168][ T5868] loop2: AHDI p1 p2 p3 [ 70.617996][ T29] audit: type=1400 audit(1780415637.214:217): avc: denied { connect } for pid=5861 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 70.625502][ T5868] loop2: partition table partially beyond EOD, truncated [ 70.687136][ T5868] loop2: p1 start 1601398130 is beyond EOD, truncated [ 70.687162][ T5868] loop2: p2 start 1702059890 is beyond EOD, truncated [ 70.692922][ T29] audit: type=1400 audit(1780415637.224:218): avc: denied { ioctl } for pid=5861 comm="syz.2.13" path="socket:[8617]" dev="sockfs" ino=8617 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 70.692965][ T29] audit: type=1400 audit(1780415637.304:219): avc: denied { write } for pid=5853 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 70.775461][ T992] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.802642][ T992] usb 5-1: device descriptor read/8, error -71 [ 70.966666][ T5872] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 71.031283][ T5841] vhci_hcd: connection reset by peer [ 71.038092][ T992] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 71.047051][ T12] vhci_hcd vhci_hcd.4: stop threads [ 71.047763][ T12] vhci_hcd vhci_hcd.4: release socket [ 71.048273][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 71.256598][ T992] usb 5-1: device not accepting address 5, error -71 [ 71.270096][ T992] usb usb5-port1: unable to enumerate USB device [ 71.475812][ T5617] usb 4-1: USB disconnect, device number 2 [ 71.732365][ T50] Bluetooth: Unknown LE signaling command 0x1d [ 71.739362][ T50] Bluetooth: Wrong link type (-22) [ 72.222417][ T5890] process 'syz.3.18' launched './file2' with NULL argv: empty string added [ 73.219376][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 73.926480][ T5810] usb 42-1: device descriptor read/8, error -110 [ 74.521402][ T5919] netlink: 312 bytes leftover after parsing attributes in process `syz.4.25'. [ 74.942956][ T5810] usb usb42-port1: attempt power cycle [ 75.805493][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 75.805533][ T29] audit: type=1400 audit(1780415642.724:268): avc: denied { write } for pid=5907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.817523][ T5810] usb usb42-port1: unable to enumerate USB device [ 75.843336][ T5944] overlayfs: failed to resolve './file0': -2 [ 76.064550][ T29] audit: type=1400 audit(1780415642.724:269): avc: denied { add_name } for pid=5907 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.110667][ T5942] pim6reg: entered allmulticast mode [ 76.220662][ T29] audit: type=1400 audit(1780415642.724:270): avc: denied { create } for pid=5907 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.264263][ T9] cfg80211: failed to load regulatory.db [ 76.309796][ T5946] team0: entered allmulticast mode [ 76.319480][ T5946] team_slave_0: entered allmulticast mode [ 76.327008][ T29] audit: type=1400 audit(1780415642.724:271): avc: denied { write } for pid=5907 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.bnep0.link" dev="tmpfs" ino=2007 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.393980][ T5946] team_slave_1: entered allmulticast mode [ 76.401082][ T5949] team0: left allmulticast mode [ 76.412627][ T29] audit: type=1400 audit(1780415642.724:272): avc: denied { append } for pid=5907 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" dev="tmpfs" ino=2007 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.438965][ T5949] team_slave_0: left allmulticast mode [ 76.448244][ T5949] team_slave_1: left allmulticast mode [ 76.491146][ T5949] pim6reg: left allmulticast mode [ 76.493869][ T29] audit: type=1400 audit(1780415643.304:273): avc: denied { write } for pid=5951 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.569523][ T29] audit: type=1400 audit(1780415643.304:274): avc: denied { remove_name } for pid=5951 comm="rm" name="resolv.conf.bnep0.link" dev="tmpfs" ino=2007 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.630710][ T29] audit: type=1400 audit(1780415643.304:275): avc: denied { unlink } for pid=5951 comm="rm" name="resolv.conf.bnep0.link" dev="tmpfs" ino=2007 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.679328][ T29] audit: type=1400 audit(1780415643.364:276): avc: denied { execute } for pid=5936 comm="syz.3.30" name="file0" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.917730][ T29] audit: type=1400 audit(1780415643.844:277): avc: denied { bind } for pid=5957 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.918531][ T5958] Bluetooth: MGMT ver 1.23 [ 77.255599][ T5723] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.441328][ T992] usb 1-1: USB disconnect, device number 2 [ 77.560604][ T5723] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 77.822182][ T5723] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.975495][ T5723] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.032233][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.061216][ T5723] usb 4-1: Product: syz [ 78.071680][ T5723] usb 4-1: Manufacturer: syz [ 78.082985][ T5723] usb 4-1: SerialNumber: syz [ 78.105494][ T5723] usb 4-1: config 0 descriptor?? [ 78.271236][ T5723] usb 4-1: selecting invalid altsetting 0 [ 78.513002][ T50] Bluetooth: Unknown LE signaling command 0x1d [ 78.522181][ T50] Bluetooth: Wrong link type (-22) [ 79.359415][ T5989] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 81.156212][ T5715] usb 4-1: USB disconnect, device number 3 [ 81.504292][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 81.504308][ T29] audit: type=1400 audit(1780415648.424:283): avc: denied { getopt } for pid=5996 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.601944][ T29] audit: type=1400 audit(1780415648.524:284): avc: denied { create } for pid=5996 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.695804][ T29] audit: type=1400 audit(1780415648.624:285): avc: denied { read write } for pid=5996 comm="syz.3.38" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 81.774172][ T29] audit: type=1400 audit(1780415648.644:286): avc: denied { open } for pid=5996 comm="syz.3.38" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 81.801859][ T5998] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5615] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5998] [ 82.078655][ T6007] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=1 [ 82.406542][ T5715] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.460938][ T29] audit: type=1400 audit(1780415649.384:287): avc: denied { ioctl } for pid=6018 comm="syz.4.44" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.486447][ T6020] binder: 6018:6020 ioctl f507 0 returned -22 [ 82.494738][ T6020] FAULT_INJECTION: forcing a failure. [ 82.494738][ T6020] name failslab, interval 1, probability 0, space 0, times 1 [ 82.507615][ T6020] CPU: 1 UID: 0 PID: 6020 Comm: syz.4.44 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.507644][ T6020] Tainted: [L]=SOFTLOCKUP [ 82.507651][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 82.507661][ T6020] Call Trace: [ 82.507670][ T6020] [ 82.507678][ T6020] dump_stack_lvl+0x100/0x190 [ 82.507706][ T6020] should_fail_ex.cold+0x5/0xa [ 82.507738][ T6020] should_failslab+0xc2/0x120 [ 82.507759][ T6020] __kmalloc_cache_noprof+0x7a/0x6f0 [ 82.507783][ T6020] ? smc_pnet_add+0x472/0x1720 [ 82.507812][ T6020] smc_pnet_add+0x472/0x1720 [ 82.507839][ T6020] ? __pfx_smc_pnet_add+0x10/0x10 [ 82.507863][ T6020] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 82.507890][ T6020] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 82.507921][ T6020] genl_family_rcv_msg_doit+0x214/0x300 [ 82.507949][ T6020] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 82.507983][ T6020] ? bpf_lsm_capable+0x9/0x10 [ 82.508001][ T6020] ? security_capable+0x80/0x260 [ 82.508028][ T6020] genl_rcv_msg+0x560/0x800 [ 82.508056][ T6020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.508081][ T6020] ? __pfx_smc_pnet_add+0x10/0x10 [ 82.508106][ T6020] ? __lock_acquire+0x4a5/0x2630 [ 82.508134][ T6020] netlink_rcv_skb+0x159/0x420 [ 82.508156][ T6020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.508181][ T6020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.508213][ T6020] ? netlink_deliver_tap+0x1ae/0xcc0 [ 82.508237][ T6020] genl_rcv+0x28/0x40 [ 82.508258][ T6020] netlink_unicast+0x585/0x850 [ 82.508284][ T6020] ? __pfx_netlink_unicast+0x10/0x10 [ 82.508313][ T6020] netlink_sendmsg+0x8b0/0xda0 [ 82.508339][ T6020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.508359][ T6020] ? __might_fault+0x60/0x140 [ 82.508394][ T6020] ____sys_sendmsg+0x9e1/0xb70 [ 82.508415][ T6020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.508438][ T6020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.508471][ T6020] ___sys_sendmsg+0x190/0x1e0 [ 82.508495][ T6020] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.508550][ T6020] __sys_sendmsg+0x170/0x220 [ 82.508578][ T6020] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.508616][ T6020] ? rcu_is_watching+0x12/0xc0 [ 82.508646][ T6020] do_syscall_64+0x115/0x870 [ 82.508668][ T6020] ? clear_bhb_loop+0x40/0x90 [ 82.508691][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.508709][ T6020] RIP: 0033:0x7f58fad9ce59 [ 82.508733][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.508749][ T6020] RSP: 002b:00007f58fbbf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.508767][ T6020] RAX: ffffffffffffffda RBX: 00007f58fb016090 RCX: 00007f58fad9ce59 [ 82.508778][ T6020] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 82.508788][ T6020] RBP: 00007f58fbbf4090 R08: 0000000000000000 R09: 0000000000000000 [ 82.508798][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.508808][ T6020] R13: 00007f58fb016128 R14: 00007f58fb016090 R15: 00007ffe888d96b8 [ 82.508833][ T6020] [ 82.520707][ T5716] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.627218][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 82.635616][ T5715] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 82.635643][ T5715] usb 1-1: config 0 has no interface number 0 [ 82.635675][ T5715] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.656374][ T5715] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 82.656435][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.656476][ T5715] usb 1-1: Product: syz [ 82.656514][ T5715] usb 1-1: Manufacturer: syz [ 82.656560][ T5715] usb 1-1: SerialNumber: syz [ 82.665518][ T5723] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.682790][ T5715] usb 1-1: config 0 descriptor?? [ 82.699540][ T5716] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.699609][ T5716] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.703788][ T5716] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.703824][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.703865][ T5716] usb 3-1: Product: syz [ 82.703902][ T5716] usb 3-1: Manufacturer: syz [ 82.703938][ T5716] usb 3-1: SerialNumber: syz [ 82.746300][ T5716] usb 3-1: config 0 descriptor?? [ 82.824775][ T5715] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 82.824836][ T5715] em28xx 1-1:0.132: Video interface 132 found: [ 82.825914][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 82.831739][ T5723] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 82.831776][ T5723] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.831814][ T5723] usb 2-1: config 0 has no interface number 0 [ 82.831921][ T5723] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 82.831954][ T5723] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 