last executing test programs: 11.771313685s ago: executing program 2 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000003f0d2e5bf308000300", @ANYRES32, @ANYBLOB="4800128009000100626f6e640000000038000280040008"], 0x70}, 0x1, 0x0, 0x0, 0x51}, 0x0) 11.521174855s ago: executing program 2 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40001800000900020073797a32000000000900010073797a3000000000080005400000001d0800034000000007540000000c0a01020000000000000000010000020900020073797a320000000028000380240000800400018008000340000000011400050000000100696e6e6572000000040002800900010073797a30"], 0xe0}}, 0x0) 11.485228475s ago: executing program 0 (id=1179): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000048601, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2a2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7f7ffff0000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) close(r5) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000001e00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x26000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100000000000000", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f00000038c0)=""/4118, 0x1016}], 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 11.335170679s ago: executing program 2 (id=1180): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r4, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) ioctl$TIOCSETD(r3, 0x5412, &(0x7f00000000c0)=0xe9) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000007ff61134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)=ANY=[], 0x84}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.352677468s ago: executing program 2 (id=1182): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x2c020400) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff002000001800128008000100767469"], 0x38}}, 0x0) io_uring_enter(r4, 0x7277, 0x0, 0x0, 0x0, 0x0) 9.247262704s ago: executing program 3 (id=1185): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000100000022bf000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001000"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={0x0, 0x0, 0x8000, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a0101000000001f000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xffffd6c0, 0xffffffffffffffff, 0x0, 0x20}, 0x38) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r4, 0x2, &(0x7f0000000380)=[0x0, 0x0]) r5 = socket$pppoe(0x18, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101003) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x80047453, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r6, 0x0) 8.205069255s ago: executing program 3 (id=1189): socket$unix(0x1, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x35, [0x8000, 0xc95a, 0xf, 0x6, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x2, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x7, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0xb, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xb, 0x2bf, 0x6c7, 0x9, 0xfffffffa, 0x3, 0x3, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x423, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000008, 0x5f31, 0x3, 0x4de, 0x2, 0x1, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0x1, 0x8, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x2, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0xfffffffd, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1009, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0xfffffff9, 0xffff, 0x10, 0x2, 0x5, 0x4, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x3, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0xf, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x5, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3461, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) recvmsg(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000980)=""/4074, 0xfea}, {&(0x7f0000000340)=""/7, 0x7}], 0x2}, 0x40) 7.950493897s ago: executing program 3 (id=1192): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) sendmsg$AUDIT_SET(r2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b", 0x21, 0x8000, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28, 0x0, {0x300000000000000}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) recvmmsg(r4, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 6.617078689s ago: executing program 3 (id=1195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) close(0x4) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000180)={0xfffffef1, 0x3, {0x0}, {}, 0xcb, 0x8}) syz_open_procfs(r7, &(0x7f0000000200)='environ\x00') (async) syz_open_procfs(r7, &(0x7f0000000200)='environ\x00') sendmmsg$inet6(r6, 0x0, 0x0, 0x0) (async) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x3) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x3) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 6.466933774s ago: executing program 2 (id=1196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='writeback_bdi_register\x00', r3}, 0x18) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x300000, 0x800, 0x0, 0x3}, 0x1c) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6.390239785s ago: executing program 0 (id=1197): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0xef487eb99c90a9ff, 0x22, 0x68, {0x68, 0xb, "37a2bdd8c0c00ecc8f9fd354da6c0da59c7f54431151eb0600393a4713dd4ba8d3ad63ac88b4bff17a2e2f83f3ccec25ea06c3f2d1304c331c538426347e0229f6f7fdcf965090520e8b3ca12770b39c8ae19cc8f764150015e03d00de810f4290187c2593fb"}}, &(0x7f00000001c0)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "0c18c217bfe69ffa851ea4be765bfabccfae1bf5a46ef6a8d5d4a8dc4c8b350354ed77161e17d5e5000fa8f714c32a366cd37ae38b6949c987f563956da07e2df70d945dc11838014253540aa09d65e4424dfe35aeb13f491f5cd2e0c51bbb8f61f6f40997f7ceb973fbf2e35ef9595e62b3147a8e23fbbcc68be3ce0a567b11256f45f7e6476b7380f0405f9f67b85cb1f9355381eacf56b581d6d5"}}, &(0x7f0000000040)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x8, 0x2, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x0, 0x3, 0x9, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x71, "cbdd8d8efe363e7aa1edb71eb2de1af1"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x99, 0x9, 0x7, "9aaadf51", 'E\\F4'}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x2, 0x6, 0x81, 0x1, 0x8}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x20, 0x3a, 