last executing test programs: 1m59.628311459s ago: executing program 0 (id=503): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000440)=[{0x6, 0x0, 0x2000, &(0x7f0000000900)='\n'}], 0x1}) 1m59.52706698s ago: executing program 3 (id=506): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f00000015c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x8e0, r0, 0x0, 0x0, 0x4}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x5, 0xffff, r0, 0x0, 0x0, 0x1, 0x0, 0x2}]) ioctl$TIOCSETD(r0, 0x5423, 0x0) 1m59.315538518s ago: executing program 3 (id=509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010140, 0x0, 0x2}]}) 1m59.315180077s ago: executing program 3 (id=510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) shmctl$IPC_RMID(r7, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1m57.717879447s ago: executing program 0 (id=521): syz_usb_connect$uac1(0x2, 0x87, &(0x7f0000000440)={{0x12, 0x1, 0x85aef55e32716a0f, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x9, 0xa0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x19, 0x5, 0x4}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, "46d52b", "0cb2b8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x1, 0x22, {0x7, 0x25, 0x1, 0x0, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3a, 0x6, 0x2, {0x7, 0x25, 0x1, 0xc, 0xa, 0xef7f}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m56.680824341s ago: executing program 2 (id=525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 1m56.191494868s ago: executing program 1 (id=529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x12) fsopen(&(0x7f0000000180)='proc\x00', 0x1) fchdir(0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x2e76be}], 0x1}, 0x3) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b0905, 0x8000, '\x00', @string=&(0x7f0000000180)=0x81}}) 1m55.034923083s ago: executing program 1 (id=532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010102, 0x6, 0x4, 0x3, 0x0, 0x0, 0x80000}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x410, &(0x7f0000000300)={0xa, 0x4e20, 0x3, @empty}, 0x1c) 1m54.947367456s ago: executing program 2 (id=533): r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @remote}, 0x38, {0x2, 0xfffe, @broadcast}, 'syz_tun\x00'}) 1m54.75546939s ago: executing program 1 (id=535): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000040)={0x100, 0xa}) 1m54.684827939s ago: executing program 2 (id=536): syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000030103800009"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 1m54.366642601s ago: executing program 0 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000003, 0x0, 0x7c5}]}) 1m54.365094003s ago: executing program 1 (id=538): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173"], 0x5c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdbdf250280d4d55714e5da04400100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0xffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x4, 0x1c, 0x60, 0x0, 0xa, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, @address_reply={0x12, 0x0, 0x0, 0xde}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) 1m53.615772743s ago: executing program 3 (id=539): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x64, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x9, "0803000000d198"}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}, @md5sig={0x13, 0x12, "0d678fadf674cece5030bacbe9ffdd8e"}, @md5sig={0x13, 0x12, "45401db9dbfd1d509edf656f7e2ec7ca"}]}}}}}}}}, 0x0) 1m53.183392016s ago: executing program 4 (id=540): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x3, @local, 0x2}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="84", 0x1}, {&(0x7f0000001000)="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", 0x684}], 0x2, 0x0, 0x0, 0x2c}, 0x40) 1m53.108330334s ago: executing program 3 (id=541): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x5cb, &(0x7f0000000380)={0x0, 0xc70d, 0x800, 0x3, 0x57}, &(0x7f0000000040)=0x0, 0x0) r4 = socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000740)={0x0, 0xfad6, 0x100, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x5, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x114, &(0x7f0000000280)=0x3ff, 0x0, 0x4) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x1, 0x4, 0x0, 0x2, 'syz1\x00', "523ca936f8f61abb3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b1639cd090c61155070ae569ac4a65ef2100", [{0x8, 0x9, {0x1, 0xf}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0x18, {0x0, 0x56c}}, {0x8, 0x1, {0x3, 0x2d}}, {0x0, 0x42, {0x0, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x1, 0x2}}, {0x4, 0x1, {0x0, 0x1000000}}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0xff, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3f}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0xe3c7305}}, {0x6, 0x8, {0x1, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x9, 0x5, {0x2, 0x7f}}, {0x1, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x2}}, {0x9, 0x7, {0x0, 0x3fd}}, {0x1, 0x10, {0x0, 0x7fff}}, {0x200e, 0x40, {0x3, 0x90a}}, {0x5, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x1, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xd9, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xb, {0x1, 0xfd}}, {0xc, 0x2, {0x2, 0xb}}, {0x8003, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0xe141}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x0, 0x4}}, {0xb, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x1, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0x6e, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r0, 0x1) 1m53.056227645s ago: executing program 4 (id=542): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011003f003030"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@window={0x3, 0x3, 0x9}]}}}}}}}}, 0x0) 1m52.788922263s ago: executing program 4 (id=543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x49, 0x0, 0x2}]}) 1m52.762607164s ago: executing program 2 (id=544): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0, 0xffffffffffffffb8}) sched_setscheduler(0x0, 0x2, 0x0) close(0x3) 1m52.24126391s ago: executing program 2 (id=545): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="4e0a03226a5896bbe24872dd5b7accf8d75a9767691dbddf0f0fc40691129f9e26c36bb16cc52925001bbc5bc24c14eacd146c20cf419aef3e6aa989ddb53841161a4e3ba64046ed6eaa16f81c0398fad0737f77f859320f5257ca4cd64cb26242ab151855a25417ee4231f2e346ef4ff531c7987e3a882a9aef8330f6cf1db9d76449ad9b8c581b2ec25dd417b3ffe44caca580623ad9f1f68ff0b0954714918fe75501dc92b31d14798f8bbf89cba639a89a1df088720e02d7842f00"/199, 0xfefe}, {&(0x7f00000006c0)="4a5a284ab592ab029c5118ea9906f4dbc4f93877ec6168eb1ec57788f2549119427a491e62e9b484a512008c528aa20029230ff2d1fd067204ec26a3c006ae4885cf80bd50d3d3005244678a0f2fe03f2333b3627f33001ae4f863b493701684f212a308036db1442dfd104c734414abc0554887cc4a3aa517ac5765af38d58e685fa055127b81c4dc446bddf224305afde7e2f48c7272ec42890f68120f819349e9c895571022a9bc27efc0dd8572f6cab050dad106ba36464c83d511098bf5f0c5e4da5a26fd70c61b38a13d335767de0e19a7c97f43b7dbfd887a914213d973daa0fc1dfa37ee2f256636c13f24", 0xef}, {&(0x7f0000000380)="94d09b487655bc08d7b3059f06bf96de5e36f3", 0x13}, {&(0x7f0000001180)="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", 0x240}], 0x4}}], 0x1, 0x40000) 1m51.833465324s ago: executing program 3 (id=546): socket(0xb, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000000)="09b1c2831bbecb938d4d24216728d626", 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/194) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x60, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x2, 0x1f, {0x11, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0x1, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x48, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x20005}, {@loopback}, {@loopback, 0x325}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x4}]}]}}}}}}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 1m51.831660251s ago: executing program 0 (id=547): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) syz_emit_ethernet(0xa2, &(0x7f0000000080)={@multicast, @random="00759d7800", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x8, [{@remote, 0xfdd}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2a5b}, {@rand_addr=0x64010100, 0xfffffffe}]}]}}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "fff522a45d565fd1bef2bde44c7648f5ba27bbe6628c1000836849b5e92bda7c", "146a317637af5c94b1e2cab23b8908c4", {"1440048630554f6e84da74a7f80e383e", "2585ff3e812ec53f2f0d7d41bea87c5c"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1m50.710149634s ago: executing program 0 (id=548): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0xc1cc6, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x2, 0x0, 0x7cce8c743ee810df, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x1, 0x2f}, 0xfffffff4}) 1m50.708692713s ago: executing program 4 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1m50.642998801s ago: executing program 2 (id=550): socket(0xb, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000000)="09b1c2831bbecb938d4d24216728d626", 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/194) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x34, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x2, 0x1f, {0x6, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0x1, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 1m50.413656371s ago: executing program 0 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x10000, 0xb) 1m50.386477973s ago: executing program 1 (id=552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0066a6", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x6}}}}}}}, 0x0) 1m50.301416004s ago: executing program 4 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x34, r2, 0xb97534d5fe9704cf, 0x4, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x8091}, 0x0) 1m50.128262492s ago: executing program 1 (id=554): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 0s ago: executing program 4 (id=555): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f000035f000/0x4000)=nil, 0x4000, 0x9) kernel console output (not intermixed with test programs): mm="syz.1.18" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.382892][ T29] audit: type=1400 audit(1774210565.632:152): avc: denied { write } for pid=6001 comm="syz.0.19" path="socket:[9429]" dev="sockfs" ino=9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.803647][ T5981] delete_channel: no stack [ 76.203436][ T30] cfg80211: failed to load regulatory.db [ 76.795762][ T30] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 77.390293][ T30] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 77.400183][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 77.474570][ T30] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.543618][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 77.612698][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 77.737948][ T30] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 77.794339][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 77.860761][ T30] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.934061][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 78.087689][ T6038] netlink: 'syz.3.25': attribute type 21 has an invalid length. [ 78.095681][ T6038] netlink: 'syz.3.25': attribute type 6 has an invalid length. [ 78.103496][ T6038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.25'. [ 78.265090][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 78.265103][ T29] audit: type=1400 audit(1774210569.972:167): avc: denied { setopt } for pid=6028 comm="syz.3.25" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.361405][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 78.697001][ T29] audit: type=1400 audit(1774210569.972:168): avc: denied { connect } for pid=6028 comm="syz.3.25" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.733352][ T29] audit: type=1400 audit(1774210570.212:169): avc: denied { ioctl } for pid=6039 comm="syz.2.26" path="socket:[9564]" dev="sockfs" ino=9564 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.742524][ T30] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 78.906291][ T6044] netlink: 36 bytes leftover after parsing attributes in process `syz.4.28'. [ 79.087966][ T29] audit: type=1400 audit(1774210570.752:170): avc: denied { ioctl } for pid=6036 comm="syz.4.28" path="socket:[9567]" dev="sockfs" ino=9567 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.159009][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 79.212521][ T30] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.258528][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.443323][ T29] audit: type=1400 audit(1774210571.312:171): avc: denied { read } for pid=6047 comm="syz.0.30" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.533344][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.575105][ T30] usb 2-1: string descriptor 0 read error: -71 [ 79.587587][ T30] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 79.600770][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.613181][ T29] audit: type=1400 audit(1774210571.512:172): avc: denied { append } for pid=6053 comm="syz.2.32" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.791117][ T30] usb 2-1: can't set config #168, error -71 [ 80.763747][ T29] audit: type=1400 audit(1774210571.902:173): avc: denied { create } for pid=6051 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.783928][ T29] audit: type=1400 audit(1774210571.932:174): avc: denied { create } for pid=6051 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.813751][ T30] usb 2-1: USB disconnect, device number 4 [ 80.824665][ T29] audit: type=1400 audit(1774210571.942:175): avc: denied { write } for pid=6051 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.943456][ T29] audit: type=1400 audit(1774210571.942:176): avc: denied { nlmsg_write } for pid=6051 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.793713][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 85.793729][ T29] audit: type=1400 audit(1774210577.692:183): avc: denied { create } for pid=6087 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.850284][ T29] audit: type=1400 audit(1774210577.722:184): avc: denied { read write } for pid=6087 comm="syz.0.40" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.032544][ T29] audit: type=1400 audit(1774210577.722:185): avc: denied { open } for pid=6087 comm="syz.0.40" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.462738][ T29] audit: type=1400 audit(1774210577.722:186): avc: denied { ioctl } for pid=6087 comm="syz.0.40" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.516719][ T1595] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 86.539452][ T29] audit: type=1400 audit(1774210577.722:187): avc: denied { write } for pid=6087 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.600269][ T29] audit: type=1400 audit(1774210578.002:188): avc: denied { node_bind } for pid=6089 comm="syz.1.41" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 86.758441][ T1595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.769112][ T1595] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 86.873947][ T1595] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 86.874627][ T29] audit: type=1400 audit(1774210578.712:189): avc: denied { connect } for pid=6094 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.883127][ T1595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.919030][ T29] audit: type=1400 audit(1774210578.712:190): avc: denied { write } for pid=6094 