82.831996][ T5723] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 82.832024][ T5723] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 82.832066][ T5723] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 82.832095][ T5723] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 82.832137][ T5723] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 82.832170][ T5723] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.832211][ T5723] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 82.843056][ T5723] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 82.843091][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.843131][ T5723] usb 2-1: Product: syz [ 82.843173][ T5723] usb 2-1: Manufacturer: syz [ 82.843208][ T5723] usb 2-1: SerialNumber: syz [ 82.868026][ T5716] usb 3-1: selecting invalid altsetting 0 [ 82.870634][ T5723] usb 2-1: config 0 descriptor?? [ 82.875253][ T6015] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 82.939075][ T5723] usb 2-1: will this work? Command EP is not usually 12 [ 82.939138][ T5723] usb 2-1: will this work? Response EP is not usually 3 [ 82.939194][ T5723] usb 2-1: will this work? Image data EP is not usually 2 [ 83.039621][ T5723] scsi host1: microtekX6 [ 83.308507][ T5715] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 83.412161][ T6024] lo speed is unknown, defaulting to 1000 [ 83.412444][ T6024] lo speed is unknown, defaulting to 1000 [ 83.415456][ T29] audit: type=1400 audit(1780415650.334:288): avc: denied { write } for pid=6010 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.455913][ T6024] lo speed is unknown, defaulting to 1000 [ 83.462427][ T6024] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 83.462515][ T6024] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 83.462567][ T6024] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 83.475661][ T6024] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.514933][ T6024] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 83.774680][ T6024] lo speed is unknown, defaulting to 1000 [ 83.775490][ T6024] lo speed is unknown, defaulting to 1000 [ 83.776645][ T6024] lo speed is unknown, defaulting to 1000 [ 83.777323][ T6024] lo speed is unknown, defaulting to 1000 [ 83.778308][ T6024] lo speed is unknown, defaulting to 1000 [ 83.803652][ T12] usb 2-1: error -90 submitting URB [ 83.808941][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.809368][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.833201][ T29] audit: type=1400 audit(1780415650.754:289): avc: denied { create } for pid=6014 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.848171][ T2562] usb 2-1: error -90 submitting URB [ 83.890261][ T2562] usb 2-1: error -90 submitting URB [ 83.926745][ T2562] usb 2-1: error -90 submitting URB [ 83.935411][ T29] audit: type=1400 audit(1780415650.854:290): avc: denied { unlink } for pid=6008 comm="syz.0.41" name="#1" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.948488][ T29] audit: type=1400 audit(1780415650.874:291): avc: denied { mount } for pid=6008 comm="syz.0.41" name="/" dev="overlay" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.150903][ T6035] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 84.151001][ T6035] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 84.159706][ T6035] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 84.160155][ T29] audit: type=1400 audit(1780415651.084:292): avc: denied { firmware_load } for pid=6030 comm="syz.4.46" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 84.680031][ T5715] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 84.680304][ T5715] em28xx 1-1:0.132: board has no eeprom [ 84.710915][ T5723] usb 2-1: USB disconnect, device number 2 [ 84.809083][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.974164][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.062859][ T6009] trusted_key: encrypted_key: insufficient parameters specified [ 85.161675][ T6036] bond1: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 85.286356][ T5818] usb 3-1: USB disconnect, device number 2 [ 85.363211][ T5715] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 85.363229][ T5715] em28xx 1-1:0.132: analog set to bulk mode. [ 85.365279][ T5716] em28xx 1-1:0.132: Registering V4L2 extension [ 85.374190][ T5715] usb 1-1: USB disconnect, device number 3 [ 85.374872][ T5715] em28xx 1-1:0.132: Disconnecting em28xx [ 85.586748][ T50] Bluetooth: Unknown LE signaling command 0x1d [ 85.586854][ T50] Bluetooth: Wrong link type (-22) [ 86.850528][ T6046] Zero length message leads to an empty skb [ 87.100943][ T50] Bluetooth: Unknown LE signaling command 0x1d [ 87.101066][ T50] Bluetooth: Wrong link type (-22) [ 87.518411][ T50] Bluetooth: Unknown LE signaling command 0x1d [ 87.518567][ T50] Bluetooth: Wrong link type (-22) [ 87.959923][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 87.959938][ T29] audit: type=1400 audit(1780415654.884:294): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.529624][ T29] audit: type=1400 audit(1780415656.314:295): avc: denied { create } for pid=6067 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.529815][ T29] audit: type=1400 audit(1780415656.434:296): avc: denied { ioctl } for pid=6067 comm="syz.0.52" path="socket:[9673]" dev="sockfs" ino=9673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.673471][ T5716] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 89.673529][ T5716] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 89.673591][ T5716] em28xx 1-1:0.132: No AC97 audio processor [ 89.972438][ T5716] usb 1-1: Decoder not found [ 89.972495][ T5716] em28xx 1-1:0.132: failed to create media graph [ 89.973605][ T5716] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 90.308584][ T5716] em28xx 1-1:0.132: Remote control support is not available for this card. [ 90.385755][ T5715] em28xx 1-1:0.132: Closing input extension [ 91.603435][ T29] audit: type=1400 audit(1780415658.444:297): avc: denied { create } for pid=6072 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.603621][ T29] audit: type=1400 audit(1780415658.474:298): avc: denied { ioctl } for pid=6072 comm="syz.2.54" path="socket:[9692]" dev="sockfs" ino=9692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.736509][ T29] audit: type=1400 audit(1780415658.654:299): avc: denied { setopt } for pid=6074 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.744059][ T5715] em28xx 1-1:0.132: Freeing device [ 91.822499][ T29] audit: type=1400 audit(1780415658.724:300): avc: denied { write } for pid=6074 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.246260][ T29] audit: type=1400 audit(1780415659.174:301): avc: denied { create } for pid=6087 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.259829][ T29] audit: type=1400 audit(1780415659.184:302): avc: denied { connect } for pid=6087 comm="syz.4.58" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.268397][ T29] audit: type=1400 audit(1780415659.194:303): avc: denied { create } for pid=6087 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.719634][ T6102] befs: (nullb0): invalid magic header [ 93.020640][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 93.020659][ T29] audit: type=1400 audit(1780415659.634:309): avc: denied { mounton } for pid=6096 comm="syz.4.61" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 93.110168][ T29] audit: type=1400 audit(1780415660.034:310): avc: denied { read } for pid=6103 comm="syz.1.62" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.110213][ T29] audit: type=1400 audit(1780415660.034:311): avc: denied { open } for pid=6103 comm="syz.1.62" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.112122][ T29] audit: type=1400 audit(1780415660.034:312): avc: denied { ioctl } for pid=6103 comm="syz.1.62" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.162703][ T29] audit: type=1400 audit(1780415660.084:313): avc: denied { wake_alarm } for pid=6103 comm="syz.1.62" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.213950][ T6107] bond1: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 93.327939][ T5818] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 93.484510][ T5818] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.484536][ T5818] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.484558][ T5818] usb 1-1: config 1 has no interface number 0 [ 93.484592][ T5818] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.484618][ T5818] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 93.484643][ T5818] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 93.494486][ T5818] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.494576][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.494638][ T5818] usb 1-1: Product: syz [ 93.494694][ T5818] usb 1-1: Manufacturer: syz [ 93.494753][ T5818] usb 1-1: SerialNumber: syz [ 93.550820][ T6082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.553158][ T50] Bluetooth: Unknown LE signaling command 0x1d [ 93.553700][ T50] Bluetooth: Wrong link type (-22) [ 94.190762][ T6082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.414575][ T5818] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 94.414728][ T5818] cdc_ncm 1-1:1.1: bind() failure [ 94.788984][ T5818] usb 1-1: USB disconnect, device number 4 [ 95.344196][ T29] audit: type=1400 audit(1780415662.264:314): avc: denied { mount } for pid=6126 comm="syz.2.65" name="/" dev="ramfs" ino=8919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.122830][ T29] audit: type=1400 audit(1780415664.024:315): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 97.532401][ T29] audit: type=1400 audit(1780415664.454:316): avc: denied { write } for pid=6104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.682726][ T29] audit: type=1400 audit(1780415664.594:317): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.682889][ T29] audit: type=1400 audit(1780415664.594:318): avc: denied { open } for pid=5627 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.366374][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 98.366389][ T29] audit: type=1400 audit(1780415665.284:320): avc: denied { write } for pid=6139 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.684364][ T6140] pim6reg: entered allmulticast mode [ 99.154842][ T29] audit: type=1400 audit(1780415666.074:321): avc: denied { ioctl } for pid=6135 comm="syz.0.66" path="socket:[8936]" dev="sockfs" ino=8936 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.183377][ T6136] team0: entered allmulticast mode [ 99.189071][ T6136] team_slave_0: entered allmulticast mode [ 99.194802][ T6136] team_slave_1: entered allmulticast mode [ 99.225940][ T6136] team0: left allmulticast mode [ 99.230852][ T6136] team_slave_0: left allmulticast mode [ 99.236488][ T6136] team_slave_1: left allmulticast mode [ 99.242073][ T6136] pim6reg: left allmulticast mode [ 99.264065][ T29] audit: type=1400 audit(1780415666.184:322): avc: denied { read write } for pid=6150 comm="syz.4.71" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.292945][ T6151] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.71'. [ 99.318984][ T6151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.731521][ T805] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.745559][ T29] audit: type=1400 audit(1780415666.214:323): avc: denied { open } for pid=6150 comm="syz.4.71" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.771213][ T6151] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.71'. [ 