0x7a, "7ebe778aa75af563ea050271bc390a99d654958a31f446273dbb38bc665a4c7fe09e3841e42764dda367af69ab0cd95b86c81cd1a437aa8334bcbeb0a400bd4eeb1edeffbeab20c7d02fb2fca6d5b0992bd6efd6fcf122ec24c88e73bc9631a793d9be3a913ac72f807c6de7acd02d8e76f810bdb2da3a77f07c"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x20, 0x10, [0x77f0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xa424}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000500)={0x40, 0xb, 0x2, "92ed"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000580)={0x40, 0x13, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "1fea"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xfffb}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x6}}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000800)={0x5000000b}) syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f0000000100)={0x0, 0x0, 0x40, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048881) 6.091022439s ago: executing program 4 (id=1199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000040010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b40000000003800048034000180090001007866726d000000002400028008000140000000090500030000000000080002400000000608000440000000000900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 5.901325753s ago: executing program 4 (id=1200): socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) syz_usb_connect(0x0, 0x4f, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x12, 0x1d, 0x10, "de0c2dea1061a1db869ed5527d4127f9ba6226d3e30e89d8d3d3f2889bc1248c7210eb14d2e4d7e5d7f957fdcdb8a7cd2a8d24cee5c0043b1eae0b18bb5a9c65", "f2003cda37db33c12515eba545bbdb3217940e8e827a2a04871b510a7592b2906064586f333178a7fd36d37942a574aa00000000000b752ffb0eec77e300", "8f5a9a0103626e050a1f00000000000000edeeb78273ffffff00", [0x3, 0xad]}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000006001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 5.139007601s ago: executing program 3 (id=1201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x2000000, &(0x7f00000002c0)="f0ab970cc10eb01df442f9", 0xb, &(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000580)="936b4a3d267bfcc0c16aa3978c5dc6f72f2ee58f3e3200694151bbff6439af34b841e9d2c2ff7f297fc823624a0c4d8e4e49b41f00738cfecac41059f9c56e77b2b469e1dc638b5d34371fd426fd7043b95f300dc4a7309d29e9e97d850d2c9de2f5037a5bf3abd1e12fbfcf5acdcde6870827375b908efba64bb4bdc349108a173b0ac5961b2bfea3adfa679a5e587eaca04bc4c3ebfb55d7321f3fd6d00cfdf425b7e81c15ebaa51b2f56271d84e8b59868902d2cf96afdb677022682081ba21acdd4b2d5894a28be64fea225a4b08ecb654f31ad66f5a85dda4201175fb7b0a142c9c") prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="557803fa85aec1664d890b13e343762fc2d887220dcff30f"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.941988526s ago: executing program 2 (id=1202): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000004180)={0x8, 0x20000000}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f0000002200)=0x2, 0x5, 0x0, 0x0, &(0x7f0000002240)=0x3, 0xab02000d) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 4.212368166s ago: executing program 1 (id=1204): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000fd000006040000000000f93132", 0x39}], 0x1) 3.786996522s ago: executing program 1 (id=1205): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(0x0, 0x2) listen(0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, 0x0, 0x80800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, 0x0, 0x40080c7) dup(r4) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 2.307921085s ago: executing program 1 (id=1206): syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0xc2010) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0x1, 0x1000}], 0x1, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) 2.259435966s ago: executing program 4 (id=1207): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x2}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0xa000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0245720, &(0x7f0000000380)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x18, r5, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) socket$inet6(0xa, 0x80002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20048010) 2.226490515s ago: executing program 0 (id=1208): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) fanotify_init(0x20, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = io_uring_setup(0xcce, &(0x7f0000000680)={0x0, 0x24f6, 0x2, 0x2, 0x36f}) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x2, 0x1, 0xfff7fffd, 0x0, r4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0x2}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r6 = dup(r1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c00ff970000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r6, &(0x7f0000000080)=""/139, 0xfdef) 2.159167137s ago: executing program 1 (id=1209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$IOMMU_VFIO_IOAS$CLEAR(r2, 0x3b88, &(0x7f0000000080)={0xc}) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffb, 0x8b01) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000000)={0x4, 0x0, 0x2022, 0x9, 0x2, {0xfff, 0x3}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8003) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.991966929s ago: executing program 3 (id=1210): landlock_create_ruleset(&(0x7f0000000000)={0x8b28, 0x6}, 0x18, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000380)="1a00000002800000", 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r5, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0xe, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@dontfrag={{0x14}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x87, 0xe, 0x2, 0xe1, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x14}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="40e205a19ac559d4470731e1c550396f7acca3be09d46a34dee6c78fd7166148b428952f87a187fd18eab889f883efe83aa4307a55d34deac4c2c2af7abc264f2c54", 0x42}], 0x1, &(0x7f0000000840)=[@hopopts_2292={{0x20, 0x29, 0x36, {0xff, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xffff}}, @hopopts={{0x30, 0x29, 0x36, {0x2c, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x26}}, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x68}}], 0x3, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) 1.142203203s ago: executing program 4 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000088a500100002"], 0x20}, 0x1, 0x0, 0xe000000, 0x48050}, 0x0) 1.067141789s ago: executing program 0 (id=1212): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a0000000800fffffff90004040000000800000002000004f7ffffff0400000001000000000000000300000001000000000000000030615f5f5f2e2e5f"], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x28) 1.066638994s ago: executing program 4 (id=1213): r0 = socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00000001300"], 0xe0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)={0xd4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0xb0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private1, @in6=@mcast2}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r5], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) 1.004374219s ago: executing program 1 (id=1214): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume_offset', 0x0, 0x88) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x8}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x4, 0x10, 0x0, @vifc_lcl_ifindex=r2, @remote}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 960.840697ms ago: executing program 0 (id=1215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0xfffd, 0x4000d}, 0x20000000) 803.05561ms ago: executing program 0 (id=1216): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x40, 0x1, 0x4, 0x8, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xfa, 0x29, 0x0, @multicast1, @remote, {[@end]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000740)=0x5, 0x4) prlimit64(0x0, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) timer_gettime(r3, &(0x7f0000000140)) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c90000000000000000300000004050000a124ec10064b6f2f00930000fb718aef932f3889d1edda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab24834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d700000010"], 0x10b8}, 0xff00) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6.167894ms ago: executing program 4 (id=1217): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 0s ago: executing program 1 (id=1218): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): 8505] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 250.811090][ T8509] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 250.818129][ T8509] VFS: Can't find a romfs filesystem on dev nullb0. [ 250.818129][ T8509] [ 250.879781][ T8510] bridge6: entered promiscuous mode [ 251.111567][ T8510] bridge6: entered allmulticast mode [ 251.112817][ T30] audit: type=1400 audit(1761149321.701:453): avc: denied { write } for pid=8512 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 251.619712][ T8529] netlink: 'syz.0.714': attribute type 4 has an invalid length. [ 251.628975][ T8529] netlink: 'syz.0.714': attribute type 4 has an invalid length. [ 251.697858][ T8532] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 251.897801][ T5897] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 252.190395][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 252.200076][ T5897] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 252.209829][ T5897] usb 2-1: config 0 has no interface number 0 [ 252.216489][ T5897] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 252.231360][ T5897] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 252.305817][ T5897] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 252.334253][ T5897] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 252.822733][ T5897] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 252.833584][ T5897] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.855948][ T5897] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 252.865929][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.866449][ T8544] loop5: detected capacity change from 0 to 7 [ 252.873970][ T5897] usb 2-1: Product: syz [ 252.873987][ T5897] usb 2-1: Manufacturer: syz [ 252.874001][ T5897] usb 2-1: SerialNumber: syz [ 252.880749][ T5897] usb 2-1: config 0 descriptor?? [ 252.894131][ T8540] : entered promiscuous mode [ 252.902418][ T8523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.912705][ T8523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.919938][ T7333] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 252.925727][ T7333] loop5: partition table partially beyond EOD, truncated [ 252.933227][ T7333] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 252.962894][ T8544] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 252.968590][ T8544] loop5: partition table partially beyond EOD, truncated [ 252.985186][ T8544] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 253.340840][ T5897] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 253.349072][ T5897] etas_es58x 2-1:0.219: could not retrieve the product info string [ 253.364588][ T7333] udevd[7333]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 253.455473][ T7333] udevd[7333]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 253.741445][ T5897] usb 2-1: USB disconnect, device number 17 [ 253.752814][ T5897] etas_es58x 2-1:0.219: Disconnecting syz syz [ 254.093272][ T8559] xt_hashlimit: max too large, truncated to 1048576 [ 254.176412][ T8572] netlink: 48 bytes leftover after parsing attributes in process `syz.3.726'. [ 254.205200][ T8572] : entered allmulticast mode [ 255.333258][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.339568][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.111191][ T8595] sp0: Synchronizing with TNC [ 256.774746][ T6047] IPVS: starting estimator thread 0... [ 256.875395][ T8600] IPVS: using max 77 ests per chain, 184800 per kthread [ 256.951966][ T8602] sp0: Found TNC [ 257.079987][ T8590] futex_wake_op: syz.0.724 tries to shift op by 32; fix this program [ 257.263008][ T5841] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 257.659392][ T8595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.729'. [ 259.460549][ T6047] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 259.520318][ T5889] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 259.650248][ T5889] usb 4-1: device descriptor read/64, error -71 [ 260.770359][ T5889] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 260.792450][ T6047] usb 3-1: config 0 has no interfaces? [ 260.815047][ T6047] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.824807][ T6047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.840292][ T6047] usb 3-1: Product: syz [ 260.884387][ T8648] netlink: 68 bytes leftover after parsing attributes in process `syz.1.739'. [ 