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.940520][ T29] audit: type=1400 audit(1774210578.812:191): avc: denied { getopt } for pid=6094 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.194258][ T1595] usb 1-1: config 0 descriptor?? [ 87.291933][ T1595] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 87.299103][ T1595] dvb-usb: bulk message failed: -22 (3/0) [ 87.308450][ T1595] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 87.319825][ T1595] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 87.329544][ T1595] usb 1-1: media controller created [ 87.341543][ T1595] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.809725][ T29] audit: type=1400 audit(1774210579.362:192): avc: denied { ioctl } for pid=6102 comm="syz.1.43" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9653 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.840245][ T1595] dvb-usb: bulk message failed: -22 (6/0) [ 88.846352][ T1595] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 88.856719][ T1595] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 88.876594][ T6088] netlink: 'syz.0.40': attribute type 72 has an invalid length. [ 88.930200][ T1595] dvb-usb: schedule remote query interval to 150 msecs. [ 88.945549][ T6088] netlink: 36 bytes leftover after parsing attributes in process `syz.0.40'. [ 88.959465][ T1595] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 88.995796][ T6088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.115055][ T1595] dvb-usb: bulk message failed: -22 (1/0) [ 89.142788][ T6112] tipc: Started in network mode [ 89.148037][ T6112] tipc: Node identity ee405c318e39, cluster identity 4711 [ 89.156623][ T6112] tipc: Enabled bearer , priority 0 [ 89.373355][ T1595] dvb-usb: error while querying for an remote control event. [ 89.525888][ T6110] tipc: Disabling bearer [ 89.533626][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 89.583513][ T10] dvb-usb: error while querying for an remote control event. [ 89.874447][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 89.880189][ T10] dvb-usb: error while querying for an remote control event. [ 90.055805][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 90.063637][ T10] dvb-usb: error while querying for an remote control event. [ 90.079259][ T10] usb 1-1: USB disconnect, device number 2 [ 90.148996][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 90.233459][ T5812] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.547771][ T5812] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 90.556955][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.607238][ T5812] usb 3-1: Product: syz [ 90.619129][ T5812] usb 3-1: Manufacturer: syz [ 90.646406][ T5812] usb 3-1: SerialNumber: syz [ 91.155060][ T6125] capability: warning: `syz.0.49' uses 32-bit capabilities (legacy support in use) [ 91.433945][ T5871] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.655429][ T5812] rtl8150 3-1:1.0: couldn't reset the device [ 91.658560][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 91.658573][ T29] audit: type=1400 audit(1774210591.554:196): avc: denied { read write } for pid=6126 comm="syz.1.50" name="radio5" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 91.661814][ T5812] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 91.710393][ T29] audit: type=1400 audit(1774210591.564:197): avc: denied { open } for pid=6126 comm="syz.1.50" path="/dev/radio5" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 91.767882][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 91.788039][ T5812] usb 3-1: USB disconnect, device number 2 [ 91.796636][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.840477][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.870423][ T29] audit: type=1400 audit(1774210591.764:198): avc: denied { write } for pid=6128 comm="syz.4.45" name="unix" dev="proc" ino=4026532864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.904887][ T6129] Bluetooth: MGMT ver 1.23 [ 91.912212][ T5871] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 92.193197][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.215775][ T29] audit: type=1400 audit(1774210591.794:199): avc: denied { read } for pid=6128 comm="syz.4.45" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.261617][ T5871] usb 1-1: config 0 descriptor?? [ 92.343451][ T29] audit: type=1400 audit(1774210591.794:200): avc: denied { open } for pid=6128 comm="syz.4.45" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.516627][ T29] audit: type=1400 audit(1774210591.794:201): avc: denied { write } for pid=6128 comm="syz.4.45" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 92.625724][ T29] audit: type=1400 audit(1774210591.804:202): avc: denied { bind } for pid=6128 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.963388][ T29] audit: type=1400 audit(1774210591.884:203): avc: denied { ioctl } for pid=6126 comm="syz.1.50" path="/dev/radio5" dev="devtmpfs" ino=984 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 93.597900][ T29] audit: type=1400 audit(1774210592.894:204): avc: denied { create } for pid=6134 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 93.978938][ T5871] usbhid 1-1:0.0: can't add hid device: -71 [ 93.987720][ T5871] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 94.014372][ T5871] usb 1-1: USB disconnect, device number 3 [ 94.082888][ T29] audit: type=1400 audit(1774210593.514:205): avc: denied { map } for pid=6136 comm="syz.4.53" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.185690][ T5128] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 94.195526][ T5128] CPU: 0 UID: 0 PID: 5128 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 94.195550][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.195563][ T5128] Workqueue: hci3 hci_rx_work [ 94.195588][ T5128] Call Trace: [ 94.195595][ T5128] [ 94.195603][ T5128] dump_stack_lvl+0x100/0x190 [ 94.195637][ T5128] sysfs_warn_dup.cold+0x1c/0x28 [ 94.195664][ T5128] sysfs_create_dir_ns+0x24b/0x2b0 [ 94.195698][ T5128] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 94.195725][ T5128] ? find_held_lock+0x2b/0x80 [ 94.195750][ T5128] ? kobject_add_internal+0x25f/0x930 [ 94.195779][ T5128] ? kobject_add_internal+0x25f/0x930 [ 94.195812][ T5128] ? do_raw_spin_unlock+0x145/0x1e0 [ 94.195838][ T5128] kobject_add_internal+0x2c8/0x930 [ 94.195875][ T5128] kobject_add+0x16a/0x1e0 [ 94.195892][ T5128] ? __pfx_kobject_add+0x10/0x10 [ 94.195908][ T5128] ? class_to_subsys+0x10f/0x150 [ 94.195935][ T5128] ? kobject_put+0xb9/0x640 [ 94.195961][ T5128] ? _raw_spin_unlock+0x28/0x50 [ 94.195990][ T5128] device_add+0x294/0x1950 [ 94.196010][ T5128] ? __pfx_dev_set_name+0x10/0x10 [ 94.196034][ T5128] ? __pfx_device_add+0x10/0x10 [ 94.196054][ T5128] ? mgmt_send_event_skb+0x2fb/0x460 [ 94.196082][ T5128] hci_conn_add_sysfs+0x1a3/0x260 [ 94.196109][ T5128] le_conn_complete_evt+0x11cb/0x1f40 [ 94.196138][ T5128] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 94.196168][ T5128] hci_le_conn_complete_evt+0x23c/0x3a0 [ 94.196190][ T5128] ? skb_pull_data+0x15f/0x1e0 [ 94.196211][ T5128] hci_le_meta_evt+0x34a/0x5f0 [ 94.196235][ T5128] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 94.196261][ T5128] hci_event_packet+0x682/0x11c0 [ 94.196284][ T5128] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 94.196309][ T5128] ? __pfx_hci_event_packet+0x10/0x10 [ 94.196339][ T5128] ? kcov_remote_start+0x374/0x660 [ 94.196366][ T5128] ? lockdep_hardirqs_on+0x78/0x100 [ 94.196398][ T5128] hci_rx_work+0x451/0xfc0 [ 94.196425][ T5128] process_one_work+0xa23/0x19a0 [ 94.196460][ T5128] ? __pfx_process_one_work+0x10/0x10 [ 94.196490][ T5128] ? __pfx_hci_rx_work+0x10/0x10 [ 94.196515][ T5128] worker_thread+0x5ef/0xe50 [ 94.196543][ T5128] ? __pfx_worker_thread+0x10/0x10 [ 94.196565][ T5128] ? kthread+0x13a/0x450 [ 94.196582][ T5128] ? __pfx_worker_thread+0x10/0x10 [ 94.196600][ T5128] kthread+0x370/0x450 [ 94.196618][ T5128] ? __pfx_kthread+0x10/0x10 [ 94.196637][ T5128] ret_from_fork+0x754/0xd80 [ 94.196659][ T5128] ? __pfx_ret_from_fork+0x10/0x10 [ 94.196681][ T5128] ? __switch_to+0x7b4/0x1120 [ 94.196705][ T5128] ? __pfx_kthread+0x10/0x10 [ 94.196726][ T5128] ret_from_fork_asm+0x1a/0x30 [ 94.196763][ T5128] [ 94.196917][ T5128] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.500634][ T5128] Bluetooth: hci3: failed to register connection device [ 94.541207][ T5871] IPVS: starting estimator thread 0... [ 94.593637][ T6144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.54'. [ 95.178751][ T6154] IPVS: using max 38 ests per chain, 91200 per kthread [ 95.525481][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 95.525883][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.798983][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.934191][ T6166] netlink: 'syz.0.57': attribute type 16 has an invalid length. [ 95.941962][ T6166] netlink: 'syz.0.57': attribute type 17 has an invalid length. [ 96.563610][ T5821] Bluetooth: hci3: command 0x2016 tx timeout [ 96.593952][ T6166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.034214][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 97.034229][ T29] audit: type=1400 audit(1774210596.924:213): avc: denied { read write } for pid=6174 comm="syz.0.61" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.132968][ T29] audit: type=1400 audit(1774210596.924:214): avc: denied { open } for pid=6174 comm="syz.0.61" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.156756][ T29] audit: type=1400 audit(1774210596.924:215): avc: denied { ioctl } for pid=6174 comm="syz.0.61" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.654819][ T29] audit: type=1400 audit(1774210597.554:216): avc: denied { create } for pid=6184 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 97.754775][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.822597][ T29] audit: type=1400 audit(1774210597.714:217): avc: denied { create } for pid=6184 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.981646][ T29] audit: type=1400 audit(1774210597.844:218): avc: denied { connect } for pid=6184 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.526914][ T5871] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 98.543364][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.551565][ T29] audit: type=1400 audit(1774210598.024:219): avc: denied { create } for pid=6192 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 98.575229][ T5871] usb 3-1: Product: syz [ 98.579709][ T5871] usb 3-1: Manufacturer: syz [ 98.585874][ T5871] usb 3-1: SerialNumber: syz [ 98.597242][ T29] audit: type=1400 audit(1774210598.034:220): avc: denied { write } for pid=6192 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 98.643406][ T1595] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.662272][ T5821] Bluetooth: hci3: command 0x2016 tx timeout [ 98.772503][ T29] audit: type=1400 audit(1774210598.034:221): avc: denied { read write } for pid=6192 comm="syz.0.64" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 98.798316][ T29] audit: type=1400 audit(1774210598.034:222): avc: denied { open } for pid=6192 comm="syz.0.64" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 99.288034][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 99.372065][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 99.394030][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 99.405726][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 99.541797][ T1595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.573324][ T1595] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.616707][ T1595] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 99.751713][ T1595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.937393][ T6209] ======================================================= [ 99.937393][ T6209] WARNING: The mand mount option has been deprecated and [ 99.937393][ T6209] and is ignored by this kernel. Remove the mand [ 99.937393][ T6209] option from the mount to silence this warning. [ 99.937393][ T6209] ======================================================= [ 100.246085][ T1595] usb 2-1: config 0 descriptor?? [ 100.259435][ T1595] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 100.276940][ T5871] rtl8150 3-1:1.0: couldn't reset the device [ 100.288486][ T5871] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 100.318226][ T5871] usb 3-1: USB disconnect, device number 3 [ 100.436679][ T5825] udevd[5825]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 101.693556][ T5871] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.894108][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 101.981040][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.007140][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 102.199804][ T6236] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 102.207505][ T6236] UDF-fs: Scanning with blocksize 512 failed [ 102.216955][ T6236] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 102.224581][ T6236] UDF-fs: Scanning with blocksize 1024 failed [ 102.232827][ T6236] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 102.240417][ T6236] UDF-fs: Scanning with blocksize 2048 failed [ 102.248077][ T6236] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 102.256935][ T6236] UDF-fs: Scanning with blocksize 4096 failed [ 102.343746][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 102.363373][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 102.416463][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.442526][ T5871] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 102.473423][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.494574][ T5871] usb 3-1: Product: syz [ 102.504808][ T5871] usb 3-1: Manufacturer: syz [ 102.510931][ T5871] usb 3-1: SerialNumber: syz [ 102.524553][ T5871] usb 3-1: config 0 descriptor?? [ 102.531273][ T6225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.561530][ T1595] usb 2-1: USB disconnect, device number 5 [ 102.615687][ T5871] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 102.739778][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 102.739793][ T29] audit: type=1400 audit(1774210602.634:231): avc: denied { create } for pid=6240 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.847148][ T6243] process 'syz.1.77' launched './file2' with NULL argv: empty string added [ 102.923185][ T6243] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 102.931765][ T6243] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 102.943114][ T6243] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 103.142768][ T29] audit: type=1400 audit(1774210602.674:232): avc: denied { create } for pid=6240 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.152905][ T6244] m1Ie5nè‹Ò: entered promiscuous mode [ 103.262028][ T29] audit: type=1400 audit(1774210602.674:233): avc: denied { bind } for pid=6240 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.867168][ T29] audit: type=1400 audit(1774210602.744:234): avc: denied { execute } for pid=6237 comm="syz.1.77" name="file2" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.891778][ T29] audit: type=1400 audit(1774210602.754:235): avc: denied { execute_no_trans } for pid=6237 comm="syz.1.77" path="/17/file2" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.072694][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.76'. [ 104.268860][ T29] audit: type=1400 audit(1774210602.834:236): avc: denied { firmware_load } for pid=6237 comm="syz.1.77" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 104.339780][ T29] audit: type=1400 audit(1774210603.184:237): avc: denied { write } for pid=6240 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.375829][ T6253] trusted_key: encrypted_key: insufficient parameters specified [ 104.402830][ T6253] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 104.411652][ T6253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.79'. [ 104.425474][ T6252] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.442558][ T6253] batman_adv: batadv0: Adding interface: vlan1 [ 104.533406][ T5812] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.258168][ T29] audit: type=1400 audit(1774210603.184:238): avc: denied { read } for pid=6240 comm="syz.0.75" lport=43649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.258883][ T6253] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.706189][ T6253] batman_adv: batadv0: Interface activated: vlan1 [ 105.785476][ T1595] usb 3-1: USB disconnect, device number 4 [ 105.794225][ T5812] usb 5-1: Using ep0 maxpacket: 32 [ 105.882346][ T5812] usb 5-1: unable to get BOS descriptor or descriptor too short [ 105.894607][ T29] audit: type=1400 audit(1774210603.944:239): avc: denied { create } for pid=6242 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 106.156193][ T29] audit: type=1400 audit(1774210603.954:240): avc: denied { setopt } for pid=6242 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 106.175591][ T5812] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice= 0.40 [ 106.175617][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.835715][ T5812] usb 5-1: Product: syz [ 106.847669][ T5812] usb 5-1: Manufacturer: syz [ 106.852467][ T5812] usb 5-1: SerialNumber: syz [ 106.910837][ T5812] usb 5-1: can't set config #1, error -71 [ 107.849607][ T5812] usb 5-1: USB disconnect, device number 2 [ 108.567051][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 108.567066][ T29] audit: type=1400 audit(1774210608.464:245): avc: denied { create } for pid=6286 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.962027][ T6288] qnx4: no qnx4 filesystem (no root dir). [ 109.463781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 110.688947][ T6294] 9p: Could not find request transport: fd00000000000000000009 [ 111.072410][ T6303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.224448][ T29] audit: type=1400 audit(1774210611.114:246): avc: denied { create } for pid=6307 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.400058][ T6312] 9p: Bad value for 'rfdno' [ 112.192669][ T29] audit: type=1400 audit(1774210612.084:247): avc: denied { load_policy } for pid=6306 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.649946][ T6311] SELinux: failed to load policy [ 112.673154][ T29] audit: type=1400 audit(1774210612.544:248): avc: denied { write } for pid=6319 comm="syz.3.95" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 114.909486][ T6331] dlm: plock device version mismatch: kernel (1.2.0), user (1701536119.1634492767.683378) [ 115.193754][ T5871] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.483632][ T5871] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 115.496802][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.533026][ T5871] usb 3-1: Product: syz [ 115.551782][ T5871] usb 3-1: Manufacturer: syz [ 115.562619][ T5871] usb 3-1: SerialNumber: syz [ 115.655734][ T29] audit: type=1400 audit(1774210612.544:249): avc: denied { open } for pid=6319 comm="syz.3.95" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.679092][ T29] audit: type=1400 audit(1774210612.604:250): avc: denied { create } for pid=6319 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.698675][ T29] audit: type=1400 audit(1774210614.994:251): avc: denied { append } for pid=6327 comm="syz.3.97" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 116.067261][ T29] audit: type=1400 audit(1774210615.934:252): avc: denied { create } for pid=6335 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.096374][ T6341] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 116.272324][ T6158] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.310010][ T29] audit: type=1400 audit(1774210615.954:253): avc: denied { ioctl } for pid=6335 comm="syz.1.99" path="socket:[10211]" dev="sockfs" ino=10211 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.489811][ T29] audit: type=1400 audit(1774210615.994:254): avc: denied { setopt } for pid=6335 comm="syz.1.99" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.807749][ T6158] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.869486][ T6158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.011990][ T6158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.712173][ T5871] rtl8150 3-1:1.0: couldn't reset the device [ 117.718596][ T5871] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 118.597198][ T29] audit: type=1400 audit(1774210617.894:255): avc: denied { read write } for pid=6351 comm="syz.0.103" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 118.710066][ T5871] usb 3-1: USB disconnect, device number 5 [ 118.773349][ T29] audit: type=1400 audit(1774210618.004:256): avc: denied { open } for pid=6351 comm="syz.0.103" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 118.798460][ T29] audit: type=1400 audit(1774210618.434:257): avc: denied { ioctl } for pid=6350 comm="syz.2.104" path="socket:[9109]" dev="sockfs" ino=9109 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.916369][ T29] audit: type=1400 audit(1774210618.794:258): avc: denied { append } for pid=6362 comm="syz.0.105" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.027399][ T6371] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 121.048970][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 121.048987][ T29] audit: type=1400 audit(1774210620.894:263): avc: denied { create } for pid=6373 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 121.227544][ T6383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.110'. [ 121.244028][ T6383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.110'. [ 121.286515][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.110'. [ 121.295579][ T6383] openvswitch: netlink: Flow key attr not present in new flow. [ 121.929316][ T6385] warning: `syz.0.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.966595][ T6385] netlink: 56 bytes leftover after parsing attributes in process `syz.0.111'. [ 122.263668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.483373][ T5871] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 122.505019][ T29] audit: type=1400 audit(1774210622.404:264): avc: denied { create } for pid=6384 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 122.650280][ T29] audit: type=1400 audit(1774210622.544:265): avc: denied { create } for pid=6388 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.651328][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.865276][ T5871] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 122.874512][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.883551][ T5871] usb 3-1: Product: syz [ 122.887762][ T5871] usb 3-1: Manufacturer: syz [ 122.892338][ T5871] usb 3-1: SerialNumber: syz [ 122.990506][ T5871] usb 3-1: config 0 descriptor?? [ 123.067911][ T29] audit: type=1400 audit(1774210622.954:266): avc: denied { bind } for pid=6392 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.112459][ T5871] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 123.373853][ T5812] usb 3-1: USB disconnect, device number 6 [ 123.810745][ T29] audit: type=1400 audit(1774210623.704:267): avc: denied { create } for pid=6400 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.888879][ T29] audit: type=1400 audit(1774210623.724:268): avc: denied { ioctl } for pid=6400 comm="syz.0.113" path="socket:[10284]" dev="sockfs" ino=10284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.980458][ T29] audit: type=1400 audit(1774210623.724:269): avc: denied { setopt } for pid=6400 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.118885][ T29] audit: type=1400 audit(1774210623.724:270): avc: denied { write } for pid=6400 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.233460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.752177][ T29] audit: type=1400 audit(1774210625.634:271): avc: denied { read } for pid=6415 comm="syz.3.118" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 125.833419][ T29] audit: type=1400 audit(1774210625.634:272): avc: denied { open } for pid=6415 comm="syz.3.118" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.524825][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.531256][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.714332][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 128.290038][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 128.290086][ T29] audit: type=1400 audit(1774210628.184:274): avc: denied { setopt } for pid=6436 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.326884][ T29] audit: type=1400 audit(1774210629.214:275): avc: denied { ioctl } for pid=6434 comm="syz.3.123" path="socket:[11340]" dev="sockfs" ino=11340 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 129.737305][ T29] audit: type=1400 audit(1774210629.634:276): avc: denied { append } for pid=6447 comm="syz.2.119" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.299388][ T29] audit: type=1400 audit(1774210629.634:277): avc: denied { open } for pid=6447 comm="syz.2.119" path="/dev/sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.323540][ T29] audit: type=1400 audit(1774210629.664:278): avc: denied { ioctl } for pid=6447 comm="syz.2.119" path="/dev/sg0" dev="devtmpfs" ino=783 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.348836][ T29] audit: type=1400 audit(1774210629.664:279): avc: denied { create } for pid=6447 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.368626][ T29] audit: type=1400 audit(1774210629.774:280): avc: denied { read } for pid=6447 comm="syz.2.119" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 130.400797][ T29] audit: type=1400 audit(1774210629.774:281): avc: denied { open } for pid=6447 comm="syz.2.119" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 130.465869][ T6446] bridge0: port 3(erspan0) entered blocking state [ 130.472738][ T6446] bridge0: port 3(erspan0) entered disabled state [ 130.480436][ T6446] erspan0: entered allmulticast mode [ 130.495681][ T6446] erspan0: entered promiscuous mode [ 130.503022][ T6446] bridge0: port 3(erspan0) entered blocking state [ 130.509820][ T6446] bridge0: port 3(erspan0) entered forwarding state [ 131.827433][ T29] audit: type=1400 audit(1774210631.264:282): avc: denied { unlink } for pid=6454 comm="syz.1.127" name="#1" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.940402][ T29] audit: type=1400 audit(1774210631.284:283): avc: denied { mount } for pid=6454 comm="syz.1.127" name="/" dev="overlay" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.681641][ T6468] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.927479][ T6465] syz.3.129 (6465) used greatest stack depth: 19296 bytes left [ 132.941344][ T6473] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.134243][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 134.134259][ T29] audit: type=1400 audit(1774210634.024:289): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.442661][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.136'. [ 134.455556][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.136'. [ 134.499047][ T29] audit: type=1400 audit(1774210634.394:290): avc: denied { read write } for pid=6482 comm="syz.4.136" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 135.473438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.625544][ T29] audit: type=1400 audit(1774210634.394:291): avc: denied { open } for pid=6482 comm="syz.4.136" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 135.897631][ T6498] pim6reg99999999: entered allmulticast mode [ 135.999558][ T29] audit: type=1400 audit(1774210634.394:292): avc: denied { mount } for pid=6482 comm="syz.4.136" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 136.129740][ T29] audit: type=1400 audit(1774210635.524:293): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 136.253439][ T29] audit: type=1400 audit(1774210635.714:294): avc: denied { write } for pid=6486 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 136.386348][ T6504] evm: overlay not supported [ 137.323739][ T29] audit: type=1400 audit(1774210636.284:295): avc: denied { watch } for pid=6501 comm="syz.4.139" path="/23/bus/file1" dev="overlay" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 137.387963][ T29] audit: type=1400 audit(1774210636.284:296): avc: denied { watch_sb watch_reads } for pid=6501 comm="syz.4.139" path="/23/bus/file1" dev="overlay" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.857034][ T29] audit: type=1400 audit(1774210637.664:297): avc: denied { append } for pid=6484 comm="syz.0.135" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.179667][ T29] audit: type=1400 audit(1774210638.074:298): avc: denied { read } for pid=6508 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.553940][ T29] audit: type=1400 audit(1774210638.784:299): avc: denied { connect } for pid=6508 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.693342][ T29] audit: type=1400 audit(1774210638.854:300): avc: denied { shutdown } for pid=6508 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.831149][ T29] audit: type=1400 audit(1774210639.724:301): avc: denied { read } for pid=6517 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.067429][ T29] audit: type=1400 audit(1774210639.964:302): avc: denied { ioctl } for pid=6520 comm="syz.2.141" path="socket:[11525]" dev="sockfs" ino=11525 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 140.324748][ T29] audit: type=1400 audit(1774210640.034:303): avc: denied { getopt } for pid=6520 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.625313][ T29] audit: type=1400 audit(1774210640.394:304): avc: denied { create } for pid=6528 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.659602][ T29] audit: type=1400 audit(1774210640.394:305): avc: denied { mounton } for pid=6528 comm="syz.3.144" path="/27/file1" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.723566][ T29] audit: type=1400 audit(1774210640.584:306): avc: denied { create } for pid=6522 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.833459][ T29] audit: type=1400 audit(1774210640.724:307): avc: denied { setopt } for pid=6532 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.038882][ T5821] Bluetooth: hci3: command 0x2016 tx timeout [ 141.437901][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 141.450199][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 141.463605][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 141.474618][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 141.475171][ T29] audit: type=1400 audit(1774210641.334:308): avc: denied { read write } for pid=6533 comm="syz.2.147" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 142.425123][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 143.880709][ T5821] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 144.113412][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.113448][ T5821] Tainted: [L]=SOFTLOCKUP [ 144.113454][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.113467][ T5821] Workqueue: hci3 hci_rx_work [ 144.113494][ T5821] Call Trace: [ 144.113505][ T5821] [ 144.113513][ T5821] dump_stack_lvl+0x100/0x190 [ 144.113547][ T5821] sysfs_warn_dup.cold+0x1c/0x28 [ 144.113573][ T5821] sysfs_create_dir_ns+0x24b/0x2b0 [ 144.113604][ T5821] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 144.113631][ T5821] ? find_held_lock+0x2b/0x80 [ 144.113659][ T5821] ? kobject_add_internal+0x25f/0x930 [ 144.113689][ T5821] ? kobject_add_internal+0x25f/0x930 [ 144.113719][ T5821] ? do_raw_spin_unlock+0x145/0x1e0 [ 144.113743][ T5821] kobject_add_internal+0x2c8/0x930 [ 144.113777][ T5821] kobject_add+0x16a/0x1e0 [ 144.113795][ T5821] ? __pfx_kobject_add+0x10/0x10 [ 144.113811][ T5821] ? preempt_schedule_thunk+0x16/0x30 [ 144.113843][ T5821] ? kobject_put+0xb9/0x640 [ 144.113870][ T5821] ? _raw_spin_unlock+0x3e/0x50 [ 144.113901][ T5821] device_add+0x294/0x1950 [ 144.113922][ T5821] ? __pfx_dev_set_name+0x10/0x10 [ 144.113946][ T5821] ? __pfx_device_add+0x10/0x10 [ 144.113966][ T5821] ? mgmt_send_event_skb+0x2fb/0x460 [ 144.113994][ T5821] hci_conn_add_sysfs+0x1a3/0x260 [ 144.114021][ T5821] le_conn_complete_evt+0x11cb/0x1f40 [ 144.114050][ T5821] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 144.114079][ T5821] hci_le_conn_complete_evt+0x23c/0x3a0 [ 144.114102][ T5821] ? skb_pull_data+0x15f/0x1e0 [ 144.114124][ T5821] hci_le_meta_evt+0x34a/0x5f0 [ 144.114148][ T5821] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 144.114173][ T5821] hci_event_packet+0x682/0x11c0 [ 144.114195][ T5821] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 144.114220][ T5821] ? __pfx_hci_event_packet+0x10/0x10 [ 144.114244][ T5821] ? kcov_remote_start+0x374/0x660 [ 144.114269][ T5821] ? lockdep_hardirqs_on+0x78/0x100 [ 144.114300][ T5821] hci_rx_work+0x451/0xfc0 [ 144.114327][ T5821] process_one_work+0xa23/0x19a0 [ 144.114360][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 144.114388][ T5821] ? __pfx_hci_rx_work+0x10/0x10 [ 144.114411][ T5821] worker_thread+0x5ef/0xe50 [ 144.114438][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 144.114459][ T5821] ? kthread+0x13a/0x450 [ 144.114476][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 144.114494][ T5821] kthread+0x370/0x450 [ 144.114511][ T5821] ? __pfx_kthread+0x10/0x10 [ 144.114532][ T5821] ret_from_fork+0x754/0xd80 [ 144.114552][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 144.114574][ T5821] ? __switch_to+0x7b4/0x1120 [ 144.114597][ T5821] ? __pfx_kthread+0x10/0x10 [ 144.114617][ T5821] ret_from_fork_asm+0x1a/0x30 [ 144.114651][ T5821] [ 144.114899][ T5821] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 144.429513][ T6565] input: syz0 as /devices/virtual/input/input8 [ 144.602800][ T5821] Bluetooth: hci3: failed to register connection device [ 144.603892][ T5821] Bluetooth: hci3: link tx timeout [ 144.603990][ T5821] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.604303][ T5821] Bluetooth: hci3: link tx timeout [ 144.604313][ T5821] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.247292][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 146.247304][ T29] audit: type=1400 audit(1774210646.144:313): avc: denied { read write } for pid=6587 comm="syz.3.157" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 146.481314][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 146.828352][ T5128] Bluetooth: hci3: command 0x2016 tx timeout [ 146.922970][ T29] audit: type=1400 audit(1774210646.184:314): avc: denied { open } for pid=6587 comm="syz.3.157" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 147.020418][ T6594] input: syz0 as /devices/virtual/input/input9 [ 147.145671][ T6597] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.496635][ T29] audit: type=1400 audit(1774210647.254:315): avc: denied { execute } for pid=6584 comm="syz.0.156" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 147.717627][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 147.733167][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 147.746690][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 147.776210][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 148.185390][ T29] audit: type=1400 audit(1774210648.084:316): avc: denied { connect } for pid=6608 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.359340][ T29] audit: type=1400 audit(1774210648.104:317): avc: denied { read } for pid=6608 comm="syz.3.164" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.384177][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.391718][ T5864] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.024793][ T5128] Bluetooth: hci3: command 0x2016 tx timeout [ 149.360115][ T29] audit: type=1400 audit(1774210648.104:318): avc: denied { write } for pid=6608 comm="syz.3.164" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.383992][ T29] audit: type=1400 audit(1774210648.114:319): avc: denied { read } for pid=6608 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.623887][ T29] audit: type=1400 audit(1774210648.124:320): avc: denied { mounton } for pid=6610 comm="syz.4.161" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 149.673906][ T29] audit: type=1400 audit(1774210649.574:321): avc: denied { create } for pid=6616 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 149.768484][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 149.793558][ T5864] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 149.812445][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.998127][ T6624] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 150.224953][ T5864] usb 3-1: config 0 has no interface number 0 [ 150.232363][ T29] audit: type=1400 audit(1774210649.874:322): avc: denied { connect } for pid=6615 comm="syz.3.165" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.232818][ T5894] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 150.262382][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.271045][ T5894] usb 2-1: Product: syz [ 150.276746][ T5864] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 150.320331][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.333403][ T5894] usb 2-1: Manufacturer: syz [ 150.343176][ T5894] usb 2-1: SerialNumber: syz [ 150.348158][ T5864] usb 3-1: Product: syz [ 150.354078][ T5864] usb 3-1: Manufacturer: syz [ 150.375347][ T5864] usb 3-1: SerialNumber: syz [ 150.407861][ T5864] usb 3-1: config 0 descriptor?? [ 150.431218][ T5864] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 150.438716][ T5864] uvcvideo 3-1:0.105: No valid video chain found. [ 150.623290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 151.530644][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 151.530659][ T29] audit: type=1400 audit(1774210650.644:324): avc: denied { setopt } for pid=6627 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.636880][ T5864] usb 3-1: USB disconnect, device number 7 [ 152.230966][ T29] audit: type=1400 audit(1774210651.784:325): avc: denied { ioctl } for pid=6635 comm="syz.2.169" path="socket:[10880]" dev="sockfs" ino=10880 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 152.270616][ T5894] rtl8150 2-1:1.0: couldn't reset the device [ 152.284605][ T5894] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 152.698272][ T6641] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 152.923097][ T6641] bond1: entered promiscuous mode [ 152.928455][ T6641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.966437][ T5894] usb 2-1: USB disconnect, device number 6 [ 153.030300][ T6640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.037324][ T6640] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 153.047375][ T6640] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 153.059093][ T6640] bond1: (slave vti0): making interface the new active one [ 153.066316][ T6640] vti0: entered promiscuous mode [ 153.072666][ T6640] bond1: (slave vti0): Enslaving as an active interface with an up link [ 154.044730][ T6657] input: syz0 as /devices/virtual/input/input10 [ 154.080325][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 154.879206][ T5878] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.121328][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.721262][ T5878] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 155.731412][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.079842][ T6679] loop6: detected capacity change from 0 to 7 [ 156.098809][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.108541][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.133799][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.143418][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.262124][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.271775][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.286710][ T5878] usb 5-1: config 0 descriptor?? [ 156.309286][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.318905][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.327101][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 156.335484][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.345108][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.362313][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.371926][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.387814][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.397430][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.416077][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.425694][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.433835][ T6679] ldm_validate_partition_table(): Disk read failed. [ 156.441702][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.451276][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.459499][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.469075][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.493384][ T6679] Dev loop6: unable to read RDB block 0 [ 156.571249][ T6679] loop6: unable to read partition table [ 156.577678][ T6679] loop6: partition table beyond EOD, truncated [ 156.583997][ T6679] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 156.864130][ T29] audit: type=1400 audit(1774210656.734:326): avc: denied { setopt } for pid=6682 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.004119][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.368299][ T6690] xt_hashlimit: size too large, truncated to 1048576 [ 158.103800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 158.134800][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 158.143766][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 158.215390][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 158.367076][ T5878] pwc: recv_control_msg error -32 req 04 val 1300 [ 158.367963][ T5878] pwc: recv_control_msg error -32 req 04 val 1400 [ 158.372059][ T5878] pwc: recv_control_msg error -32 req 02 val 2000 [ 158.372605][ T5878] pwc: recv_control_msg error -32 req 02 val 2100 [ 158.373106][ T5878] pwc: recv_control_msg error -32 req 04 val 1500 [ 158.374115][ T5878] pwc: recv_control_msg error -32 req 02 val 2500 [ 158.380284][ T5878] pwc: recv_control_msg error -32 req 02 val 2400 [ 158.380752][ T5878] pwc: recv_control_msg error -32 req 02 val 2600 [ 158.558608][ T6698] block device autoloading is deprecated and will be removed. [ 158.649461][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.652397][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.653781][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.668786][ T5878] pwc: Registered as video103. [ 158.695262][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 158.751592][ T5878] usb 5-1: USB disconnect, device number 3 [ 159.608521][ T6713] xt_connbytes: Forcing CT accounting to be enabled [ 159.608679][ T6713] Cannot find set identified by id 0 to match [ 159.863533][ T29] audit: type=1400 audit(1774210659.724:327): avc: denied { write } for pid=6710 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.920633][ T29] audit: type=1400 audit(1774210659.734:328): avc: denied { connect } for pid=6710 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.137562][ T29] audit: type=1400 audit(1774210659.734:329): avc: denied { name_connect } for pid=6710 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 160.364558][ T6718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.186'. [ 160.923936][ T29] audit: type=1400 audit(1774210659.804:330): avc: denied { listen } for pid=6710 comm="syz.4.185" lport=33812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.548385][ T29] audit: type=1400 audit(1774210659.804:331): avc: denied { accept } for pid=6710 comm="syz.4.185" lport=33812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.857328][ T29] audit: type=1400 audit(1774210659.804:332): avc: denied { write } for pid=6710 comm="syz.4.185" lport=33812 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.886738][ T29] audit: type=1400 audit(1774210660.854:333): avc: denied { bind } for pid=6723 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.911493][ T29] audit: type=1400 audit(1774210660.854:334): avc: denied { node_bind } for pid=6723 comm="syz.1.182" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 161.988468][ T29] audit: type=1400 audit(1774210661.884:335): avc: denied { connect } for pid=6734 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.417419][ T6737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.709475][ T6744] overlayfs: missing 'lowerdir' [ 163.193780][ T5893] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.436505][ T5893] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 163.469002][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.596096][ T5893] usb 2-1: Product: syz [ 163.600303][ T5893] usb 2-1: Manufacturer: syz [ 163.612634][ T5893] usb 2-1: SerialNumber: syz [ 164.021497][ T29] audit: type=1400 audit(1774210663.914:336): avc: denied { bind } for pid=6761 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.109561][ T6766] Cannot find del_set index 2 as target [ 164.537658][ T29] audit: type=1400 audit(1774210664.414:337): avc: denied { write } for pid=6763 comm="syz.4.193" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 164.723583][ T29] audit: type=1400 audit(1774210664.414:338): avc: denied { read } for pid=6763 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.989212][ T5893] rtl8150 2-1:1.0: couldn't reset the device [ 164.995461][ T5893] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 165.016823][ T29] audit: type=1400 audit(1774210664.814:339): avc: denied { setopt } for pid=6774 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 165.071486][ T29] audit: type=1400 audit(1774210664.814:340): avc: denied { listen } for pid=6774 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 165.160021][ T29] audit: type=1400 audit(1774210664.824:341): avc: denied { ioctl } for pid=6774 comm="syz.0.195" path="socket:[12010]" dev="sockfs" ino=12010 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 165.651558][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.864965][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.933484][ T5878] usb 2-1: USB disconnect, device number 7 [ 166.032092][ T29] audit: type=1400 audit(1774210665.814:342): avc: denied { write } for pid=6782 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 166.219658][ T6784] geneve2: entered promiscuous mode [ 168.390374][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.400513][ T5893] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 168.409657][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.425025][ T5893] usb 4-1: config 0 descriptor?? [ 168.430436][ T5893] usb 4-1: can't set config #0, error -71 [ 168.437484][ T5893] usb 4-1: USB disconnect, device number 4 [ 168.521869][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 168.536056][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 