99.804283][ T29] audit: type=1400 audit(1780415666.674:324): avc: denied { append } for pid=6155 comm="syz.2.70" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.882723][ T29] audit: type=1400 audit(1780415666.794:325): avc: denied { mounton } for pid=6150 comm="syz.4.71" path="/12/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 99.931887][ T29] audit: type=1400 audit(1780415666.854:326): avc: denied { mount } for pid=6150 comm="syz.4.71" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 99.935434][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 99.978837][ T805] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.015013][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.029038][ T29] audit: type=1400 audit(1780415666.894:327): avc: denied { map } for pid=6150 comm="syz.4.71" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.053711][ T805] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 100.069791][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.129294][ T805] usb 4-1: config 0 descriptor?? [ 100.157650][ T29] audit: type=1400 audit(1780415667.084:328): avc: denied { write } for pid=6144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.189947][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 100.232134][ T9] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 100.235534][ T5818] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 100.250146][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.281096][ T9] usb 2-1: Product: syz [ 100.291732][ T9] usb 2-1: Manufacturer: syz [ 100.305390][ T9] usb 2-1: SerialNumber: syz [ 100.350875][ T29] audit: type=1400 audit(1780415667.274:329): avc: denied { write } for pid=6168 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.487614][ T5818] usb 5-1: not running at top speed; connect to a high speed hub [ 100.499770][ T5818] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 100.506434][ T6176] xt_hashlimit: size too large, truncated to 1048576 [ 100.533287][ T5818] usb 5-1: string descriptor 0 read error: -22 [ 100.541922][ T5818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.580974][ T805] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 100.598633][ T9] usb 2-1: selecting invalid altsetting 1 [ 100.604695][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.605752][ T805] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 100.665885][ T805] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 100.680158][ T5818] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 100.698315][ T805] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 100.699346][ T9] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 100.726991][ T9] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 100.727053][ T805] magicmouse 0003:05AC:0265.0002: item fetching failed at offset 7/35 [ 100.806859][ T9] usb 2-1: USB disconnect, device number 3 [ 101.140624][ T805] magicmouse 0003:05AC:0265.0002: magicmouse hid parse failed [ 101.149263][ T6189] netlink: 72 bytes leftover after parsing attributes in process `syz.3.69'. [ 101.202430][ T805] magicmouse 0003:05AC:0265.0002: probe with driver magicmouse failed with error -22 [ 101.236009][ T5810] usb 5-1: USB disconnect, device number 6 [ 101.585939][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.677048][ T6176] lo speed is unknown, defaulting to 1000 [ 101.745496][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 101.762410][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 101.778569][ T9] usb 3-1: config 0 has no interface number 0 [ 101.800854][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 101.826802][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.853307][ T9] usb 3-1: Product: syz [ 101.861571][ T9] usb 3-1: Manufacturer: syz [ 101.878508][ T9] usb 3-1: SerialNumber: syz [ 101.916775][ T9] usb 3-1: config 0 descriptor?? [ 101.936375][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 102.530136][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 102.567842][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 102.808507][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 102.816492][ T9] usb 3-1: USB disconnect, device number 3 [ 102.880463][ T5740] usb 4-1: USB disconnect, device number 4 [ 102.893393][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 103.081582][ T50] Bluetooth: Unknown LE signaling command 0x1d [ 103.090689][ T50] Bluetooth: Wrong link type (-22) [ 104.001488][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.005647][ T9] quatech2 3-1:0.51: device disconnected [ 106.180607][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 106.180623][ T29] audit: type=1400 audit(1780415673.104:336): avc: denied { create } for pid=6251 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.289025][ T29] audit: type=1400 audit(1780415673.144:337): avc: denied { write } for pid=6218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.522641][ T6259] o2cb: This node has not been configured. [ 106.528775][ T6259] o2cb: Cluster check failed. Fix errors before retrying. [ 106.537282][ T6259] (syz.0.85,6259,0):user_dlm_register:674 ERROR: status = -22 [ 106.546431][ T6259] (syz.0.85,6259,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 106.614450][ T6259] (syz.0.85,6259,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 106.681304][ T29] audit: type=1400 audit(1780415673.434:338): avc: denied { write } for pid=6249 comm="syz.0.85" name="/" dev="ocfs2_dlmfs" ino=9101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.226974][ T29] audit: type=1400 audit(1780415673.444:339): avc: denied { add_name } for pid=6249 comm="syz.0.85" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.294221][ T29] audit: type=1400 audit(1780415673.444:340): avc: denied { create } for pid=6249 comm="syz.0.85" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 107.339286][ T29] audit: type=1400 audit(1780415673.444:341): avc: denied { associate } for pid=6249 comm="syz.0.85" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 107.382478][ T29] audit: type=1400 audit(1780415673.534:342): avc: denied { write } for pid=6249 comm="syz.0.85" name="/" dev="ocfs2_dlmfs" ino=9101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.417505][ T29] audit: type=1400 audit(1780415673.604:343): avc: denied { create } for pid=6247 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.438433][ T29] audit: type=1800 audit(1780415673.824:344): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.86" name="file0" dev="overlay" ino=95 res=0 errno=0 [ 107.515070][ T29] audit: type=1400 audit(1780415674.204:345): avc: denied { write } for pid=6262 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.735460][ T5810] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.936992][ T5810] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.945987][ T5810] usb 3-1: config 0 has no interface number 0 [ 108.953348][ T5810] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.971574][ T5810] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.973984][ T6295] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.93'. [ 108.984318][ T5810] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 109.003537][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.064076][ T5818] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.236368][ T5810] usb 3-1: config 0 descriptor?? [ 109.276366][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 109.301770][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.384525][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.436939][ T5818] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 109.464012][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.606930][ T5631] Bluetooth: Unknown LE signaling command 0x1d [ 109.614447][ T5631] Bluetooth: Wrong link type (-22) [ 109.712167][ T6301] netlink: 'syz.3.95': attribute type 2 has an invalid length. [ 109.816427][ T5818] usb 1-1: config 0 descriptor?? [ 109.916606][ T6303] netlink: 'syz.3.95': attribute type 2 has an invalid length. [ 110.103924][ T805] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.360665][ T805] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.400170][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.460685][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 110.513744][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.589018][ T805] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.625257][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.660584][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.679599][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.716094][ T5631] Bluetooth: hci4: command 0x0405 tx timeout [ 110.805044][ T805] usb 2-1: config 0 descriptor?? [ 111.061375][ T5810] asus 0003:0B05:17E0.0003: item fetching failed at offset 5/7 [ 111.479823][ T5810] asus 0003:0B05:17E0.0003: Asus hid parse failed: -22 [ 111.479902][ T5810] asus 0003:0B05:17E0.0003: probe with driver asus failed with error -22 [ 112.098349][ T6310] loop8: detected capacity change from 0 to 7 [ 112.105720][ T5810] usb 3-1: USB disconnect, device number 4 [ 112.128874][ T805] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 112.137459][ T6310] Dev loop8: unable to read RDB block 7 [ 112.137512][ T6310] loop8: unable to read partition table [ 112.137689][ T6310] loop8: partition table beyond EOD, truncated [ 112.137715][ T6310] loop_reread_partitions: partition scan of loop8 (þ被xü^>±à– ) failed (rc=-5) [ 112.263562][ T5818] usbhid 1-1:0.0: can't add hid device: -71 [ 112.263671][ T5818] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 112.267217][ T5818] usb 1-1: USB disconnect, device number 5 [ 112.381572][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 112.381588][ T29] audit: type=1400 audit(1780415679.304:358): avc: denied { create } for pid=6315 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.508221][ T5810] usb 2-1: USB disconnect, device number 4 [ 112.604297][ T6329] netlink: 'syz.0.100': attribute type 1 has an invalid length. [ 112.674804][ T6329] bond1: entered promiscuous mode [ 112.696033][ T6329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.743672][ T6334] syzkaller0: entered promiscuous mode [ 112.749969][ T6334] syzkaller0: entered allmulticast mode [ 112.768052][ T29] audit: type=1400 audit(1780415679.694:359): avc: denied { relabelfrom } for pid=6333 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 112.775018][ T6332] netlink: 56 bytes leftover after parsing attributes in process `syz.0.100'. [ 112.806198][ T29] audit: type=1400 audit(1780415679.694:360): avc: denied { ioctl } for pid=6327 comm="syz.0.100" path="socket:[10162]" dev="sockfs" ino=10162 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.835532][ T29] audit: type=1400 audit(1780415679.714:361): avc: denied { relabelto } for pid=6333 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 112.855887][ T29] audit: type=1400 audit(1780415679.724:362): avc: denied { sqpoll } for pid=6333 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.070135][ T29] audit: type=1400 audit(1780415679.994:363): avc: denied { read write } for pid=6338 comm="syz.0.103" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 113.121234][ T29] audit: type=1400 audit(1780415679.994:364): avc: denied { open } for pid=6338 comm="syz.0.103" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 113.159764][ T6346] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 113.171755][ T29] audit: type=1400 