260.958606][ T6047] usb 3-1: Manufacturer: syz [ 260.958907][ T5889] usb 4-1: device descriptor read/64, error -71 [ 260.964006][ T6047] usb 3-1: SerialNumber: syz [ 260.994864][ T6047] usb 3-1: config 0 descriptor?? [ 261.080558][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 261.169385][ T5889] usb usb4-port1: attempt power cycle [ 261.816633][ T8661] netlink: 'syz.4.744': attribute type 21 has an invalid length. [ 262.000216][ T5889] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 262.410886][ T5889] usb 4-1: device descriptor read/8, error -71 [ 262.600543][ T8670] netlink: 'syz.1.745': attribute type 6 has an invalid length. [ 262.831149][ T8672] loop5: detected capacity change from 0 to 7 [ 263.011423][ T8674] netlink: 'syz.4.747': attribute type 6 has an invalid length. [ 263.135474][ T8672] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 263.153053][ T8672] loop5: partition table partially beyond EOD, truncated [ 263.220046][ T8679] xt_hashlimit: max too large, truncated to 1048576 [ 263.239045][ T8672] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 263.772474][ T8689] netlink: 48 bytes leftover after parsing attributes in process `syz.4.752'. [ 263.843412][ T7333] udevd[7333]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 265.394453][ T30] audit: type=1400 audit(1761149335.981:454): avc: denied { listen } for pid=8682 comm="syz.0.751" lport=51433 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 266.585822][ T30] audit: type=1400 audit(1761149335.981:455): avc: denied { accept } for pid=8682 comm="syz.0.751" lport=51433 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 266.762995][ T8702] SELinux: failed to load policy [ 267.005819][ T30] audit: type=1400 audit(1761149335.981:456): avc: denied { setopt } for pid=8682 comm="syz.0.751" lport=51433 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 267.233977][ T8713] netlink: 64 bytes leftover after parsing attributes in process `syz.1.757'. [ 267.786210][ T8713] bond1: Unable to set up delay as MII monitoring is disabled [ 267.807089][ T8717] input: syz1 as /devices/virtual/input/input16 [ 267.841433][ T8715] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 267.886593][ T8713] bond1 (unregistering): Released all slaves [ 267.893024][ T8715] VFS: Can't find a romfs filesystem on dev nullb0. [ 267.893024][ T8715] [ 267.931101][ T30] audit: type=1400 audit(1761149338.431:457): avc: denied { mounton } for pid=8710 comm="syz.4.758" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.156643][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.760'. [ 268.175924][ T30] audit: type=1400 audit(1761149338.741:458): avc: denied { nlmsg_read } for pid=8719 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.204712][ T8723] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 268.420251][ T5889] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 269.418843][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 269.891300][ T5889] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 269.902517][ T6047] usb 3-1: USB disconnect, device number 14 [ 269.952122][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.021909][ T5889] usb 1-1: config 0 descriptor?? [ 270.028557][ T5889] usb 1-1: can't set config #0, error -71 [ 270.041062][ T5889] usb 1-1: USB disconnect, device number 14 [ 271.840975][ T8751] netlink: 136 bytes leftover after parsing attributes in process `syz.0.766'. [ 271.925748][ T8751] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 271.943750][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.767'. [ 271.952739][ T8754] netlink: 'syz.1.767': attribute type 3 has an invalid length. [ 271.971830][ T8754] netlink: 'syz.1.767': attribute type 7 has an invalid length. [ 272.012804][ T8754] netlink: 'syz.1.767': attribute type 8 has an invalid length. [ 272.045210][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 272.190725][ T8762] netlink: 'syz.4.769': attribute type 6 has an invalid length. [ 272.597568][ T8776] ip6erspan0: entered promiscuous mode [ 272.625677][ T8779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.666440][ T8776] bond1: option arp_validate: invalid value (18446744073709551358) [ 272.677191][ T8776] bond1 (unregistering): Released all slaves [ 272.850253][ T6047] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 272.920545][ T5806] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 273.081143][ T6047] usb 4-1: config 0 has no interfaces? [ 273.138584][ T6047] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.210322][ T5806] usb 2-1: Using ep0 maxpacket: 32 [ 273.230517][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 273.239336][ T8793] netlink: 348 bytes leftover after parsing attributes in process `syz.0.776'. [ 273.248389][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 273.257182][ T8793] netlink: 348 bytes leftover after parsing attributes in process `syz.0.776'. [ 273.266217][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 273.306016][ T6047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.327652][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.368728][ T6047] usb 4-1: Product: syz [ 273.381202][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.486280][ T6047] usb 4-1: Manufacturer: syz [ 273.495096][ T6047] usb 4-1: SerialNumber: syz [ 273.499726][ T5806] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.513823][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.522863][ T6047] usb 4-1: config 0 descriptor?? [ 274.648928][ T8813] syzkaller0: entered promiscuous mode [ 274.677094][ T8813] syzkaller0: entered allmulticast mode [ 274.692536][ T5806] usb 2-1: config 0 descriptor?? [ 274.706659][ T5806] hub 2-1:0.0: USB hub found [ 274.830508][ T8806] tipc: Started in network mode [ 274.835541][ T8806] tipc: Node identity 9ad2e3eb0ea1, cluster identity 4711 [ 274.843231][ T8806] tipc: Enabled bearer , priority 0 [ 275.347558][ T8806] tipc: Resetting bearer [ 275.391388][ T8806] tipc: Disabling bearer [ 275.514577][ T8822] loop6: detected capacity change from 0 to 524288000 [ 275.579028][ T5806] hub 2-1:0.0: 1 port detected [ 275.611658][ T8830] xt_hashlimit: max too large, truncated to 1048576 [ 275.912314][ T8838] netlink: 'syz.0.784': attribute type 6 has an invalid length. [ 276.327211][ T5806] hub 2-1:0.0: activate --> -90 [ 276.475142][ T8850] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 276.493350][ T8850] /dev/nullb0: Can't open blockdev [ 276.909366][ T5889] usb 2-1: USB disconnect, device number 18 [ 276.940520][ T5806] usb 2-1-port1: cannot reset (err = -71) [ 276.947174][ T5806] usb 2-1-port1: attempt power cycle [ 277.121469][ T6047] usb 4-1: USB disconnect, device number 25 [ 278.241738][ T8862] netlink: 136 bytes leftover after parsing attributes in process `syz.3.788'. [ 278.280516][ T8862] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 278.992820][ T8871] netlink: 'syz.4.790': attribute type 6 has an invalid length. [ 279.759467][ T8879] openvswitch: netlink: Message has 383 unknown bytes. [ 279.939873][ T8884] netlink: 'syz.2.795': attribute type 6 has an invalid length. [ 280.001994][ T6047] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 280.287707][ T8886] netlink: 'syz.2.796': attribute type 4 has an invalid length. [ 280.297057][ T8886] netlink: 'syz.2.796': attribute type 4 has an invalid length. [ 280.361879][ T6047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.392829][ T6047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.410422][ T6047] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 280.529914][ T6047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.557475][ T6047] usb 5-1: config 0 descriptor?? [ 280.623417][ T8897] netlink: 'syz.0.801': attribute type 4 has an invalid length. [ 280.665669][ T8897] netlink: 'syz.0.801': attribute type 4 has an invalid length. [ 280.770592][ T5882] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 280.872432][ T5897] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 280.964537][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 281.045785][ T5897] usb 4-1: config 0 has no interfaces? [ 281.052206][ T5882] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 281.071658][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.148350][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.169422][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.187369][ T6047] hid-rmi 0003:0461:4E72.000C: unknown main item tag 0x0 [ 281.193653][ T5897] usb 4-1: Product: syz [ 281.209087][ T5882] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.221381][ T5897] usb 4-1: Manufacturer: syz [ 281.226615][ T6047] hid-rmi 0003:0461:4E72.000C: hidraw0: USB HID v0.06 Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0 [ 281.228087][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.254456][ T5897] usb 4-1: SerialNumber: syz [ 281.276741][ T5897] usb 4-1: config 0 descriptor?? [ 281.593866][ T5882] usb 3-1: Product: syz [ 281.601019][ T6047] usb 5-1: USB disconnect, device number 14 [ 281.609835][ T5882] usb 3-1: Manufacturer: syz [ 281.627220][ T5882] usb 3-1: SerialNumber: syz [ 281.694082][ T8904] fido_id[8904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 281.864397][ T5882] usb 3-1: 0:2 : does not exist [ 281.879297][ T5882] usb 3-1: unit 9 not found! [ 281.957739][ T5882] usb 3-1: USB disconnect, device number 15 [ 282.033953][ T7333] udevd[7333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.080448][ T6047] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 282.235486][ T8922] netlink: 'syz.4.808': attribute type 6 has an invalid length. [ 282.252143][ T6047] usb 2-1: Using ep0 maxpacket: 32 [ 282.414127][ T6047] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 282.422574][ T6047] usb 2-1: config 0 has no interface number 0 [ 282.430891][ T6047] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.449783][ T6047] usb 2-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 282.466221][ T6047] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 282.483910][ T6047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.494013][ T6047] usb 2-1: Product: syz [ 282.499711][ T6047] usb 2-1: Manufacturer: syz [ 282.507358][ T6047] usb 2-1: SerialNumber: syz [ 282.525605][ T6047] usb 2-1: config 0 descriptor?? [ 282.544134][ T6047] redrat3 2-1:0.83: Couldn't find all endpoints [ 283.184509][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.806'. [ 283.396069][ T8935] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 283.413856][ T8935] VFS: Can't find a romfs filesystem on dev nullb0. [ 283.413856][ T8935] [ 283.683813][ T6047] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 283.968669][ T6047] usb 3-1: device descriptor read/64, error -71 [ 284.027764][ T5806] usb 4-1: USB disconnect, device number 26 [ 284.360235][ T6047] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 284.377410][ T30] audit: type=1400 audit(1761149354.951:459): avc: denied { ioctl } for pid=8925 comm="syz.2.811" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.433724][ T30] audit: type=1400 audit(1761149355.021:460): avc: denied { read write } for pid=8945 comm="syz.3.814" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 284.458366][ T30] audit: type=1400 audit(1761149355.021:461): avc: denied { open } for pid=8945 comm="syz.3.814" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 284.495779][ T6047] usb 3-1: device descriptor read/64, error -71 [ 284.496931][ T30] audit: type=1400 audit(1761149355.021:462): avc: denied { ioctl } for pid=8945 comm="syz.3.814" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 284.670718][ T30] audit: type=1400 audit(1761149355.251:463): avc: denied { read } for pid=8947 comm="syz.4.815" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 285.037450][ T30] audit: type=1400 audit(1761149355.261:464): avc: denied { open } for pid=8947 comm="syz.4.815" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 285.046218][ T6047] usb usb3-port1: attempt power cycle [ 285.181855][ T870] usb 2-1: USB disconnect, device number 23 [ 285.187965][ T30] audit: type=1400 audit(1761149355.771:465): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.326828][ T30] audit: type=1400 audit(1761149355.801:466): avc: denied { open } for pid=5833 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.380353][ T30] audit: type=1400 audit(1761149355.801:467): avc: denied { ioctl } for pid=5833 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.475290][ T8956] openvswitch: netlink: Message has 383 unknown bytes. [ 285.513559][ T6047] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 285.766891][ T30] audit: type=1400 audit(1761149355.831:468): avc: denied { prog_load } for pid=8953 comm="syz.1.