168.554802][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 168.568753][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 168.578818][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 170.193443][ T29] audit: type=1400 audit(1774210669.554:343): avc: denied { create } for pid=6808 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 170.659396][ T29] audit: type=1400 audit(1774210669.584:344): avc: denied { sys_admin } for pid=6808 comm="syz.4.205" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 170.692800][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 170.733598][ T29] audit: type=1400 audit(1774210670.454:345): avc: denied { read } for pid=6807 comm="syz.0.204" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.760099][ T29] audit: type=1400 audit(1774210670.534:346): avc: denied { open } for pid=6807 comm="syz.0.204" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 171.322951][ T6826] netlink: 44 bytes leftover after parsing attributes in process `syz.1.206'. [ 171.834170][ T29] audit: type=1400 audit(1774210670.854:347): avc: denied { write } for pid=6818 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 171.883572][ T5924] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.975350][ T29] audit: type=1400 audit(1774210670.864:348): avc: denied { ioctl } for pid=6818 comm="syz.3.207" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.108321][ T5924] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 172.137885][ T29] audit: type=1400 audit(1774210670.874:349): avc: denied { set_context_mgr } for pid=6818 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 172.183434][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.191428][ T5924] usb 4-1: Product: syz [ 172.250815][ T5924] usb 4-1: Manufacturer: syz [ 172.269208][ T29] audit: type=1400 audit(1774210672.024:350): avc: denied { connect } for pid=6820 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.302191][ T5924] usb 4-1: SerialNumber: syz [ 172.546860][ T5894] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 172.670608][ T5924] rtl8150 4-1:1.0: couldn't reset the device [ 172.694096][ T5924] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 172.730508][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.738873][ T5924] usb 4-1: USB disconnect, device number 5 [ 172.763434][ T5894] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 172.805726][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.881399][ T6841] CUSE: DEVNAME unspecified [ 173.098254][ T5894] usb 5-1: config 0 descriptor?? [ 173.103309][ T29] audit: type=1400 audit(1774210672.994:351): avc: denied { sqpoll } for pid=6842 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 174.507987][ T29] audit: type=1400 audit(1774210674.404:352): avc: denied { listen } for pid=6848 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 174.748281][ T6854] netlink: zone id is out of range [ 174.753772][ T6854] netlink: zone id is out of range [ 174.758991][ T6854] netlink: zone id is out of range [ 174.764286][ T6854] netlink: zone id is out of range [ 174.769495][ T6854] netlink: zone id is out of range [ 174.774720][ T6854] netlink: zone id is out of range [ 174.779924][ T6854] netlink: zone id is out of range [ 174.785227][ T6854] netlink: zone id is out of range [ 174.790434][ T6854] netlink: zone id is out of range [ 174.813737][ T6854] netlink: zone id is out of range [ 174.927703][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 175.933169][ T5894] ath6kl: Failed to submit usb control message: -110 [ 175.956390][ T5894] ath6kl: unable to send the bmi data to the device: -110 [ 175.964661][ T5894] ath6kl: Unable to send get target info: -110 [ 175.976850][ T5894] ath6kl: Failed to init ath6kl core: -110 [ 175.983116][ T5894] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 176.197155][ T6864] xt_hashlimit: size too large, truncated to 1048576 [ 176.214680][ T29] audit: type=1400 audit(1774210676.074:353): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.321377][ T29] audit: type=1400 audit(1774210676.074:354): avc: denied { search } for pid=5473 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.409376][ T5893] Process accounting resumed [ 176.580904][ T29] audit: type=1400 audit(1774210676.074:355): avc: denied { search } for pid=5473 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.695308][ T29] audit: type=1400 audit(1774210676.074:356): avc: denied { read } for pid=5473 comm="dhcpcd" name="n100" dev="tmpfs" ino=2908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.786009][ T29] audit: type=1400 audit(1774210676.074:357): avc: denied { open } for pid=5473 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.922258][ T29] audit: type=1400 audit(1774210676.074:358): avc: denied { getattr } for pid=5473 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.229211][ T29] audit: type=1400 audit(1774210676.434:359): avc: denied { read open } for pid=6875 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.527610][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 177.893353][ T29] audit: type=1400 audit(1774210676.434:360): avc: denied { getattr } for pid=6875 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.019317][ T29] audit: type=1400 audit(1774210677.344:361): avc: denied { create } for pid=6882 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.069201][ T29] audit: type=1400 audit(1774210677.364:362): avc: denied { connect } for pid=6882 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 178.172568][ T6863] netlink: 164 bytes leftover after parsing attributes in process `syz.1.215'. [ 178.695231][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 178.711276][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 178.721681][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 178.736447][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 178.749049][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 179.953574][ T6921] syz.0.222 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 179.971107][ T6921] ubi31: attaching mtd0 [ 179.986483][ T6921] ubi31: scanning is finished [ 179.991201][ T6921] ubi31: empty MTD device detected [ 180.401715][ T6921] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 180.409312][ T6921] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 180.416591][ T6921] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 180.423640][ T6921] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 180.431601][ T6921] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 180.438481][ T6921] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 180.446560][ T6921] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3783896765 [ 180.456635][ T6921] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 180.467525][ T6926] ubi31: background thread "ubi_bgt31d" started, PID 6926 [ 180.853434][ T5864] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.993611][ T5893] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.141468][ T5864] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 181.160330][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.188253][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.201555][ T5864] usb 4-1: Product: syz [ 181.214029][ T5864] usb 4-1: Manufacturer: syz [ 181.220771][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.234043][ T5864] usb 4-1: SerialNumber: syz [ 181.256009][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.281447][ T5893] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 181.305027][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.342138][ T5893] usb 3-1: config 0 descriptor?? [ 181.726588][ T5924] usb 5-1: USB disconnect, device number 4 [ 181.775641][ T5864] rtl8150 4-1:1.0: couldn't reset the device [ 181.793853][ T5864] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 181.837663][ T5864] usb 4-1: USB disconnect, device number 6 [ 181.900710][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 182.125055][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.226'. [ 182.176726][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 182.177778][ T29] audit: type=1400 audit(1774210681.984:371): avc: denied { setopt } for pid=6938 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.273712][ T29] audit: type=1400 audit(1774210682.014:372): avc: denied { ioctl } for pid=6938 comm="syz.4.226" path="socket:[12307]" dev="sockfs" ino=12307 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 183.703741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 184.081476][ T5893] usbhid 3-1:0.0: can't add hid device: -71 [ 184.089384][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.232219][ T6963] CUSE: info not properly terminated [ 184.641413][ T5893] usb 3-1: USB disconnect, device number 8 [ 184.760503][ T6968] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 185.121074][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 185.138789][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 185.148879][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 185.156528][ T29] audit: type=1400 audit(1774210685.054:373): avc: denied { write } for pid=6971 comm="syz.2.233" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 185.277963][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 185.393868][ T51] Bluetooth: hci3: command 0x2016 tx timeout [ 185.627882][ T29] audit: type=1400 audit(1774210685.504:374): avc: denied { ioctl } for pid=6978 comm="syz.4.235" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 186.000513][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 186.041186][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 186.050022][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 186.175475][ T29] audit: type=1800 audit(1774210685.744:375): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.233" name="file1" dev="overlay" ino=279 res=0 errno=0 [ 186.435876][ T29] audit: type=1400 audit(1774210686.224:376): avc: denied { name_connect } for pid=6978 comm="syz.4.235" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 187.071308][ T29] audit: type=1400 audit(1774210686.904:377): avc: denied { map } for pid=6985 comm="syz.0.236" path="pipe:[990]" dev="pipefs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 187.512633][ T6996] Cannot find set identified by id 0 to match [ 187.733329][ T5893] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 188.794552][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.800878][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.468549][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 190.507239][ T5893] usb 3-1: device descriptor read/all, error -71 [ 190.535769][ T29] audit: type=1400 audit(1774210690.424:378): avc: denied { module_request } for pid=7008 comm="syz.1.241" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 191.793305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 192.089141][ T29] audit: type=1400 audit(1774210690.674:379): avc: denied { setattr } for pid=7013 comm="syz.2.244" name="NETLINK" dev="sockfs" ino=12406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.220711][ T7027] netlink: 'syz.3.242': attribute type 1 has an invalid length. [ 192.274263][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.242'. [ 192.365206][ T29] audit: type=1800 audit(1774210691.944:380): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.244" name="/" dev="sockfs" ino=12406 res=0 errno=0 [ 192.415837][ T7027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.327934][ T7012] vivid-007: ================= START STATUS ================= [ 193.421335][ T7044] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 193.432003][ T7044] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 193.442112][ T7044] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 193.450152][ T7044] UDF-fs: Scanning with blocksize 512 failed [ 193.461864][ T7044] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 193.474005][ T7044] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 193.484183][ T7044] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 193.491836][ T7044] UDF-fs: Scanning with blocksize 1024 failed [ 193.501944][ T7044] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 193.535673][ T7044] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 193.546200][ T7044] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 193.554451][ T7044] UDF-fs: Scanning with blocksize 2048 failed [ 193.562625][ T7044] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 193.573126][ T7044] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 193.583325][ T7044] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 193.591015][ T7044] UDF-fs: Scanning with blocksize 4096 failed [ 193.597672][ T7044] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 193.618213][ T7012] vivid-007: Enable Output Cropping: true grabbed [ 193.675992][ T7046] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 193.684728][ T7012] vivid-007: Enable Output Composing: true grabbed [ 193.691782][ T7012] vivid-007: Enable Output Scaler: true grabbed [ 193.728286][ T7012] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 193.743011][ T29] audit: type=1400 audit(1774210693.634:381): avc: denied { watch } for pid=7035 comm="syz.2.245" path="/47/file1" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 193.907544][ T7012] vivid-007: Transmit Mode: HDMI grabbed [ 193.914964][ T7012] vivid-007: Hotplug Present: 0x00000000 [ 193.920892][ T7012] vivid-007: RxSense Present: 0x00000000 [ 193.927973][ T7012] vivid-007: EDID Present: 0x00000000 [ 193.935925][ T7012] vivid-007: ================== END STATUS ================== [ 194.323404][ T29] audit: type=1400 audit(1774210693.974:382): avc: denied { watch watch_reads } for pid=7035 comm="syz.2.245" path="/47" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 195.088436][ T7054] xt_hashlimit: size too large, truncated to 1048576 [ 195.115076][ T29] audit: type=1400 audit(1774210695.004:383): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 195.274013][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 195.970675][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 196.285038][ T7069] CUSE: unknown device info "" [ 196.297157][ T7069] CUSE: unknown device info "" [ 196.302962][ T29] audit: type=1400 audit(1774210696.194:384): avc: denied { accept } for pid=7064 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.327213][ T7069] CUSE: unknown device info "" [ 196.338385][ T7069] CUSE: unknown device info "" [ 196.357814][ T7069] CUSE: unknown device info "ÿ" [ 196.366975][ T7069] CUSE: unknown device info "" [ 196.374916][ T7070] ipt_rpfilter: unknown options [ 196.377089][ T7069] CUSE: unknown device info "" [ 196.403216][ T7069] CUSE: unknown device info "ÿ" [ 196.403846][ T7070] fuse: Unknown parameter '0xffffffffffffffff' [ 196.410786][ T7069] CUSE: DEVNAME unspecified [ 196.421437][ T29] audit: type=1400 audit(1774210696.294:385): avc: denied { mounton } for pid=7067 comm="syz.4.252" path="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.577605][ T29] audit: type=1400 audit(1774210696.384:386): avc: denied { unmount } for pid=7067 comm="syz.4.252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 197.762537][ T7072] net_ratelimit: 10 callbacks suppressed [ 197.762559][ T7072] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 197.821006][ T7085] input: syz0 as /devices/virtual/input/input14 [ 197.965242][ T5878] Process accounting resumed [ 198.048778][ T7088] pim6reg: entered allmulticast mode [ 198.323686][ T29] audit: type=1400 audit(1774210698.184:387): avc: denied { ioctl } for