audit(1780415680.094:365): avc: denied { relabelto } for pid=6340 comm="syz.4.104" name="18" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 113.245405][ T29] audit: type=1400 audit(1780415680.094:366): avc: denied { associate } for pid=6340 comm="syz.4.104" name="18" dev="tmpfs" ino=114 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 113.485447][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.666813][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 113.678733][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.695481][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.706545][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.716315][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.729055][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.758690][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.774182][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.782308][ T9] usb 5-1: Manufacturer: syz [ 113.808386][ T9] usb 5-1: config 0 descriptor?? [ 114.115461][ T9] rc_core: IR keymap rc-hauppauge not found [ 114.122619][ T9] Registered IR keymap rc-empty [ 114.130172][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.176265][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.208580][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 114.243858][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 114.336421][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.367502][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.406386][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.436450][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.465573][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.495464][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.525523][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.545500][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.565509][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.597054][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.654317][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 114.663564][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 114.685149][ T9] usb 5-1: USB disconnect, device number 7 [ 115.141939][ T29] audit: type=1400 audit(1780415682.064:367): avc: denied { write } for pid=5625 comm="syz-executor" name="18" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 115.529454][ T5730] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.653880][ T6371] binder: 6370:6371 ioctl c00c620f 200000000340 returned -22 [ 115.716561][ T5730] usb 5-1: Using ep0 maxpacket: 32 [ 115.734552][ T5617] IPVS: starting estimator thread 0... [ 115.749622][ T5730] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 115.772690][ T5730] usb 5-1: config 0 has no interface number 0 [ 115.785963][ T5730] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.802429][ T5730] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 115.825515][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.848905][ T5730] usb 5-1: Product: syz [ 115.857060][ T5730] usb 5-1: Manufacturer: syz [ 115.866020][ T5730] usb 5-1: SerialNumber: syz [ 115.878993][ T5730] usb 5-1: config 0 descriptor?? [ 115.907610][ T5730] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 115.928369][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 115.939487][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 115.956480][ T5730] em28xx 5-1:0.132: Video interface 132 found: [ 115.964810][ T6377] dlm: no locking on control device [ 115.970188][ T6374] IPVS: using max 43 ests per chain, 103200 per kthread [ 116.019361][ T6385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.115'. [ 116.324840][ T5730] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 116.583696][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.613830][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.641460][ T6365] overlayfs: missing 'lowerdir' [ 116.877932][ T5730] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 116.891118][ T5730] em28xx 5-1:0.132: board has no eeprom [ 116.891864][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.907416][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.915528][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.918733][ T6365] trusted_key: encrypted_key: insufficient parameters specified [ 117.005458][ T5730] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 117.013708][ T5730] em28xx 5-1:0.132: analog set to bulk mode. [ 117.020290][ T5617] em28xx 5-1:0.132: Registering V4L2 extension [ 117.034745][ T5730] usb 5-1: USB disconnect, device number 8 [ 117.050866][ T5730] em28xx 5-1:0.132: Disconnecting em28xx [ 117.065561][ T5810] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.073196][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 117.081691][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.093343][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.104603][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.114722][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 117.124983][ T5617] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 117.132402][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.145508][ T5617] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 117.153710][ T5617] em28xx 5-1:0.132: No AC97 audio processor [ 117.161292][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.171619][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.179875][ T5617] usb 5-1: Decoder not found [ 117.184591][ T5617] em28xx 5-1:0.132: failed to create media graph [ 117.191017][ T5617] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 117.198682][ T9] usb 2-1: Manufacturer: syz [ 117.204431][ T5617] em28xx 5-1:0.132: Remote control support is not available for this card. [ 117.213866][ T5730] em28xx 5-1:0.132: Closing input extension [ 117.220877][ T9] usb 2-1: config 0 descriptor?? [ 117.232506][ T5730] em28xx 5-1:0.132: Freeing device [ 117.238079][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 117.245012][ T5810] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.257849][ T5810] usb 4-1: config 0 has no interface number 0 [ 117.273989][ T5810] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 117.284173][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.293888][ T5810] usb 4-1: Product: syz [ 117.301999][ T5810] usb 4-1: Manufacturer: syz [ 117.313328][ T5810] usb 4-1: SerialNumber: syz [ 117.325641][ T5810] usb 4-1: config 0 descriptor?? [ 117.334014][ T5810] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 117.478302][ T9] rc_core: IR keymap rc-hauppauge not found [ 117.483230][ T50] Bluetooth: hci4: link tx timeout [ 117.490113][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.503531][ T9] Registered IR keymap rc-empty [ 117.513378][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.546246][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.578021][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 118.042083][ T6415] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 118.455097][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 118.471904][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.506256][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.535737][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.566301][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.585487][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.615675][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.646220][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.680006][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.705471][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.736902][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.767435][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 118.785140][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 118.827918][ T9] usb 2-1: USB disconnect, device number 5 [ 119.176042][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 119.176234][ T29] audit: type=1400 audit(1780415686.094:381): avc: denied { write } for pid=6417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.295205][ T29] audit: type=1400 audit(1780415686.214:382): avc: denied { write } for pid=5627 comm="syz-executor" name="29" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 119.332141][ T5810] gspca_spca1528: reg_r err -71 [ 119.342422][ T5810] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 119.342420][ T29] audit: type=1400 audit(1780415686.214:383): avc: denied { write } for pid=5627 comm="syz-executor" name="29" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 119.342461][ T29] audit: type=1400 audit(1780415686.214:384): avc: denied { write } for pid=5627 comm="syz-executor" name="29" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 119.410838][ T29] audit: type=1400 audit(1780415686.214:385): avc: denied { write } for pid=5627 comm="syz-executor" name="29" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 119.465111][ T29] audit: type=1400 audit(1780415686.214:386): avc: denied { write } for pid=5627 comm="syz-executor" name="29" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 119.496862][ T5810] usb 4-1: USB disconnect, device number 5 [ 119.524192][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 119.558374][ T29] audit: type=1400 audit(1780415686.434:387): avc: denied { append } for pid=6436 comm="syz.1.126" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.593896][ T6440] lo speed is unknown, defaulting to 1000 [ 119.690350][ T29] audit: type=1400 audit(1780415686.614:388): avc: denied { write } for pid=6437 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.142468][ T29] audit: type=1400 audit(1780415687.064:389): avc: denied { write } for pid=6449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.247253][ T29] audit: type=1400 audit(1780415687.154:390): avc: denied { write } for pid=6469 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.390659][ T6476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.134'. [ 120.535458][ T5715] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.077494][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 121.094728][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.120349][ T5818] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.134546][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.172875][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.204667][ T5715] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 121.221031][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.344654][ T5715] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 121.354464][ T5715] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 121.363295][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 121.369090][ T5715] usb 3-1: Manufacturer: syz [ 121.375139][ T5818] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 121.387827][ T5818] usb 2-1: config 0 has no interface number 0 [ 121.391404][ T6491] lo speed is unknown, defaulting to 1000 [ 121.420679][ T5818] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.458402][ T5818] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 121.470855][ T5715] usb 3-1: config 0 descriptor?? [ 121.503000][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.534283][ T5818] usb 2-1: Product: syz [ 121.547141][ T5818] usb 2-1: Manufacturer: syz [ 121.551930][ T5818] usb 2-1: SerialNumber: syz [ 121.561958][ T5818] usb 2-1: config 0 descriptor?? [ 121.577759][ T5818] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 