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 286.088871][ T6047] usb 3-1: device not accepting address 18, error -71 [ 286.374165][ T8964] netlink: 'syz.1.819': attribute type 6 has an invalid length. [ 286.676690][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.821'. [ 286.686139][ T8967] netlink: 52 bytes leftover after parsing attributes in process `syz.4.821'. [ 286.894438][ T8972] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 286.907136][ T8972] VFS: Can't find a romfs filesystem on dev nullb0. [ 286.907136][ T8972] [ 287.180350][ T870] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 287.636999][ T870] usb 1-1: config 0 has no interfaces? [ 287.654651][ T870] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.665060][ T870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.673879][ T870] usb 1-1: Product: syz [ 287.678517][ T870] usb 1-1: Manufacturer: syz [ 287.722968][ T870] usb 1-1: SerialNumber: syz [ 287.783261][ T870] usb 1-1: config 0 descriptor?? [ 287.852047][ T8992] sp0: Synchronizing with TNC [ 288.222134][ T9000] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 288.349737][ T9001] openvswitch: netlink: Message has 383 unknown bytes. [ 289.047066][ T8992] sp0: Found TNC [ 289.192080][ T9009] netlink: 'syz.3.831': attribute type 6 has an invalid length. [ 289.353846][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 289.409108][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 289.409124][ T30] audit: type=1400 audit(1761149359.991:524): avc: denied { sys_module } for pid=8974 comm="syz.0.824" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 289.549580][ T30] audit: type=1400 audit(1761149360.131:525): avc: denied { create } for pid=9012 comm="syz.4.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.880499][ T870] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 290.492356][ T30] audit: type=1400 audit(1761149360.161:526): avc: denied { ioctl } for pid=9012 comm="syz.4.833" path="socket:[21168]" dev="sockfs" ino=21168 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.652376][ T870] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 290.661300][ T870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.698180][ T30] audit: type=1400 audit(1761149361.281:527): avc: denied { read write } for pid=9017 comm="syz.3.835" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 290.840437][ T870] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 290.867439][ T30] audit: type=1400 audit(1761149361.281:528): avc: denied { open } for pid=9017 comm="syz.3.835" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 290.922865][ T870] usb 5-1: config 1 has no interface number 1 [ 290.945761][ T870] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 291.014050][ T870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.048568][ T870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.088810][ T870] usb 5-1: Product: syz [ 291.105202][ T870] usb 5-1: Manufacturer: syz [ 291.121575][ T870] usb 5-1: SerialNumber: syz [ 291.160243][ T30] audit: type=1400 audit(1761149361.431:529): avc: denied { mount } for pid=9017 comm="syz.3.835" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 291.244002][ T9027] netlink: 'syz.2.837': attribute type 6 has an invalid length. [ 291.523711][ T870] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 291.531681][ T9023] bridge3: entered promiscuous mode [ 291.536865][ T9023] bridge3: entered allmulticast mode [ 291.551052][ T870] usb 5-1: MIDIStreaming interface descriptor not found [ 291.649696][ T30] audit: type=1400 audit(1761149361.441:530): avc: denied { create } for pid=9017 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.694189][ T30] audit: type=1400 audit(1761149361.441:531): avc: denied { getopt } for pid=9017 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.715321][ T30] audit: type=1400 audit(1761149362.101:532): avc: denied { create } for pid=9012 comm="syz.4.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 291.736861][ T30] audit: type=1400 audit(1761149362.101:533): avc: denied { write } for pid=9012 comm="syz.4.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 291.905707][ T870] usb 5-1: USB disconnect, device number 15 [ 292.140383][ T9038] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 292.543753][ T5897] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 292.583029][ T5806] usb 1-1: USB disconnect, device number 15 [ 292.710760][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 292.718300][ T9044] netlink: 'syz.3.844': attribute type 6 has an invalid length. [ 292.790489][ T5897] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 292.798607][ T5897] usb 3-1: config 0 has no interface number 0 [ 292.806860][ T5897] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 292.883821][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.060395][ T5897] usb 3-1: Product: syz [ 293.074981][ T5897] usb 3-1: Manufacturer: syz [ 293.079624][ T5897] usb 3-1: SerialNumber: syz [ 293.201299][ T5897] usb 3-1: config 0 descriptor?? [ 294.074207][ T5897] smsc95xx v2.0.0 [ 294.775806][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 294.775843][ T30] audit: type=1400 audit(1761149365.351:542): avc: denied { read } for pid=9063 comm="syz.3.848" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 294.830083][ T30] audit: type=1400 audit(1761149365.351:543): avc: denied { open } for pid=9063 comm="syz.3.848" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 295.056064][ T5897] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 295.121970][ T5897] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 295.140482][ T30] audit: type=1400 audit(1761149365.671:544): avc: denied { ioctl } for pid=9063 comm="syz.3.848" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 295.171610][ T9064] netlink: 68 bytes leftover after parsing attributes in process `syz.3.848'. [ 295.232029][ T30] audit: type=1400 audit(1761149365.671:545): avc: denied { setopt } for pid=9063 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.254959][ T9073] netlink: 48 bytes leftover after parsing attributes in process `syz.1.851'. [ 295.273137][ T30] audit: type=1400 audit(1761149365.761:546): avc: denied { create } for pid=9063 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.310565][ T5897] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 295.337423][ T5897] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 295.345933][ T30] audit: type=1400 audit(1761149365.761:547): avc: denied { write } for pid=9063 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.382522][ T5897] usb 3-1: USB disconnect, device number 20 [ 295.437006][ T30] audit: type=1400 audit(1761149365.761:548): avc: denied { nlmsg_write } for pid=9063 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 296.164281][ T30] audit: type=1400 audit(1761149365.891:549): avc: denied { watch } for pid=9033 comm="syz.2.841" path="/161/file0" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 296.187715][ T30] audit: type=1400 audit(1761149365.891:550): avc: denied { watch_sb watch_reads } for pid=9033 comm="syz.2.841" path="/161/file0" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.693389][ T9081] bridge4: entered promiscuous mode [ 296.698647][ T9081] bridge4: entered allmulticast mode [ 296.767163][ T30] audit: type=1400 audit(1761149367.311:551): avc: denied { create } for pid=9086 comm="syz.0.