pid=7094 comm="syz.1.257" path="socket:[12513]" dev="sockfs" ino=12513 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 199.077004][ T7103] netlink: 'syz.0.258': attribute type 12 has an invalid length. [ 200.642306][ T7121] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 200.673620][ T29] audit: type=1400 audit(1774210700.504:388): avc: denied { bind } for pid=7111 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.693816][ T29] audit: type=1400 audit(1774210700.504:389): avc: denied { name_bind } for pid=7111 comm="syz.0.260" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 200.728856][ T29] audit: type=1400 audit(1774210700.504:390): avc: denied { node_bind } for pid=7111 comm="syz.0.260" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 201.730228][ T7130] overlay: Unknown parameter '/' [ 201.864439][ T29] audit: type=1400 audit(1774210701.614:391): avc: denied { mount } for pid=7125 comm="syz.1.263" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 202.133006][ T29] audit: type=1400 audit(1774210701.624:392): avc: denied { mounton } for pid=7125 comm="syz.1.263" path="/55/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 202.163011][ T29] audit: type=1400 audit(1774210701.974:393): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 202.690114][ T7139] overlayfs: failed to clone upperpath [ 202.782714][ T7141] overlay: Unknown parameter '/' [ 203.170027][ T7145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7145 comm=syz.4.267 [ 205.334971][ T29] audit: type=1400 audit(1774210704.994:394): avc: denied { write } for pid=7150 comm="syz.0.269" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.817202][ T7172] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 208.243739][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 208.244679][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 208.524261][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 208.531961][ T29] audit: type=1400 audit(1774210708.054:395): avc: denied { shutdown } for pid=7185 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.557273][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 208.582364][ T29] audit: type=1400 audit(1774210708.274:396): avc: denied { ioctl } for pid=7185 comm="syz.1.278" path="socket:[12782]" dev="sockfs" ino=12782 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.077289][ T7190] ceph: No mds server is up or the cluster is laggy [ 209.086622][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 209.092608][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 209.498231][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 209.551833][ T7201] netlink: 68 bytes leftover after parsing attributes in process `syz.1.279'. [ 209.838275][ T29] audit: type=1400 audit(1774210709.734:397): avc: denied { getopt } for pid=7183 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.928798][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 210.188248][ T7208] netlink: 200 bytes leftover after parsing attributes in process `syz.0.280'. [ 210.224644][ T7205] input: syz0 as /devices/virtual/input/input15 [ 211.145302][ T29] audit: type=1400 audit(1774210711.034:398): avc: denied { wake_alarm } for pid=7216 comm="syz.2.285" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 211.315412][ T29] audit: type=1400 audit(1774210711.054:399): avc: denied { accept } for pid=7222 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.760578][ T29] audit: type=1400 audit(1774210711.284:400): avc: denied { mount } for pid=7222 comm="syz.4.286" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 211.841318][ T29] audit: type=1400 audit(1774210711.284:401): avc: denied { remount } for pid=7222 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 212.132932][ T29] audit: type=1400 audit(1774210712.024:402): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 212.495956][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 212.505499][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 212.529300][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 212.538852][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 212.718022][ T29] audit: type=1326 audit(1774210712.504:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b89d9c799 code=0x7ffc0000 [ 212.900312][ T29] audit: type=1326 audit(1774210712.514:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b89d9c799 code=0x7ffc0000 [ 213.133432][ T5878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 213.545542][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.565334][ T5878] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.615745][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.664268][ T5878] usb 3-1: config 0 descriptor?? [ 213.831157][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 213.831171][ T29] audit: type=1400 audit(1774210713.724:408): avc: denied { read append } for pid=7256 comm="syz.0.293" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 213.861557][ T30] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 213.941444][ T5893] usb 3-1: USB disconnect, device number 11 [ 213.944517][ T29] audit: type=1400 audit(1774210713.724:409): avc: denied { open } for pid=7256 comm="syz.0.293" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 214.022622][ T7248] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 214.054080][ T5878] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 214.066847][ T30] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 214.083145][ T29] audit: type=1400 audit(1774210713.774:410): avc: denied { ioctl } for pid=7256 comm="syz.0.293" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 214.126767][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.160786][ T7248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.289'. [ 214.186807][ T30] usb 4-1: Product: syz [ 214.209616][ T30] usb 4-1: Manufacturer: syz [ 214.242086][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.263195][ T30] usb 4-1: SerialNumber: syz [ 214.431825][ T5878] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 215.262421][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.334453][ T5878] usb 5-1: Product: syz [ 215.338654][ T5878] usb 5-1: Manufacturer: syz [ 215.343225][ T5878] usb 5-1: SerialNumber: syz [ 215.396803][ T5878] usb 5-1: config 0 descriptor?? [ 215.423595][ T5924] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 215.476518][ T7267] binder: 7264:7267 ioctl c0306201 0 returned -14 [ 215.490240][ T7267] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 215.546642][ T7268] loop5: detected capacity change from 0 to 7 [ 215.602291][ T7269] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 215.610717][ T7269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.295'. [ 215.900228][ T7268] Dev loop5: unable to read RDB block 7 [ 215.905894][ T7268] loop5: AHDI p1 [ 215.909565][ T7268] loop5: partition table partially beyond EOD, truncated [ 215.930539][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.939316][ T7267] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 215.948391][ T7269] batadv0: entered promiscuous mode [ 215.953740][ T7269] batadv0: entered allmulticast mode [ 215.969416][ T7269] bond0: (slave batadv0): Releasing backup interface [ 215.987926][ T7269] bridge0: port 3(batadv0) entered blocking state [ 215.994625][ T7269] bridge0: port 3(batadv0) entered disabled state [ 216.018069][ T1160] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 216.027593][ T1160] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 216.066060][ T5878] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 216.282044][ T30] rtl8150 4-1:1.0: couldn't reset the device [ 216.328143][ T30] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 216.426545][ T30] usb 4-1: USB disconnect, device number 7 [ 216.511957][ T5878] usb 5-1: USB disconnect, device number 5 [ 216.807157][ T7283] netlink: 64 bytes leftover after parsing attributes in process `syz.1.299'. [ 217.385436][ T7284] netlink: 'syz.2.296': attribute type 10 has an invalid length. [ 217.509819][ T7284] team0: Device ipvlan1 failed to register rx_handler [ 217.830067][ T7279] ISOFS: Unable to identify CD-ROM format. [ 217.846549][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 218.345370][ T5864] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 218.478925][ T7306] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 218.523320][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 218.533969][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.650773][ T7309] netlink: 48 bytes leftover after parsing attributes in process `syz.0.306'. [ 218.860395][ T5864] usb 5-1: config 11 has an invalid interface number: 138 but max is 1 [ 218.899484][ T5864] usb 5-1: config 11 has an invalid interface number: 147 but max is 1 [ 219.165234][ T5864] usb 5-1: config 11 has no interface number 0 [ 219.477925][ T5864] usb 5-1: config 11 has no interface number 1 [ 219.526001][ T5864] usb 5-1: config 11 interface 138 has no altsetting 0 [ 219.532903][ T5864] usb 5-1: config 11 interface 147 has no altsetting 0 [ 219.613443][ T5864] usb 5-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=80.d8 [ 219.632787][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.672914][ T5864] usb 5-1: Product: syz [ 219.693633][ T5864] usb 5-1: Manufacturer: syz [ 219.703680][ T5864] usb 5-1: SerialNumber: syz [ 220.085976][ T5864] usb 5-1: USB disconnect, device number 6 [ 220.144902][ T7320] ubi: mtd0 is already attached to ubi31 [ 222.275155][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 223.202412][ T7325] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=86 sclass=netlink_xfrm_socket pid=7325 comm=syz.2.307 [ 223.449560][ T29] audit: type=1400 audit(1774210723.344:411): avc: denied { getopt } for pid=7338 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 223.479550][ T7339] ./cgroup: Can't lookup blockdev [ 223.536404][ T7341] netlink: 168 bytes leftover after parsing attributes in process `syz.4.312'. [ 224.248661][ T29] audit: type=1400 audit(1774210723.464:412): avc: denied { setopt } for pid=7336 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 224.313535][ T5893] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 224.397378][ T7346] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 224.408883][ T29] audit: type=1400 audit(1774210724.304:413): avc: denied { relabelto } for pid=7338 comm="syz.0.313" name="71" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 224.474141][ T29] audit: type=1400 audit(1774210724.304:414): avc: denied { associate } for pid=7338 comm="syz.0.313" name="71" dev="tmpfs" ino=400 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 224.814872][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.838677][ T5893] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 224.863799][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.901875][ T5893] usb 2-1: Product: syz [ 224.910129][ T5893] usb 2-1: Manufacturer: syz [ 224.923376][ T5893] usb 2-1: SerialNumber: syz [ 224.965468][ T5893] usb 2-1: config 0 descriptor?? [ 224.997419][ T5893] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 225.633761][ T7358] xt_hashlimit: size too large, truncated to 1048576 [ 225.636735][ T5878] usb 2-1: USB disconnect, device number 8 [ 226.583478][ T29] audit: type=1400 audit(1774210726.484:415): avc: denied { remove_name } for pid=5806 comm="syz-executor" name="cgroup.events" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 226.743853][ T29] audit: type=1400 audit(1774210726.484:416): avc: denied { rmdir } for pid=5806 comm="syz-executor" name="71" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 226.818335][ T29] audit: type=1400 audit(1774210726.684:417): avc: denied { map } for pid=7389 comm="syz.1.324" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.844048][ T24] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 227.085427][ T5878] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.126026][ T24] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 227.165598][ T29] audit: type=1400 audit(1774210726.684:418): avc: denied { execute } for pid=7389 comm="syz.1.324" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.169317][ T24] usb 4-1: config 0 has no interface number 0 [ 227.292130][ T29] audit: type=1400 audit(1774210727.184:419): avc: denied { append } for pid=7394 comm="syz.0.325" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 227.325122][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.480925][ T29] audit: type=1400 audit(1774210727.224:420): avc: denied { setopt } for pid=7400 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 228.233493][ T24] usb 4-1: config 0 interface 128 has no altsetting 0 [ 228.263364][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.274821][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.387899][ T24] usb 4-1: string descriptor 0 read error: -22 [ 228.397948][ T5878] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.409734][ T24] usb 4-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00 [ 228.422356][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.431424][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.440095][ T5878] usb 5-1: Product: syz [ 228.445102][ T5878] usb 5-1: Manufacturer: syz [ 228.451249][ T24] usb 4-1: config 0 descriptor?? [ 228.463059][ T5878] usb 5-1: SerialNumber: syz [ 228.583037][ T24] usb-storage 4-1:0.128: USB Mass Storage device detected [ 228.598020][ T5878] usb 5-1: bad CDC descriptors [ 228.826146][ T7425] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 229.071700][ T5864] usb 5-1: USB disconnect, device number 7 [ 229.102500][ T5893] usb 4-1: USB disconnect, device number 8 [ 229.126185][ T7425] team0: Port device netdevsim0 added [ 230.074162][ T5878] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 230.150975][ T29] audit: type=1400 audit(1774210729.984:421): avc: denied { bind } for pid=7447 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 230.210255][ T29] audit: type=1400 audit(1774210730.104:422): avc: denied { getopt } for pid=7453 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.274239][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 230.281309][ T5878] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 230.297874][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.309988][ T5878] usb 3-1: config 0 has no interface number 0 [ 230.839312][ T5878] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 230.851879][ T5878] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 230.867438][ T5878] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 230.882088][ T5878] usb 3-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 230.909183][ T5878] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 230.920669][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.929802][ T5878] usb 3-1: Product: syz [ 230.941947][ T5878] usb 3-1: Manufacturer: syz [ 230.952454][ T5878] usb 3-1: SerialNumber: syz [ 230.974528][ T5818] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 230.985649][ T5878] usb 3-1: config 0 descriptor?? [ 231.578713][ T5878] usb 3-1: NFC: intf ffff888025ccd000 id ffffffff8f7c31e0 [ 232.663883][ T30] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 232.708298][ T5878] usb 3-1: USB disconnect, device number 13 [ 232.774477][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 233.815701][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.840057][ T30] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 233.855118][ T30] usb 5-1: can't read configurations, error -71 [ 233.893120][ T29] audit: type=1400 