121.588117][ T5818] em28xx 2-1:0.132: Video interface 132 found: [ 121.615439][ T5810] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 121.683445][ T6499] XFS (nullb0): Invalid superblock magic number [ 121.775748][ T5715] rc_core: IR keymap rc-hauppauge not found [ 121.781915][ T5715] Registered IR keymap rc-empty [ 121.787491][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.806527][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.829206][ T5715] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 121.850680][ T5715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 121.871758][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.895706][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.915569][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.935977][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.961024][ T6507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.984034][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.991471][ T5818] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 122.016829][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.095497][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.115559][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.126283][ T5810] usb 5-1: config 0 has no interfaces? [ 122.141952][ T5810] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 122.153006][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.156933][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.171350][ T5810] usb 5-1: config 0 descriptor?? [ 122.205714][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.216035][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.216887][ T5715] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 122.240762][ T6478] overlayfs: missing 'lowerdir' [ 122.268290][ T5715] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 122.277656][ T5715] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 122.292981][ T5715] usb 3-1: USB disconnect, device number 5 [ 122.430064][ T5810] usb 5-1: USB disconnect, device number 9 [ 122.459264][ T5818] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 122.473476][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.502164][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.515862][ T5818] em28xx 2-1:0.132: board has no eeprom [ 122.537872][ T6478] trusted_key: encrypted_key: insufficient parameters specified [ 122.615435][ T5818] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 122.627077][ T5818] em28xx 2-1:0.132: analog set to bulk mode. [ 122.633165][ T5715] em28xx 2-1:0.132: Registering V4L2 extension [ 122.654128][ T5818] usb 2-1: USB disconnect, device number 6 [ 122.671565][ T5818] em28xx 2-1:0.132: Disconnecting em28xx [ 122.774794][ T6526] netlink: 68 bytes leftover after parsing attributes in process `syz.0.143'. [ 122.834488][ T6530] binder: 6529:6530 ioctl c0385868 0 returned -22 [ 122.853961][ T5715] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 122.869736][ T6530] binder: 6529:6530 ioctl c0046209 200000000000000 returned -22 [ 122.870590][ T5715] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 122.907864][ T5715] em28xx 2-1:0.132: No AC97 audio processor [ 122.933695][ T5715] usb 2-1: Decoder not found [ 122.948754][ T5715] em28xx 2-1:0.132: failed to create media graph [ 122.958008][ T5715] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 123.002222][ T5715] em28xx 2-1:0.132: Remote control support is not available for this card. [ 123.114931][ T5818] em28xx 2-1:0.132: Closing input extension [ 123.617750][ T5818] em28xx 2-1:0.132: Freeing device [ 123.780463][ T6549] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=1 [ 123.863556][ T6553] lo speed is unknown, defaulting to 1000 [ 124.046393][ T6560] Illegal XDP return value 4294967274 on prog (id 15) dev syz_tun, expect packet loss! [ 124.209349][ T6564] trusted_key: syz.1.150 sent an empty control message without MSG_MORE. [ 124.530380][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 124.530396][ T29] audit: type=1400 audit(1780415691.454:411): avc: denied { bind } for pid=6555 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.604192][ T29] audit: type=1400 audit(1780415691.494:412): avc: denied { connect } for pid=6555 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.683215][ T6576] kAFS: Can only specify source 'none' with -o dyn [ 124.743241][ T29] audit: type=1400 audit(1780415691.664:414): avc: denied { write } for pid=6558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.798853][ T29] audit: type=1400 audit(1780415691.694:415): avc: denied { write } for pid=6575 comm="syz.1.151" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.845629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 124.942267][ T29] audit: type=1400 audit(1780415691.694:416): avc: denied { ioctl } for pid=6575 comm="syz.1.151" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 125.957950][ T29] audit: type=1400 audit(1780415691.644:413): avc: denied { set_context_mgr } for pid=6575 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 125.978454][ T29] audit: type=1400 audit(1780415691.824:417): avc: denied { map } for pid=6575 comm="syz.1.151" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.002449][ T29] audit: type=1400 audit(1780415692.024:418): avc: denied { connect } for pid=6584 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.022001][ T29] audit: type=1400 audit(1780415692.124:419): avc: denied { write } for pid=6583 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.101167][ T29] audit: type=1400 audit(1780415693.024:420): avc: denied { append } for pid=6589 comm="syz.0.154" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.265694][ T6599] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 126.305453][ T6597] smbdirect: ib_dev[syz0] removed [ 126.756605][ T6615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.162'. [ 127.009290][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.066934][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.102166][ T6622] x_tables: duplicate entry at hook 2 [ 127.235776][ T5810] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 127.439332][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.447587][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.587057][ T6633] kAFS: Can only specify source 'none' with -o dyn [ 127.736324][ T6636] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=1 [ 127.958023][ T6640] binder: 6639:6640 ioctl c0306201 0 returned -14 [ 128.016593][ T6638] efs: cannot read volume header [ 128.311781][ T6648] warning: `syz.0.173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.530764][ T6656] fuse: Bad value for 'rootmode' [ 129.660347][ T6653] could not allocate digest TFM handle md5 [ 129.799870][ T6619] kexec: Could not allocate control_code_buffer [ 129.884874][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 129.884892][ T29] audit: type=1400 audit(1780415696.804:439): avc: denied { append } for pid=6664 comm="syz.2.176" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 129.947947][ T29] audit: type=1400 audit(1780415696.804:440): avc: denied { open } for pid=6664 comm="syz.2.176" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 130.073861][ T29] audit: type=1400 audit(1780415696.994:441): avc: denied { ioctl } for pid=6664 comm="syz.2.176" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 130.527934][ T29] audit: type=1400 audit(1780415697.454:442): avc: denied { call } for pid=6668 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 130.885670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 131.295525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 131.688076][ T29] audit: type=1400 audit(1780415697.454:443): avc: denied { transfer } for pid=6668 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 131.755924][ T6684] kAFS: Can only specify source 'none' with -o dyn [ 131.768277][ T29] audit: type=1400 audit(1780415697.984:444): avc: denied { write } for pid=6670 comm="syz.4.178" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.814499][ T6684] binder: BINDER_SET_CONTEXT_MGR already set [ 131.825438][ T6684] binder: 6683:6684 ioctl 4018620d 2000000002c0 returned -16 [ 131.967458][ T29] audit: type=1400 audit(1780415698.884:445): avc: denied { ioctl } for pid=6686 comm="syz.0.181" path="socket:[12018]" dev="sockfs" ino=12018 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 132.251258][ T6702] No such timeout policy "syz1" [ 132.558121][ T5730] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.799146][ T5737] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.826775][ T5730] usb 3-1: Using ep0 maxpacket: 32 [ 132.894132][ T5730] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 132.951596][ T5730] usb 3-1: config 0 has no interface number 0 [ 133.023278][ T5730] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 133.057714][ T5737] usb 5-1: Using ep0 maxpacket: 16 [ 133.092618][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.104352][ T5737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.448602][ T5730] usb 3-1: Product: syz [ 133.452873][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.463914][ T5730] usb 3-1: Manufacturer: syz [ 133.470672][ T5730] usb 3-1: SerialNumber: syz [ 133.475586][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.486698][ T5737] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.500400][ T5730] usb 3-1: config 0 descriptor?? [ 133.508124][ T5730] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 133.517437][ T5737] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.532065][ T5737] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 133.562940][ T5737] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 133.588859][ T5737] usb 5-1: Manufacturer: syz [ 133.633965][ T5737] usb 5-1: config 0 descriptor?? [ 133.726560][ T5730] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 133.772067][ T5730] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 133.995535][ T5737] rc_core: IR keymap rc-hauppauge not found [ 134.001725][ T5737] Registered IR keymap rc-empty [ 134.017068][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.055461][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.106010][ T5737] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 134.127630][ T5818] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.141960][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 134.150690][ T5730] usb 3-1: USB disconnect, device number 6 [ 134.170647][ T5737] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 134.187381][ T5730] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 134.220080][ T5730] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 134.234049][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.243134][ T5730] quatech2 3-1:0.51: device disconnected [ 134.249349][ T29] audit: type=1400 audit(1780415701.164:446): avc: denied { read } for pid=4969 comm="acpid" name="event4" dev="devtmpfs" ino=3046 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.275703][ T29] audit: type=1400 audit(1780415701.164:447): avc: denied { open } for pid=4969 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3046 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.299256][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.308280][ T29] audit: type=1400 audit(1780415701.164:448): avc: denied { ioctl } for pid=4969 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3046 