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 296.871174][ T9085] bridge9: entered promiscuous mode [ 296.876476][ T9085] bridge9: entered allmulticast mode [ 298.105297][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.856'. [ 298.166477][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.856'. [ 298.479644][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 298.516108][ T9111] netlink: 'syz.1.861': attribute type 7 has an invalid length. [ 298.566027][ T9111] netlink: 'syz.1.861': attribute type 8 has an invalid length. [ 298.598435][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 298.663878][ T9111] ip6gretap0: entered promiscuous mode [ 298.694018][ T9111] syz_tun: entered promiscuous mode [ 298.704114][ T9111] ip6gretap0: left promiscuous mode [ 299.038405][ T9111] syz_tun: left promiscuous mode [ 299.415773][ T5897] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 299.589002][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 299.654011][ T5897] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 299.687182][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.781973][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 299.781993][ T30] audit: type=1400 audit(1761149370.291:589): avc: denied { execmem } for pid=9129 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 299.809573][ T5897] usb 5-1: config 0 descriptor?? [ 299.843903][ T9120] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 300.322980][ T30] audit: type=1400 audit(1761149370.291:588): avc: denied { ioctl } for pid=9123 comm="syz.0.865" path="socket:[21359]" dev="sockfs" ino=21359 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.348591][ T30] audit: type=1400 audit(1761149370.421:590): avc: denied { write } for pid=9123 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.390364][ T30] audit: type=1400 audit(1761149370.521:591): avc: denied { read write } for pid=9129 comm="syz.1.866" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 300.418924][ T9132] loop6: detected capacity change from 0 to 524288000 [ 300.621229][ T30] audit: type=1400 audit(1761149370.521:592): avc: denied { open } for pid=9129 comm="syz.1.866" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 300.662612][ T9135] netlink: 'syz.3.867': attribute type 4 has an invalid length. [ 300.680934][ T5897] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 300.714124][ T30] audit: type=1400 audit(1761149370.571:593): avc: denied { read } for pid=9129 comm="syz.1.866" dev="nsfs" ino=4026533166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 300.838964][ T5897] usb 5-1: USB disconnect, device number 16 [ 300.908181][ T30] audit: type=1400 audit(1761149370.581:594): avc: denied { open } for pid=9129 comm="syz.1.866" path="net:[4026533166]" dev="nsfs" ino=4026533166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 301.056538][ T9140] fido_id[9140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 301.107921][ T30] audit: type=1400 audit(1761149370.581:595): avc: denied { create } for pid=9129 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 301.176176][ T30] audit: type=1400 audit(1761149370.591:596): avc: denied { ioctl } for pid=9129 comm="syz.1.866" path="socket:[20447]" dev="sockfs" ino=20447 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 301.274482][ T30] audit: type=1400 audit(1761149370.941:597): avc: denied { ioctl } for pid=9123 comm="syz.0.865" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 302.240291][ T5897] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 303.067550][ T9169] xt_hashlimit: max too large, truncated to 1048576 [ 303.222216][ T9165] futex_wake_op: syz.2.871 tries to shift op by 32; fix this program [ 303.750984][ T9183] openvswitch: netlink: Message has 383 unknown bytes. [ 304.276705][ T9187] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 304.784410][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.812132][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 304.845757][ T5897] usb 2-1: can't read configurations, error -71 [ 305.072585][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 305.072597][ T30] audit: type=1400 audit(1761149375.661:654): avc: denied { read } for pid=9191 comm="syz.1.884" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.110430][ T30] audit: type=1400 audit(1761149375.691:655): avc: denied { open } for pid=9191 comm="syz.1.884" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.586074][ T30] audit: type=1400 audit(1761149375.691:656): avc: denied { ioctl } for pid=9191 comm="syz.1.884" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.620085][ T30] audit: type=1400 audit(1761149375.761:657): avc: denied { create } for pid=9192 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 305.641615][ T9195] netlink: set zone limit has 8 unknown bytes [ 305.740615][ T30] audit: type=1400 audit(1761149375.761:658): avc: denied { bind } for pid=9192 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 305.761265][ T30] audit: type=1400 audit(1761149375.771:659): avc: denied { name_bind } for pid=9192 comm="syz.3.882" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 305.844250][ T5889] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 306.025207][ T30] audit: type=1400 audit(1761149375.771:660): avc: denied { node_bind } for pid=9192 comm="syz.3.882" saddr=2001:: src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 306.043057][ T9198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9198 comm=syz.1.884 [ 