audit(1774210733.774:423): avc: denied { ioctl } for pid=7489 comm="syz.0.348" path="ipc:[4026532807]" dev="nsfs" ino=4026532807 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 234.735631][ T7507] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 234.765960][ T7507] Cannot find add_set index 0 as target [ 234.776574][ T7500] netlink: 80 bytes leftover after parsing attributes in process `syz.3.352'. [ 234.814276][ T7507] tmpfs: Bad value for 'mpol' [ 235.035241][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 235.265153][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 235.292186][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.301078][ T24] usb 2-1: Product: syz [ 235.312157][ T24] usb 2-1: Manufacturer: syz [ 235.322625][ T24] usb 2-1: SerialNumber: syz [ 235.339771][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.362385][ T30] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 235.402536][ T29] audit: type=1400 audit(1774210735.294:424): avc: denied { read } for pid=7523 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.648738][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.719646][ C1] usb 2-1: ath: unknown panic pattern! [ 235.923911][ T5864] usb 2-1: USB disconnect, device number 9 [ 235.978627][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 235.989361][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.001068][ T24] usb 3-1: Product: syz [ 236.006043][ T24] usb 3-1: Manufacturer: syz [ 236.023024][ T24] usb 3-1: SerialNumber: syz [ 236.543918][ T30] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 236.721468][ T30] ath9k_htc: Failed to initialize the device [ 236.728632][ T7543] input: syz0 as /devices/virtual/input/input17 [ 236.974789][ T5864] usb 2-1: ath9k_htc: USB layer deinitialized [ 236.989388][ T24] rtl8150 3-1:1.0: couldn't reset the device [ 237.014310][ T24] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 237.078624][ T24] usb 3-1: USB disconnect, device number 14 [ 238.438973][ T29] audit: type=1326 audit(1774210738.054:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.3.375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b89d9c799 code=0x0 [ 238.442006][ T5893] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 238.680455][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 238.695170][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 238.704806][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 238.714503][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 238.723354][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 238.778562][ T5893] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 238.790921][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.799642][ T5864] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 238.823350][ T5893] usb 5-1: Product: syz [ 238.827567][ T5893] usb 5-1: Manufacturer: syz [ 238.832156][ T5893] usb 5-1: SerialNumber: syz [ 238.874531][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 239.045570][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.069431][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.082257][ T30] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 239.082564][ T5864] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 239.092224][ T30] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 239.100559][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.103748][ T5864] usb 3-1: config 0 descriptor?? [ 239.118439][ T30] usb 1-1: Manufacturer: syz [ 239.583140][ T30] usb 1-1: config 0 descriptor?? [ 239.688391][ T5893] rtl8150 5-1:1.0: couldn't reset the device [ 239.695856][ T5893] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 239.713973][ T5893] usb 5-1: USB disconnect, device number 10 [ 239.866043][ T5864] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 240.072174][ T5864] [drm:udl_init] *ERROR* Selecting channel failed [ 240.101123][ T5864] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 240.121626][ T5864] [drm] Initialized udl on minor 2 [ 240.148761][ T5864] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 240.166577][ T5864] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 240.181030][ T5871] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 240.199995][ T5864] usb 3-1: USB disconnect, device number 15 [ 240.206500][ T5871] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 240.509387][ T7620] hfs: can't find a HFS filesystem on dev nullb0 [ 240.958389][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 240.978740][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 240.989278][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 241.001918][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 241.011217][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 241.678463][ T29] audit: type=1400 audit(1774210741.574:426): avc: denied { append } for pid=7645 comm="syz.2.409" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 241.939479][ T30] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 242.097536][ T30] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 242.108300][ T30] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 242.117004][ T30] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 242.125534][ T30] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 242.145177][ T30] usb 1-1: USB disconnect, device number 4 [ 242.210599][ T29] audit: type=1400 audit(1774210742.104:427): avc: denied { ioctl } for pid=7655 comm="syz.2.412" path="socket:[15482]" dev="sockfs" ino=15482 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 242.870716][ T7677] SELinux: policydb string length 4980744 does not match expected length 8 [ 242.881902][ T7677] SELinux: failed to load policy [ 242.898748][ T29] audit: type=1400 audit(1774210742.794:428): avc: denied { getopt } for pid=7675 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 243.438249][ T7694] netlink: 'syz.4.425': attribute type 4 has an invalid length. [ 243.481106][ T7694] netlink: 'syz.4.425': attribute type 4 has an invalid length. [ 243.602086][ T7691] block device autoloading is deprecated and will be removed. [ 243.703330][ T5878] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 243.864661][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 243.871917][ T5878] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 243.886067][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.917528][ T5878] usb 3-1: config 0 has no interface number 0 [ 243.935563][ T5878] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 243.963271][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.991674][ T5878] usb 3-1: Product: syz [ 243.996644][ T5878] usb 3-1: Manufacturer: syz [ 244.001237][ T5878] usb 3-1: SerialNumber: syz [ 244.033966][ T5878] usb 3-1: config 0 descriptor?? [ 244.256649][ T5878] usb 3-1: USB disconnect, device number 16 [ 244.983324][ T5871] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 245.534659][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.556430][ T5871] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 245.567104][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.577049][ T5871] usb 5-1: Product: syz [ 245.581433][ T5871] usb 5-1: Manufacturer: syz [ 245.587493][ T5871] usb 5-1: SerialNumber: syz [ 245.589571][ T7746] netlink: 136 bytes leftover after parsing attributes in process `syz.2.448'. [ 245.597704][ T5871] usb 5-1: config 0 descriptor?? [ 245.601740][ T7746] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 245.609903][ T5871] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 246.048604][ T7769] netlink: 'syz.2.451': attribute type 4 has an invalid length. [ 246.087324][ T5818] Bluetooth: hci3: Malformed LE Event: 0x1b [ 246.123990][ T7774] netlink: 'syz.2.451': attribute type 4 has an invalid length. [ 246.213578][ T29] audit: type=1400 audit(1774210746.104:429): avc: denied { execute } for pid=7693 comm="syz.1.429" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 246.664284][ T7791] capability: warning: `syz.0.463' uses deprecated v2 capabilities in a way that may be insecure [ 246.943208][ T29] audit: type=1400 audit(1774210746.814:430): avc: denied { read } for pid=7796 comm="syz.0.466" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 246.976413][ T29] audit: type=1400 audit(1774210746.814:431): avc: denied { open } for pid=7796 comm="syz.0.466" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 247.007383][ T29] audit: type=1400 audit(1774210746.824:432): avc: denied { ioctl } for pid=7796 comm="syz.0.466" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 247.329433][ T7812] Bluetooth: MGMT ver 1.23 [ 247.488665][ T29] audit: type=1400 audit(1774210747.384:433): avc: denied { connect } for pid=7823 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.273103][ T5871] usb 5-1: USB disconnect, device number 11 [ 248.374142][ T5893] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 248.384785][ T7839] ISOFS: Unable to identify CD-ROM format. [ 248.404298][ T7850] netlink: 'syz.0.483': attribute type 10 has an invalid length. [ 248.418379][ T7850] team0: Device ipvlan1 failed to register rx_handler [ 248.422758][ T5893] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.685226][ T5871] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 248.853290][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 248.874639][ T5871] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 248.882738][ T5871] usb 5-1: config 0 has no interface number 0 [ 248.891438][ T5871] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 248.909676][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.924477][ T5871] usb 5-1: Product: syz [ 248.928694][ T5871] usb 5-1: Manufacturer: syz [ 248.934553][ T5871] usb 5-1: SerialNumber: syz [ 248.950418][ T5871] usb 5-1: config 0 descriptor?? [ 248.965485][ T5871] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 248.981451][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.493'. [ 249.189019][ T5871] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 249.234596][ T29] audit: type=1400 audit(1774210749.134:434): avc: denied { bind } for pid=7867 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 249.256689][ T5871] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 249.274418][ T29] audit: type=1400 audit(1774210749.164:435): avc: denied { connect } for pid=7867 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 249.325246][ T29] audit: type=1400 audit(1774210749.224:436): avc: denied { accept } for pid=7867 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 249.609504][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 249.609839][ T5878] usb 5-1: USB disconnect, device number 12 [ 249.816327][ T5878] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 249.838375][ T5878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 249.858506][ T5878] quatech2 5-1:0.51: device disconnected [ 250.146186][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.152569][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.187685][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 250.197428][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 250.206797][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 250.216217][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 250.225426][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 250.293944][ T5871] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 250.363897][ T5878] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 250.471222][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.471249][ T5871] usb 1-1: config 0 has no interface number 0 [ 250.473093][ T5871] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 250.473118][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.473137][ T5871] usb 1-1: Product: syz [ 250.473151][ T5871] usb 1-1: Manufacturer: syz [ 250.473165][ T5871] usb 1-1: SerialNumber: syz [ 250.487320][ T5871] usb 1-1: config 0 descriptor?? [ 250.514002][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 250.545932][ T5878] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 250.552310][ T5878] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 250.552335][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.552353][ T5878] usb 2-1: Product: syz [ 250.552367][ T5878] usb 2-1: Manufacturer: syz [ 250.552380][ T5878] usb 2-1: SerialNumber: syz [ 250.555102][ T5878] usb 2-1: config 0 descriptor?? [ 250.559571][ T5878] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 250.902553][ T5871] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 250.904831][ T5871] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 250.904857][ T5871] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 250.911501][ T5878] gspca_zc3xx: reg_w_i err -71 [ 251.098617][ T7916] mmap: syz.3.510 (7916) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 251.493874][ T5878] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 251.575501][ T5878] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 251.620809][ T5878] usb 2-1: USB disconnect, device number 10 [ 251.976140][ T7924] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 252.007406][ T7924] netlink: 96 bytes leftover after parsing attributes in process `syz.1.518'. [ 252.194881][ T7924] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 252.243140][ T7924] netlink: 'syz.1.518': attribute type 8 has an invalid length. [ 252.251673][ T7924] netlink: 582 bytes leftover after parsing attributes in process `syz.1.518'. [ 252.526040][ T7931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.344221][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 253.373990][ T7944] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.400871][ T29] audit: type=1400 audit(1774210753.284:437): avc: denied { read } for pid=7945 comm="syz.4.528" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.523914][ T29] audit: type=1400 audit(1774210753.324:438): avc: denied { open } for pid=7945 comm="syz.4.528" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.614019][ T29] audit: type=1400 audit(1774210753.334:439): avc: denied { map } for pid=7945 comm="syz.4.528" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 254.131559][ T29] audit: type=1400 audit(1774210753.334:440): avc: denied { bind } for pid=7945 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.982326][ T7961] syzkaller1: entered promiscuous mode [ 255.025982][ T7961] syzkaller1: entered allmulticast mode [ 255.304229][ T30] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 255.475404][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.487542][ T30] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 255.575842][ T30] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.614284][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.634494][ T30] usb 3-1: Product: syz [ 255.638685][ T30] usb 3-1: Manufacturer: syz [ 255.871967][ T30] usb 3-1: SerialNumber: syz [ 255.893092][ T7973] netlink: 'syz.1.538': attribute type 4 has an invalid length. [ 255.955905][ T7974] netlink: 'syz.1.538': attribute type 4 has an invalid length. [ 256.120607][ T30] usb 3-1: USB disconnect, device number 17 [ 258.058423][ T29] audit: type=1400 audit(1774210757.954:441): avc: denied { name_bind } for pid=7995 comm="syz.0.547" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 261.226466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 264.116234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 266.440599][ C0] sched: DL replenish lagged too much [ 332.349984][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.367737][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.102551][ T5871] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 349.082089][ T5871] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 351.589569][ T5177] udevd[5177]: worker [6282] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 373.245522][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.553199][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 376.560161][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8017/3:b..l [ 376.568442][ C1] rcu: (detected by 1, t=10502 jiffies, g=20025, q=748245 ncpus=2) [ 376.576395][ C1] task:syz.3.546 state:R running task stack:26952 pid:8017 tgid:7999 ppid:5804 task_flags:0x400140 flags:0x00080002 [ 376.590722][ C1] Call Trace: [ 376.593998][ C1] [ 376.596925][ C1] __schedule+0xfee/0x6120 [ 376.601340][ C1] ? enqueue_to_backlog+0x498/0x1010 [ 376.606621][ C1] ? netif_rx_internal+0x109/0x630 [ 376.611708][ C1] ? __pfx___schedule+0x10/0x10 [ 376.616537][ C1] ? trace_netif_rx_exit+0x6d/0x240 [ 376.621733][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 376.627107][ C1] preempt_schedule_common+0x42/0xc0 [ 376.632392][ C1] preempt_schedule_thunk+0x16/0x30 [ 376.637591][ C1] ? __dev_queue_xmit+0x8a0/0x4800 [ 376.642693][ C1] __local_bh_enable_ip+0xff/0x120 [ 376.647801][ C1] ? __dev_queue_xmit+0x8a0/0x4800 [ 376.652924][ C1] __dev_queue_xmit+0x8b5/0x4800 [ 376.657861][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 376.663242][ C1] ? __lock_acquire+0x4a5/0x2630 [ 376.668191][ C1] ip_finish_output2+0xf4a/0x24d0 [ 376.673215][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 376.678688][ C1] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 376.684771][ C1] __ip_finish_output.part.0+0x444/0x6f0 [ 376.690404][ C1] ip_output+0x39b/0xc10 [ 376.694637][ C1] ? __pfx_ip_output+0x10/0x10 [ 376.699408][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 376.704776][ C1] ? __pfx_ip_output+0x10/0x10 [ 376.709525][ C1] ip_local_out+0x193/0x1f0 [ 376.714018][ C1] __ip_queue_xmit+0x885/0x1e90 [ 376.718873][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 376.723983][ C1] __tcp_transmit_skb+0x3347/0x4b50 [ 376.729185][ C1] ? __lock_acquire+0x4a5/0x2630 [ 376.734116][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 376.739655][ C1] ? find_held_lock+0x2b/0x80 [ 376.744349][ C1] tcp_connect+0x2956/0x5630 [ 376.748951][ C1] ? __pfx_tcp_connect+0x10/0x10 [ 376.753911][ C1] ? get_random_u16+0x583/0x7d0 [ 376.758749][ C1] ? tcp_fastopen_cookie_check+0x41a/0x450 [ 376.764562][ C1] tcp_v4_connect+0x1603/0x1b40 [ 376.769412][ C1] ? __pfx_tcp_v4_connect+0x10/0x10 [ 376.774605][ C1] __inet_stream_connect+0x208/0xfa0 [ 376.779898][ C1] ? __pfx___inet_stream_connect+0x10/0x10 [ 376.785704][ C1] tcp_sendmsg_fastopen+0x3ed/0x750 [ 376.790911][ C1] tcp_sendmsg_locked+0x2791/0x45e0 [ 376.796104][ C1] ? __lock_acquire+0x4a5/0x2630 [ 376.801024][ C1] ? __lock_acquire+0x4a5/0x2630 [ 376.805955][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 376.811504][ C1] ? do_raw_spin_lock+0x128/0x260 [ 376.816525][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.821895][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 376.827186][ C1] tcp_sendmsg+0x2e/0x50 [ 376.831433][ C1] ? __pfx_tcp_sendmsg+0x10/0x10 [ 376.836366][ C1] inet_sendmsg+0xb9/0x140 [ 376.840769][ C1] __sys_sendto+0x446/0x4b0 [ 376.845257][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 376.850275][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 376.855308][ C1] ? xfd_validate_state+0x129/0x190 [ 376.860491][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 376.865239][ C1] ? do_syscall_64+0x95/0xf80 [ 376.869912][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 376.875105][ C1] do_syscall_64+0x106/0xf80 [ 376.879678][ C1] ? clear_bhb_loop+0x40/0x90 [ 376.884341][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.890225][ C1] RIP: 0033:0x7f8b89d9c799 [ 376.894627][ C1] RSP: 002b:00007f8b8ac41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 376.903019][ C1] RAX: ffffffffffffffda RBX: 00007f8b8a016180 RCX: 00007f8b89d9c799 [ 376.910972][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 376.918930][ C1] RBP: 00007f8b89e32c99 R08: 0000200000000040 R09: 0000000000000010 [ 376.926884][ C1] R10: 0000000028040041 R11: 0000000000000246 R12: 0000000000000000 [ 376.934843][ C1] R13: 00007f8b8a016218 R14: 00007f8b8a016180 R15: 00007ffc9fb32008 [ 376.942803][ C1] [ 376.945804][ C1] rcu: rcu_preempt kthread starved for 731 jiffies! g20025 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 376.956810][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 376.966756][ C1] rcu: RCU grace-period kthread stack dump: [ 376.972627][ C1] task:rcu_preempt state:R running task stack:27832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 376.986117][ C1] Call Trace: [ 376.989387][ C1] [ 376.992315][ C1] __schedule+0xfee/0x6120 [ 376.996732][ C1] ? __lock_acquire+0x4a5/0x2630 [ 377.001664][ C1] ? __pfx___schedule+0x10/0x10 [ 377.006497][ C1] ? find_held_lock+0x2b/0x80 [ 377.011169][ C1] ? schedule+0x2bf/0x390 [ 377.015492][ C1] schedule+0xdd/0x390 [ 377.019542][ C1] schedule_timeout+0x127/0x280 [ 377.024373][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 377.029735][ C1] ? __pfx_process_timeout+0x10/0x10 [ 377.035016][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 377.040802][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 377.046248][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 377.051014][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 377.056298][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 377.061222][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 377.066407][ C1] ? rcu_is_watching+0x12/0xc0 [ 377.071164][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 377.076965][ C1] rcu_gp_kthread+0x179/0x230 [ 377.081628][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.086815][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 377.092618][ C1] ? __kthread_parkme+0x18c/0x230 [ 377.097644][ C1] ? kthread+0x13a/0x450 [ 377.101872][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.107056][ C1] kthread+0x370/0x450 [ 377.111116][ C1] ? __pfx_kthread+0x10/0x10 [ 377.115724][ C1] ret_from_fork+0x754/0xd80 [ 377.120296][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 377.125393][ C1] ? __switch_to+0x7b4/0x1120 [ 377.130065][ C1] ? __pfx_kthread+0x10/0x10 [ 377.134643][ C1] ret_from_fork_asm+0x1a/0x30 [ 377.139406][ C1] [ 377.142411][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 377.148713][ C1] Sending NMI from CPU 1 to CPUs 0: [ 377.153900][ C0] NMI backtrace for cpu 0 [ 377.153913][ C0] CPU: 0 UID: 0 PID: 8007 Comm: syz.2.550 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.153933][ C0] Tainted: [L]=SOFTLOCKUP [ 377.153937][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.153945][ C0] RIP: 0010:unwind_next_frame+0x11da/0x1ea0 [ 377.153966][ C0] Code: ff e9 96 f1 ff ff 80 3d c4 da 09 0f 00 0f 85 85 f1 ff ff e9 a0 e0 68 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 <80> 3c 02 00 0f 85 02 09 00 00 48 89 c8 4d 8b 7d 38 48 ba 00 00 00 [ 377.153978][ C0] RSP: 0018:ffffc90000007158 EFLAGS: 00000a02 [ 377.153990][ C0] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffffff9208e7a2 [ 377.154000][ C0] RDX: 1ffff92000000e40 RSI: 0000000000000001 RDI: ffffffff91520dc8 [ 377.154008][ C0] RBP: ffffc90000007210 R08: ffffffff9208e7a6 R09: 0000000000000007 [ 377.154017][ C0] R10: 0000000000000200 R11: 0000000000085b8a R12: ffffc90000007218 [ 377.154026][ C0] R13: ffffc900000071c8 R14: 0000000000000005 R15: 0000000000000000 [ 377.154034][ C0] FS: 0000000000000000(0000) GS:ffff88812433f000(0000) knlGS:0000000000000000 [ 377.154048][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.154057][ C0] CR2: 0000200000404030 CR3: 000000000e598000 CR4: 00000000003526f0 [ 377.154066][ C0] Call Trace: [ 377.154071][ C0] [ 377.154075][ C0] ? consume_skb+0xd1/0x110 [ 377.154095][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 377.154113][ C0] arch_stack_walk+0x94/0xf0 [ 377.154130][ C0] ? consume_skb+0xd1/0x110 [ 377.154148][ C0] ? kfree_skbmem+0x19a/0x210 [ 377.154160][ C0] stack_trace_save+0x8e/0xc0 [ 377.154176][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 377.154191][ C0] ? kasan_save_track+0x14/0x30 [ 377.154211][ C0] ? __lock_acquire+0x4a5/0x2630 [ 377.154224][ C0] ? nf_hook_slow+0xbf/0x220 [ 377.154239][ C0] ? nf_hook.constprop.0+0x2a6/0x750 [ 377.154254][ C0] kasan_save_stack+0x30/0x50 [ 377.154271][ C0] ? kasan_save_stack+0x30/0x50 [ 377.154288][ C0] ? kasan_save_track+0x14/0x30 [ 377.154305][ C0] ? kasan_save_free_info+0x3b/0x70 [ 377.154320][ C0] ? __kasan_slab_free+0x5f/0x80 [ 377.154338][ C0] ? kmem_cache_free+0x124/0x6a0 [ 377.154353][ C0] ? kfree_skbmem+0x19a/0x210 [ 377.154364][ C0] ? consume_skb+0xd1/0x110 [ 377.154394][ C0] kasan_save_track+0x14/0x30 [ 377.154417][ C0] kasan_save_free_info+0x3b/0x70 [ 377.154432][ C0] __kasan_slab_free+0x5f/0x80 [ 377.154451][ C0] kmem_cache_free+0x124/0x6a0 [ 377.154467][ C0] ? skb_release_data+0x7a0/0x9d0 [ 377.154484][ C0] kfree_skbmem+0x19a/0x210 [ 377.154496][ C0] consume_skb+0xd1/0x110 [ 377.154513][ C0] nft_synproxy_do_eval+0xa7b/0xd50 [ 377.154527][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 377.154543][ C0] ? __lock_acquire+0x4a5/0x2630 [ 377.154557][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 377.154570][ C0] nft_do_chain+0x2e8/0x1930 [ 377.154586][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 377.154598][ C0] ? mark_held_locks+0x40/0x70 [ 377.154610][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 377.154629][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 377.154645][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 377.154669][ C0] nft_do_chain_inet+0xee/0x340 [ 377.154687][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 377.154706][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 377.154719][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 377.154737][ C0] nf_hook_slow+0xbf/0x220 [ 377.154754][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 377.154769][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 377.154785][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 377.154799][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 377.154814][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 377.154831][ C0] ? ip_rcv_finish_core+0x80a/0x2220 [ 377.154847][ C0] ip_local_deliver+0x163/0x1f0 [ 377.154861][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 377.154876][ C0] ip_rcv+0x33a/0x3c0 [ 377.154890][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 377.154904][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 377.154919][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 377.154934][ C0] ? lock_acquire+0x1cf/0x380 [ 377.154947][ C0] ? process_backlog+0x32a/0x1580 [ 377.154962][ C0] ? process_backlog+0x32a/0x1580 [ 377.154975][ C0] __netif_receive_skb+0x1f/0x120 [ 377.154989][ C0] process_backlog+0x37a/0x1580 [ 377.155005][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 377.155020][ C0] net_rx_action+0xa40/0xf20 [ 377.155038][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 377.155055][ C0] ? tmigr_handle_remote+0x132/0x380 [ 377.155075][ C0] ? run_timer_base+0x121/0x190 [ 377.155093][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 377.155112][ C0] handle_softirqs+0x1eb/0x9e0 [ 377.155129][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 377.155147][ C0] __irq_exit_rcu+0xef/0x150 [ 377.155162][ C0] irq_exit_rcu+0x9/0x30 [ 377.155177][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 377.155194][ C0] [ 377.155198][ C0] [ 377.155203][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.155218][ C0] RIP: 0010:smp_call_function_many_cond+0x5a2/0x1500 [ 377.155237][ C0] Code: e4 63 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 91 0d 00 00 8b 45 08 31 ff 83 e0 01 41 89 c6 89 c6 e8 6e 5e 0c 00 <45> 85 f6 75 d0 e8 b4 63 0c 00 e8 af 63 0c 00 83 c3 01 bf 07 00 00 [ 377.155249][ C0] RSP: 0018:ffffc90003537288 EFLAGS: 00000293 [ 377.155259][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fc7c42 [ 377.155267][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880203d0000 [ 377.155275][ C0] RBP: ffff8880b8540da0 R08: 0000000000000005 R09: 0000000000000000 [ 377.155283][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 377.155291][ C0] R13: ffffed10170a81b5 R14: 0000000000000001 R15: ffff8880b843c440 [ 377.155303][ C0] ? smp_call_function_many_cond+0x5a2/0x1500 [ 377.155323][ C0] ? smp_call_function_many_cond+0x5a2/0x1500 [ 377.155341][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 377.155358][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 377.155381][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 377.155394][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 377.155418][ C0] flush_tlb_mm_range+0x45f/0x1710 [ 377.155433][ C0] ? pte_offset_map_lock+0x174/0x320 [ 377.155446][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 377.155462][ C0] flush_tlb_batched_pending+0x93/0xe0 [ 377.155478][ C0] unmap_page_range+0xb9f/0x4840 [ 377.155500][ C0] ? __lock_acquire+0x4a5/0x2630 [ 377.155513][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 377.155525][ C0] ? rcu_is_watching+0x12/0xc0 [ 377.155544][ C0] ? uprobe_munmap+0x9e/0x700 [ 377.155564][ C0] unmap_single_vma+0x153/0x240 [ 377.155579][ C0] unmap_vmas+0x295/0x590 [ 377.155593][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 377.155607][ C0] ? mas_next_slot+0x1003/0x18b0 [ 377.155631][ C0] exit_mmap+0x1ef/0xa30 [ 377.155646][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 377.155659][ C0] ? trace_contention_end+0x140/0x180 [ 377.155675][ C0] ? uprobe_clear_state+0x5f/0x360 [ 377.155692][ C0] ? uprobe_clear_state+0x5f/0x360 [ 377.155712][ C0] ? __lock_acquire+0x4a5/0x2630 [ 377.155729][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 377.155745][ C0] __mmput+0x12a/0x410 [ 377.155761][ C0] mmput+0x67/0x80 [ 377.155776][ C0] do_exit+0x819/0x2b60 [ 377.155795][ C0] ? __pfx_do_exit+0x10/0x10 [ 377.155813][ C0] ? do_raw_spin_lock+0x128/0x260 [ 377.155827][ C0] ? find_held_lock+0x2b/0x80 [ 377.155843][ C0] ? get_signal+0x7e0/0x21e0 [ 377.155860][ C0] do_group_exit+0xd5/0x2a0 [ 377.155879][ C0] get_signal+0x1ec7/0x21e0 [ 377.155896][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 377.155911][ C0] ? __pfx_get_signal+0x10/0x10 [ 377.155925][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 377.155944][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 377.155965][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 377.155983][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 377.156003][ C0] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 377.156022][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 377.156036][ C0] do_syscall_64+0x67c/0xf80 [ 377.156052][ C0] ? clear_bhb_loop+0x40/0x90 [ 377.156067][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.156080][ C0] RIP: 0033:0x7f80cdf9c799 [ 377.156090][ C0] Code: Unable to access opcode bytes at 0x7f80cdf9c76f. [ 377.156096][ C0] RSP: 002b:00007f80cc1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 377.156108][ C0] RAX: 0000000000010106 RBX: 00007f80ce216090 RCX: 00007f80cdf9c799 [ 377.156117][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 377.156125][ C0] RBP: 00007f80ce032c99 R08: 0000000000000000 R09: 0000000000000000 [ 377.156133][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 377.156141][ C0] R13: 00007f80ce216128 R14: 00007f80ce216090 R15: 00007ffebb7cfe38 [ 377.156155][ C0]