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.333665][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.355463][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.375460][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.386044][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 134.393732][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.396123][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.404869][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.428499][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.428990][ T5818] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.445088][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.455761][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.463953][ T5818] usb 2-1: config 0 descriptor?? [ 134.486231][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.486615][ T5818] hub 2-1:0.0: USB hub found [ 134.535661][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 134.557249][ T5737] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 134.567024][ T5737] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 134.625177][ T5737] usb 5-1: USB disconnect, device number 10 [ 134.697297][ T6722] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6722 comm=syz.1.189 [ 134.762125][ T5818] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 134.818540][ T5818] usbhid 2-1:0.0: can't add hid device: -71 [ 134.841811][ T5818] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 134.931314][ T5818] usb 2-1: USB disconnect, device number 7 [ 135.040706][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 135.040724][ T29] audit: type=1400 audit(1780415701.964:504): avc: denied { execute_no_trans } for pid=6735 comm="syz.4.195" path="/32/file0" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.885821][ T5737] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 136.247205][ T5737] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 136.277726][ T5737] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 136.313494][ T5737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 136.344513][ T5737] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 136.359432][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 136.384502][ T5737] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 136.406441][ T5737] usb 2-1: string descriptor 0 read error: -22 [ 136.413073][ T5737] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 136.423609][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.446287][ T5737] usb 2-1: config 0 descriptor?? [ 136.459109][ T6750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.467933][ T5737] hub 2-1:0.0: bad descriptor, ignoring hub [ 136.485750][ T5737] hub 2-1:0.0: probe with driver hub failed with error -5 [ 136.523438][ T5737] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 136.573081][ T6776] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=1 [ 136.742729][ T6750] binder: BC_ACQUIRE_RESULT not supported [ 136.755972][ T6750] binder: 6748:6750 ioctl c0306201 2000000001c0 returned -22 [ 136.764697][ T5716] usb 2-1: USB disconnect, device number 8 [ 136.775560][ T5818] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.898666][ T29] audit: type=1400 audit(1780415703.824:505): avc: denied { mount } for pid=6779 comm="syz.2.211" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 136.921724][ T29] audit: type=1400 audit(1780415703.824:506): avc: denied { search } for pid=6779 comm="syz.2.211" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.947425][ T29] audit: type=1400 audit(1780415703.874:507): avc: denied { create } for pid=6786 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.967496][ T29] audit: type=1400 audit(1780415703.894:508): avc: denied { accept } for pid=6786 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.976209][ T5818] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 137.023736][ T5818] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 137.039722][ T6789] FAULT_INJECTION: forcing a failure. [ 137.039722][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 137.047555][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 137.062689][ T5818] usb 4-1: Product: syz [ 137.067150][ T5818] usb 4-1: Manufacturer: syz [ 137.071787][ T5818] usb 4-1: SerialNumber: syz [ 137.079380][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.0.213 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.079410][ T6789] Tainted: [L]=SOFTLOCKUP [ 137.079416][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.079426][ T6789] Call Trace: [ 137.079432][ T6789] [ 137.079439][ T6789] dump_stack_lvl+0x100/0x190 [ 137.079466][ T6789] should_fail_ex.cold+0x5/0xa [ 137.079492][ T6789] should_failslab+0xc2/0x120 [ 137.079512][ T6789] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 137.079539][ T6789] ? sock_alloc_inode+0x26/0x290 [ 137.079561][ T6789] ? __pfx_sock_alloc_inode+0x10/0x10 [ 137.079580][ T6789] sock_alloc_inode+0x26/0x290 [ 137.079598][ T6789] ? __pfx_sock_alloc_inode+0x10/0x10 [ 137.079615][ T6789] alloc_inode+0x68/0x250 [ 137.079633][ T6789] sock_alloc+0x44/0x280 [ 137.079651][ T6789] do_accept+0xf9/0x530 [ 137.079674][ T6789] ? do_raw_spin_lock+0x128/0x260 [ 137.079701][ T6789] ? __pfx_do_accept+0x10/0x10 [ 137.079743][ T6789] __sys_accept4+0x108/0x200 [ 137.079768][ T6789] ? __pfx___sys_accept4+0x10/0x10 [ 137.079789][ T6789] ? ksys_write+0x1ac/0x250 [ 137.079808][ T6789] ? __pfx_ksys_write+0x10/0x10 [ 137.079831][ T6789] __x64_sys_accept+0x74/0xb0 [ 137.079851][ T6789] ? lockdep_hardirqs_on+0x78/0x100 [ 137.079873][ T6789] do_syscall_64+0x115/0x870 [ 137.079893][ T6789] ? clear_bhb_loop+0x40/0x90 [ 137.079914][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.079931][ T6789] RIP: 0033:0x7fa832f9ce59 [ 137.079946][ T6789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.079961][ T6789] RSP: 002b:00007fa833e96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 137.079978][ T6789] RAX: ffffffffffffffda RBX: 00007fa833215fa0 RCX: 00007fa832f9ce59 [ 137.079988][ T6789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 137.079997][ T6789] RBP: 00007fa833e96090 R08: 0000000000000000 R09: 0000000000000000 [ 137.080007][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.080016][ T6789] R13: 00007fa833216038 R14: 00007fa833215fa0 R15: 00007ffdf1eb7568 [ 137.080039][ T6789] [ 137.081483][ T5818] usb 4-1: config 0 descriptor?? [ 137.284927][ T29] audit: type=1400 audit(1780415704.204:509): avc: denied { shutdown } for pid=6795 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.297337][ T5818] gspca_main: 045e:02bf too many config [ 137.502793][ T29] audit: type=1400 audit(1780415704.414:510): avc: denied { connect } for pid=6797 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.088688][ T6773] [U]  [ 138.091667][ T29] audit: type=1400 audit(1780415704.464:511): avc: denied { accept } for pid=6797 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.125261][ T5818] usb 4-1: USB disconnect, device number 6 [ 138.155575][ T29] audit: type=1400 audit(1780415704.464:512): avc: denied { write } for pid=6797 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.172734][ T6805] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 138.175800][ T29] audit: type=1400 audit(1780415704.464:513): avc: denied { read } for pid=6797 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.278099][ T6808] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=1 [ 138.292409][ T6805] UDF-fs: Scanning with blocksize 512 failed [ 138.373096][ T6805] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 138.406602][ T6805] UDF-fs: Scanning with blocksize 1024 failed [ 138.428114][ T6805] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 138.471739][ T6805] UDF-fs: Scanning with blocksize 2048 failed [ 138.511386][ T6805] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 138.525955][ T6805] UDF-fs: Scanning with blocksize 4096 failed [ 138.595021][ T6817] mmap: syz.2.224 (6817) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.742233][ T6823] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.225'. [ 138.757721][ T6822] FAULT_INJECTION: forcing a failure. [ 138.757721][ T6822] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.786264][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 138.813587][ T6822] CPU: 0 UID: 0 PID: 6822 Comm: syz.3.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.813616][ T6822] Tainted: [L]=SOFTLOCKUP [ 138.813622][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.813632][ T6822] Call Trace: [ 138.813638][ T6822] [ 138.813645][ T6822] dump_stack_lvl+0x100/0x190 [ 138.813669][ T6822] should_fail_ex.cold+0x5/0xa [ 138.813693][ T6822] _copy_to_user+0x32/0xd0 [ 138.813715][ T6822] simple_read_from_buffer+0xcb/0x170 [ 138.813737][ T6822] proc_fail_nth_read+0x1af/0x230 [ 138.813755][ T6822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.813774][ T6822] ? rw_verify_area+0xce/0x6d0 [ 138.813790][ T6822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.813807][ T6822] vfs_read+0x1e4/0xb30 [ 138.813827][ T6822] ? __pfx_vfs_read+0x10/0x10 [ 138.813842][ T6822] ? __fget_files+0x215/0x3d0 [ 138.813867][ T6822] ? __fget_files+0x21f/0x3d0 [ 138.813893][ T6822] ksys_read+0x12a/0x250 [ 138.813912][ T6822] ? __pfx_ksys_read+0x10/0x10 [ 138.813932][ T6822] ? rcu_is_watching+0x12/0xc0 [ 138.813960][ T6822] do_syscall_64+0x115/0x870 [ 138.813979][ T6822] ? clear_bhb_loop+0x40/0x90 [ 138.813996][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.814011][ T6822] RIP: 0033:0x7f6dba55d68e [ 138.814032][ T6822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.814049][ T6822] RSP: 002b:00007f6dbb493fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.814064][ T6822] RAX: ffffffffffffffda RBX: 00007f6dbb4946c0 RCX: 00007f6dba55d68e [ 138.814074][ T6822] RDX: 000000000000000f RSI: 00007f6dbb4940a0 RDI: 0000000000000004 [ 138.814084][ T6822] RBP: 00007f6dbb494090 R08: 0000000000000000 R09: 0000000000000000 [ 138.814094][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.814103][ T6822] R13: 00007f6dba816038 R14: 00007f6dba815fa0 R15: 00007ffdfc5ff678 [ 138.814127][ T6822] [ 139.535444][ T5715] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.002966][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 140.033003][ T5715] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 140.063942][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.111087][ T5715] usb 4-1: config 0 descriptor?? [ 140.141770][ T5715] gspca_main: sq930x-2.14.0 probing 041e:403c [ 140.572552][ T6842] bond1: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 140.830735][ T6853] FAULT_INJECTION: forcing a failure. [ 140.830735][ T6853] name failslab, interval 1, probability 0, space 0, times 0 [ 140.830759][ T6853] CPU: 0 UID: 0 PID: 6853 Comm: syz.2.235 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.830774][ T6853] Tainted: [L]=SOFTLOCKUP [ 140.830778][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.830784][ T6853] Call Trace: [ 140.830788][ T6853] [ 140.830792][ T6853] dump_stack_lvl+0x100/0x190 [ 140.830816][ T6853] should_fail_ex.cold+0x5/0xa [ 140.830840][ T6853] should_failslab+0xc2/0x120 [ 140.830858][ T6853] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 140.830882][ T6853] ? do_getname+0x35/0x390 [ 140.830902][ T6853] do_getname+0x35/0x390 [ 140.830919][ T6853] user_path_at+0x26/0x60 [ 140.830932][ T6853] __x64_sys_umount+0x10a/0x1a0 [ 140.830949][ T6853] ? __pfx___x64_sys_umount+0x10/0x10 [ 140.830973][ T6853] ? rcu_is_watching+0x12/0xc0 [ 140.831002][ T6853] do_syscall_64+0x115/0x870 [ 140.831024][ T6853] ? clear_bhb_loop+0x40/0x90 [ 140.831040][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.831052][ T6853] RIP: 0033:0x7f275b39ce59 [ 140.831061][ T6853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.831071][ T6853] RSP: 002b:00007f275c220028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 140.831082][ T6853] RAX: ffffffffffffffda RBX: 00007f275b615fa0 RCX: 00007f275b39ce59 [ 140.831089][ T6853] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000240 [ 140.831096][ T6853] RBP: 00007f275c220090 R08: 0000000000000000 R09: 0000000000000000 [ 140.831106][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.831116][ T6853] R13: 00007f275b616038 R14: 00007f275b615fa0 R15: 00007ffc90461f78 [ 140.831138][ T6853] [ 141.067927][ T5715] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 141.126101][ T5715] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 141.127853][ T5715] usb 4-1: USB disconnect, device number 7 [ 142.258067][ T5740] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.295199][ T6865] syz.0.237 (6865): drop_caches: 2 [ 142.444672][ T5740] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 142.444703][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.444723][ T5740] usb 3-1: Product: syz [ 142.444737][ T5740] usb 3-1: Manufacturer: syz [ 142.444750][ T5740] usb 3-1: SerialNumber: syz [ 142.452752][ T5740] usb 3-1: config 0 descriptor?? [ 142.461032][ T5740] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 142.520855][ T6870] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 142.567455][ T29] audit: type=1400 audit(1780415709.494:514): avc: denied { read } for pid=6871 comm="syz.4.240" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.594632][ T29] audit: type=1400 audit(1780415709.494:515): avc: denied { open } for pid=6871 comm="syz.4.240" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.645533][ T29] audit: type=1400 audit(1780415709.494:516): avc: denied { ioctl } for pid=6871 comm="syz.4.240" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.712696][ T5737] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.362560][ T5737] usb 2-1: Using ep0 maxpacket: 32 [ 143.362730][ T5740] gspca_sunplus: reg_w_riv err -110 [ 143.378945][ T5740] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 143.427421][ T5737] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 143.547202][ T5737] usb 2-1: config 0 has no interface number 0 [ 143.574224][ T5737] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 143.594198][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.682689][ T5737] usb 2-1: Product: syz [ 143.689444][ T5737] usb 2-1: Manufacturer: syz [ 143.695301][ T5737] usb 2-1: SerialNumber: syz [ 143.728051][ T5737] usb 2-1: config 0 descriptor?? [ 143.742500][ T5737] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 143.766703][ T6890] dlm: non-version read from control device 203 [ 143.784222][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 143.876136][ T5730] usb 3-1: USB disconnect, device number 7 [ 143.948768][ T29] audit: type=1400 audit(1780415710.874:517): avc: denied { module_request } for pid=6894 comm="syz.2.247" kmod="net-pf-10-proto-8-type-9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 143.973569][ T5737] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 143.989179][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 143.999940][ T5737] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 144.035433][ T5716] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 144.045431][ T5715] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 144.071793][ T29] audit: type=1400 audit(1780415710.994:518): avc: denied { ioctl } for pid=6894 comm="syz.2.247" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13334 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.206503][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 144.211690][ T5716] usb 1-1: Invalid ep0 maxpacket: 16 [ 144.233117][ T5715] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 144.265282][ T5715] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 144.284926][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 144.306848][ T5740] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 144.319074][ T5715] usb 4-1: Product: syz [ 144.330426][ T5715] usb 4-1: Manufacturer: syz [ 144.348087][ T5715] usb 4-1: SerialNumber: syz [ 144.356171][ T5716] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 144.364194][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 144.367017][ T5715] usb 4-1: config 0 descriptor?? [ 144.377594][ T5818] usb 2-1: USB disconnect, device number 9 [ 144.387818][ T5818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 144.417466][ T6888] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 144.421405][ T5818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 144.459195][ T5740] usb 5-1: device descriptor read/64, error -71 [ 144.471619][ T5818] quatech2 2-1:0.51: device disconnected [ 144.525609][ T5716] usb 1-1: Invalid ep0 maxpacket: 16 [ 144.532069][ T5716] usb usb1-port1: attempt power cycle [ 144.703275][ T5818] usb 4-1: USB disconnect, device number 8 [ 144.716438][ T5740] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.865423][ T5740] usb 5-1: device descriptor read/64, error -71 [ 144.875473][ T5716] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 144.916751][ T5716] usb 1-1: Invalid ep0 maxpacket: 16 [ 144.987927][ T5740] usb usb5-port1: attempt power cycle [ 145.066950][ T5716] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 145.105878][ T5716] usb 1-1: Invalid ep0 maxpacket: 16 [ 145.111512][ T5716] usb usb1-port1: unable to enumerate USB device [ 145.133093][ T6908] bond2: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 145.290756][ T6913] overlayfs: missing 'lowerdir' [ 145.335475][ T5740] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 145.365957][ T5740] usb 5-1: device descriptor read/8, error -71 [ 145.515391][ T5737] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.615396][ T5740] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 145.636059][ T5740] usb 5-1: device descriptor read/8, error -71 [ 145.675484][ T5737] usb 4-1: Using ep0 maxpacket: 32 [ 145.686738][ T5737] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 145.705457][ T5737] usb 4-1: config 0 has no interface number 0 [ 145.711678][ T5737] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.726016][ T5737] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 145.745478][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.746669][ T5740] usb usb5-port1: unable to enumerate USB device [ 145.753565][ T5737] usb 4-1: Product: syz [ 145.772250][ T5737] usb 4-1: Manufacturer: syz [ 145.779005][ T5737] usb 4-1: SerialNumber: syz [ 145.791013][ T5737] usb 4-1: config 0 descriptor?? [ 145.805592][ T5737] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 145.820984][ T5737] em28xx 4-1:0.132: Video interface 132 found: [ 146.091280][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.253'. [ 146.225990][ T5737] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 146.428637][ T6920] netlink: 'syz.1.253': attribute type 28 has an invalid length. [ 146.436522][ T6920] netlink: 'syz.1.253': attribute type 29 has an invalid length. [ 146.444246][ T6920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.253'. [ 146.588446][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.616090][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.079716][ T5737] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 147.080412][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.105779][ T5737] em28xx 4-1:0.132: board has no eeprom [ 147.115849][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.280012][ T5737] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 147.307756][ T5737] em28xx 4-1:0.132: analog set to bulk mode. [ 147.319336][ T29] audit: type=1400 audit(1780415714.244:519): avc: denied { connect } for pid=6929 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.340829][ T5810] em28xx 4-1:0.132: Registering V4L2 extension [ 148.017078][ T6937] netlink: 'syz.0.256': attribute type 2 has an invalid length. [ 148.025040][ T6937] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 148.233470][ T5737] usb 4-1: USB disconnect, device number 9 [ 148.254934][ T5737] em28xx 4-1:0.132: Disconnecting em28xx [ 148.442262][ T5631] Bluetooth: hci4: connection err: -111 [ 148.508883][ T29] audit: type=1400 audit(1780415715.434:520): avc: denied { create } for pid=6944 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.551438][ T29] audit: type=1400 audit(1780415715.464:521): avc: denied { bind } for pid=6944 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.620927][ T5810] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 148.629832][ T29] audit: type=1400 audit(1780415715.494:522): avc: denied { bind } for pid=6942 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.713516][ T5810] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 148.948828][ T5810] em28xx 4-1:0.132: No AC97 audio processor [ 148.979240][ T29] audit: type=1400 audit(1780415715.494:523): avc: denied { name_bind } for pid=6942 comm="syz.4.258" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 149.017878][ T5810] usb 4-1: Decoder not found [ 149.098663][ T5810] em28xx 4-1:0.132: failed to create media graph [ 149.109907][ T5810] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 149.118842][ T29] audit: type=1400 audit(1780415715.494:524): avc: denied { node_bind } for pid=6942 comm="syz.4.258" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 149.144083][ T5810] em28xx 4-1:0.132: Remote control support is not available for this card. [ 149.153056][ T5737] em28xx 4-1:0.132: Closing input extension [ 149.843036][ T5737] em28xx 4-1:0.132: Freeing device [ 150.220498][ T6969] bond2: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 150.252068][ T6941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.264474][ T6941] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 150.435636][ T5631] Bluetooth: Unknown LE signaling command 0x1d [ 150.443243][ T5631] Bluetooth: Wrong link type (-22) [ 150.449623][ T5631] Bluetooth: hci1: link tx timeout [ 150.458212][ T5631] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 150.515776][ T6977] netlink: 'syz.3.264': attribute type 2 has an invalid length. [ 150.922235][ T50] Bluetooth: Unknown LE signaling command 0x1d [ 150.922624][ T6983] netlink: 'syz.4.265': attribute type 2 has an invalid length. [ 150.928627][ T50] Bluetooth: Wrong link type (-22) [ 150.950551][ T50] Bluetooth: hci2: link tx timeout [ 150.971841][ T50] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 150.999006][ T50] Bluetooth: hci2: link tx timeout [ 151.005198][ T50] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.037263][ T6984] netlink: 'syz.4.265': attribute type 2 has an invalid length. [ 151.099793][ T6982] nbd: socks must be embedded in a SOCK_ITEM attr [ 151.342879][ T6973] netlink: 'syz.3.264': attribute type 2 has an invalid length. [ 152.035182][ T6987] ubi16: attaching mtd0 [ 152.561076][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 152.687317][ T6941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.694069][ T6941] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 152.783195][ T6987] ubi16: scanning is finished [ 153.017759][ T6987] ubi16: empty MTD device detected [ 153.118275][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 153.226317][ T6941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.296461][ T6941] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 153.315026][ T29] audit: type=1400 audit(1780415720.234:525): avc: denied { ioctl } for pid=6995 comm="syz.4.268" path="socket:[13498]" dev="sockfs" ino=13498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.358317][ T29] audit: type=1400 audit(1780415720.274:526): avc: denied { write } for pid=6954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.387777][ T29] audit: type=1400 audit(1780415720.314:527): avc: denied { write } for pid=6995 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.423366][ T6941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.434902][ T6941] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 153.559208][ T6941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.578095][ T6941] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 154.069934][ T6941] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 154.082110][ T6941] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 154.090552][ T6941] CPU: 0 UID: 0 PID: 6941 Comm: syz.1.257 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.100047][ T29] audit: type=1400 audit(1780415721.014:528): avc: denied { write } for pid=7007 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.101322][ T6941] Tainted: [L]=SOFTLOCKUP [ 154.101332][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.137621][ T6941] RIP: 0010:kernfs_rename_ns+0x3b/0xb30 [ 154.139205][ T7008] FAULT_INJECTION: forcing a failure. [ 154.139205][ T7008] name failslab, interval 1, probability 0, space 0, times 0 [ 154.143177][ T6941] Code: 48 89 fb 4c 8d 73 30 48 83 ec 30 48 89 14 24 48 89 4c 24 08 e8 f6 cc 4e ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 c8 09 00 00 48 8b 43 30 48 85 c0 0f 84 7c 09 00 [ 154.143196][ T6941] RSP: 0018:ffffc900034af8f0 EFLAGS: 00010206 [ 154.162394][ T7008] CPU: 1 UID: 0 PID: 7008 Comm: syz.4.270 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.162424][ T7008] Tainted: [L]=SOFTLOCKUP [ 154.162429][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.162438][ T7008] Call Trace: [ 154.162443][ T7008] [ 154.162450][ T7008] dump_stack_lvl+0x100/0x190 [ 154.162470][ T7008] should_fail_ex.cold+0x5/0xa [ 154.162494][ T7008] ? napi_skb_cache_get+0x705/0x8e0 [ 154.162515][ T7008] should_failslab+0xc2/0x120 [ 154.162532][ T7008] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 154.162555][ T7008] ? __alloc_skb+0x140/0x710 [ 154.162575][ T7008] ? __alloc_skb+0x5b7/0x710 [ 154.162593][ T7008] ? trace_irq_enable.constprop.0+0x11e/0x160 [ 154.162615][ T7008] __alloc_skb+0x140/0x710 [ 154.162640][ T7008] ? __alloc_skb+0x5b7/0x710 [ 154.162659][ T7008] ? __pfx___alloc_skb+0x10/0x10 [ 154.162678][ T7008] ? rcu_is_watching+0x12/0xc0 [ 154.162699][ T7008] ? debug_object_assert_init+0x1c4/0x300 [ 154.162716][ T7008] ? lock_release+0x245/0x310 [ 154.162734][ T7008] _sctp_make_chunk+0x51/0x270 [ 154.162755][ T7008] sctp_make_control+0x2f/0x2d0 [ 154.162774][ T7008] sctp_make_heartbeat+0xad/0x2f0 [ 154.162795][ T7008] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 154.162817][ T7008] ? sctp_sm_lookup_event+0x10e/0x520 [ 154.162837][ T7008] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 154.162857][ T7008] ? __pfx_sctp_pname+0x10/0x10 [ 154.162876][ T7008] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 154.162895][ T7008] ? __pfx_sctp_pname+0x10/0x10 [ 154.162913][ T7008] sctp_do_sm+0x17a/0x5be0 [ 154.162932][ T7008] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 154.162956][ T7008] ? rcu_is_watching+0x12/0xc0 [ 154.162976][ T7008] ? __pfx_sctp_do_sm+0x10/0x10 [ 154.162993][ T7008] ? __schedule+0x12a7/0x67a0 [ 154.163019][ T7008] ? __lock_sock+0x1f8/0x270 [ 154.163038][ T7008] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 154.163058][ T7008] sctp_apply_peer_addr_params+0x110/0x3690 [ 154.163084][ T7008] sctp_setsockopt+0x28d6/0xb370 [ 154.163102][ T7008] ? __pfx_sctp_setsockopt+0x10/0x10 [ 154.163118][ T7008] ? __fget_files+0x215/0x3d0 [ 154.163138][ T7008] ? selinux_socket_setsockopt+0x6a/0x80 [ 154.163158][ T7008] ? sock_common_setsockopt+0x2e/0xf0 [ 154.163172][ T7008] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 154.163188][ T7008] do_sock_setsockopt+0xf3/0x1d0 [ 154.163205][ T7008] __sys_setsockopt+0x195/0x220 [ 154.163227][ T7008] __x64_sys_setsockopt+0xbd/0x160 [ 154.163247][ T7008] ? do_syscall_64+0x90/0x870 [ 154.163265][ T7008] ? lockdep_hardirqs_on+0x78/0x100 [ 154.163283][ T7008] do_syscall_64+0x115/0x870 [ 154.163300][ T7008] ? clear_bhb_loop+0x40/0x90 [ 154.163319][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.163334][ T7008] RIP: 0033:0x7f58fad9ce59 [ 154.163347][ T7008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.163360][ T7008] RSP: 002b:00007f58fbbf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.163376][ T7008] RAX: ffffffffffffffda RBX: 00007f58fb016090 RCX: 00007f58fad9ce59 [ 154.163385][ T7008] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 154.163394][ T7008] RBP: 00007f58fbbf4090 R08: 000000000000009c R09: 0000000000000000 [ 154.163403][ T7008] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 154.163412][ T7008] R13: 00007f58fb016128 R14: 00007f58fb016090 R15: 00007ffe888d96b8 [ 154.163426][ T7008] [ 154.167730][ T29] audit: type=1400 audit(1780415721.094:529): avc: denied { read } for pid=4966 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 154.175371][ T6941] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90005d59000 [ 154.175385][ T6941] RDX: 0000000000000006 RSI: ffffffff82b9e36a RDI: 0000000000000000 [ 154.175395][ T6941] RBP: ffff8880232f93c0 R08: 0000000000000007 R09: 0000000000000000 [ 154.175404][ T6941] R10: 000000007fffffff R11: ffffffff81000130 R12: ffff888029134640 [ 154.175415][ T6941] R13: ffff88807f217f00 R14: 0000000000000030 R15: 1ffff92000695f2b [ 154.175426][ T6941] FS: 00007f0b001ce6c0(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 154.188795][ T29] audit: type=1400 audit(1780415721.094:530): avc: denied { search } for pid=4966 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.192211][ T6941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.192226][ T6941] CR2: 00007fffd646e630 CR3: 000000007f724000 CR4: 00000000003526f0 [ 154.192236][ T6941] DR0: 0000000000000001 DR1: 00000000000001f8 DR2: 0000000000000003 [ 154.192245][ T6941] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 154.192256][ T6941] Call Trace: [ 154.192264][ T6941] [ 154.192280][ T6941] kobject_move+0x127/0x260 [ 154.203669][ T29] audit: type=1400 audit(1780415721.094:531): avc: denied { write search } for pid=4966 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.206631][ T6941] ? __pfx_kobject_move+0x10/0x10 [ 154.206662][ T6941] ? kobject_put+0xb9/0x640 [ 154.206686][ T6941] device_move+0xa9/0x1140 [ 154.206705][ T6941] hci_conn_del_sysfs+0x86/0x1a0 [ 154.214781][ T29] audit: type=1400 audit(1780415721.094:532): avc: denied { add_name } for pid=4966 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.218102][ T6941] hci_conn_del+0x506/0x1180 [ 154.218132][ T6941] hci_conn_hash_flush+0x186/0x280 [ 154.218155][ T6941] hci_dev_close_sync+0x5cf/0x13c0 [ 154.218180][ T6941] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 154.259955][ T29] audit: type=1400 audit(1780415721.104:533): avc: denied { create } for pid=4966 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.262758][ T6941] ? do_raw_spin_lock+0x128/0x260 [ 154.757515][ T6941] hci_dev_do_close+0x2e/0xb0 [ 154.762191][ T6941] hci_rfkill_set_block+0x225/0x3a0 [ 154.767479][ T6941] ? lockdep_hardirqs_on+0x78/0x100 [ 154.772664][ T6941] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 154.778370][ T6941] rfkill_set_block+0x205/0x510 [ 154.783228][ T6941] rfkill_fop_write+0x2c0/0x580 [ 154.788091][ T6941] ? __pfx_rfkill_fop_write+0x10/0x10 [ 154.793549][ T6941] ? __pfx_bpf_lsm_inode_copy_up+0x10/0x10 [ 154.799346][ T6941] ? security_file_permission+0x76/0x210 [ 154.804987][ T6941] ? rw_verify_area+0xce/0x6d0 [ 154.809756][ T6941] vfs_write+0x2aa/0x1070 [ 154.814096][ T6941] ? __pfx_rfkill_fop_write+0x10/0x10 [ 154.819454][ T6941] ? __pfx_vfs_write+0x10/0x10 [ 154.824201][ T6941] ? find_held_lock+0x2b/0x80 [ 154.828860][ T6941] ? __fget_files+0x215/0x3d0 [ 154.833526][ T6941] ? __fget_files+0x215/0x3d0 [ 154.838205][ T6941] ? __fget_files+0x21f/0x3d0 [ 154.842867][ T6941] ksys_write+0x1f8/0x250 [ 154.847180][ T6941] ? __pfx_ksys_write+0x10/0x10 [ 154.852055][ T6941] ? rcu_is_watching+0x12/0xc0 [ 154.856833][ T6941] do_syscall_64+0x115/0x870 [ 154.861418][ T6941] ? clear_bhb_loop+0x40/0x90 [ 154.866082][ T6941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.871958][ T6941] RIP: 0033:0x7f0aff39ce59 [ 154.876376][ T6941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.895980][ T6941] RSP: 002b:00007f0b001ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.904396][ T6941] RAX: ffffffffffffffda RBX: 00007f0aff615fa0 RCX: 00007f0aff39ce59 [ 154.912351][ T6941] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a [ 154.920303][ T6941] RBP: 00007f0aff432d6f R08: 0000000000000000 R09: 0000000000000000 [ 154.928253][ T6941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.936202][ T6941] R13: 00007f0aff616038 R14: 00007f0aff615fa0 R15: 00007ffe898110a8 [ 154.944246][ T6941] [ 154.947244][ T6941] Modules linked in: [ 154.951991][ T6941] ---[ end trace 0000000000000000 ]--- [ 154.989399][ T29] audit: type=1400 audit(1780415721.104:534): avc: denied { append open } for pid=4966 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.018025][ T29] audit: type=1400 audit(1780415721.104:535): avc: denied { getattr } for pid=4966 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.059881][ T6941] RIP: 0010:kernfs_rename_ns+0x3b/0xb30 [ 155.071797][ T6941] Code: 48 89 fb 4c 8d 73 30 48 83 ec 30 48 89 14 24 48 89 4c 24 08 e8 f6 cc 4e ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 c8 09 00 00 48 8b 43 30 48 85 c0 0f 84 7c 09 00 [ 155.159131][ T29] audit: type=1400 audit(1780415722.084:536): avc: denied { write } for pid=7010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.183301][ T6941] RSP: 0018:ffffc900034af8f0 EFLAGS: 00010206 [ 155.190399][ T6941] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90005d59000 [ 155.198737][ T29] audit: type=1400 audit(1780415722.124:537): avc: denied { write } for pid=7021 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.237389][ T6941] RDX: 0000000000000006 RSI: ffffffff82b9e36a RDI: 0000000000000000 [ 155.284888][ T6941] RBP: ffff8880232f93c0 R08: 0000000000000007 R09: 0000000000000000 [ 155.309321][ T6941] R10: 000000007fffffff R11: ffffffff81000130 R12: ffff888029134640 [ 155.325265][ T6941] R13: ffff88807f217f00 R14: 0000000000000030 R15: 1ffff92000695f2b [ 155.362647][ T6941] FS: 00007f0b001ce6c0(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 155.419545][ T6941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.438667][ T6941] CR2: 000055557059a4e8 CR3: 000000007f724000 CR4: 00000000003526f0 [ 155.467566][ T6941] DR0: 0000000000000001 DR1: 00000000000001f8 DR2: 0000000000000003 [ 155.486860][ T6941] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 155.517939][ T6941] Kernel panic - not syncing: Fatal exception [ 155.524253][ T6941] Kernel Offset: disabled [ 155.528576][ T6941] Rebooting in 86400 seconds..