306.540261][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 306.550371][ T30] audit: type=1400 audit(1761149376.131:661): avc: denied { append } for pid=9199 comm="syz.0.885" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 306.573250][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.580806][ T30] audit: type=1400 audit(1761149376.131:662): avc: denied { allowed } for pid=9199 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 306.600647][ T30] audit: type=1400 audit(1761149376.141:663): avc: denied { map } for pid=9199 comm="syz.0.885" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.624658][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.654173][ T5889] usb 1-1: unable to get BOS descriptor or descriptor too short [ 306.664750][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.675011][ T5889] usb 1-1: config 0 has no interfaces? [ 306.682933][ T5889] usb 1-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 306.692398][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.710566][ T5889] usb 1-1: Product: syz [ 306.723232][ T5889] usb 1-1: Manufacturer: syz [ 306.736791][ T5889] usb 1-1: SerialNumber: syz [ 306.871176][ T5889] usb 1-1: config 0 descriptor?? [ 307.005617][ T9216] netlink: 'syz.2.888': attribute type 6 has an invalid length. [ 307.851810][ T9218] netlink: 'syz.0.885': attribute type 4 has an invalid length. [ 307.859494][ T9218] netlink: 17 bytes leftover after parsing attributes in process `syz.0.885'. [ 309.692847][ T9220] netlink: 'syz.2.889': attribute type 4 has an invalid length. [ 310.204250][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 310.204266][ T30] audit: type=1400 audit(1761149380.791:680): avc: denied { watch watch_reads } for pid=9230 comm="syz.3.893" path="/169" dev="tmpfs" ino=889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 310.210536][ T5889] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 310.291368][ T30] audit: type=1400 audit(1761149380.791:681): avc: denied { watch watch_reads } for pid=9230 comm="syz.3.893" path="/169" dev="tmpfs" ino=889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 310.315236][ T30] audit: type=1400 audit(1761149380.851:682): avc: denied { read write } for pid=9230 comm="syz.3.893" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 310.339493][ T30] audit: type=1400 audit(1761149380.851:683): avc: denied { open } for pid=9230 comm="syz.3.893" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 310.460254][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 310.468846][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.480322][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.490648][ T5889] usb 3-1: config 0 has no interfaces? [ 310.500869][ T5889] usb 3-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 310.509892][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.518828][ T5889] usb 3-1: Product: syz [ 310.523198][ T5889] usb 3-1: Manufacturer: syz [ 310.527803][ T5889] usb 3-1: SerialNumber: syz [ 310.534445][ T5889] usb 3-1: config 0 descriptor?? [ 310.630566][ T6047] usb 1-1: USB disconnect, device number 16 [ 310.738402][ T30] audit: type=1400 audit(1761149381.321:684): avc: denied { mounton } for pid=9234 comm="syz.1.894" path="/177/file1" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 310.785841][ T9241] netlink: 'syz.0.895': attribute type 4 has an invalid length. [ 310.789092][ T30] audit: type=1400 audit(1761149381.321:685): avc: denied { mount } for pid=9234 comm="syz.1.894" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 310.873993][ T9243] netlink: 'syz.0.895': attribute type 4 has an invalid length. [ 311.061936][ T9245] netlink: 'syz.2.891': attribute type 4 has an invalid length. [ 311.069663][ T9245] netlink: 17 bytes leftover after parsing attributes in process `syz.2.891'. [ 313.132312][ T9247] xt_hashlimit: max too large, truncated to 1048576 [ 313.140559][ T30] audit: type=1400 audit(1761149383.721:686): avc: denied { setopt } for pid=9246 comm="syz.0.897" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.222239][ T9251] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 313.722105][ T30] audit: type=1400 audit(1761149384.301:687): avc: denied { name_bind } for pid=9254 comm="syz.0.899" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 313.746198][ T30] audit: type=1400 audit(1761149384.301:688): avc: denied { node_bind } for pid=9254 comm="syz.0.899" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 314.150134][ T6047] usb 3-1: USB disconnect, device number 21 [ 314.222574][ T30] audit: type=1400 audit(1761149384.801:689): avc: denied { create } for pid=9254 comm="syz.0.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.403085][ T9259] netlink: 5 bytes leftover after parsing attributes in process `syz.0.899'. [ 314.925027][ T9259] 0{X: renamed from gretap0 [ 314.965953][ T9259] 0{X: entered allmulticast mode [ 314.975709][ T9259] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 315.630731][ T5897] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 315.685616][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 315.685632][ T30] audit: type=1400 audit(1761149386.271:701): avc: denied { read write } for pid=9280 comm="syz.1.909" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 315.754010][ T30] audit: type=1400 audit(1761149386.311:702): avc: denied { open } for pid=9280 comm="syz.1.909" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 315.806232][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 315.870438][ T5897] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 315.879625][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.929047][ T30] audit: type=1400 audit(1761149386.331:703): avc: denied { ioctl } for pid=9280 comm="syz.1.909" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 315.962898][ T30] audit: type=1400 audit(1761149386.391:704): avc: denied { ioctl } for pid=9272 comm="syz.2.905" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.990361][ T5806] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 316.025604][ T30] audit: type=1400 audit(1761149386.601:705): avc: denied { read } for pid=9280 comm="syz.1.909" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 316.126199][ T30] audit: type=1400 audit(1761149386.611:706): avc: denied { open } for pid=9280 comm="syz.1.909" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 316.267892][ T5897] usb 3-1: config 0 descriptor?? [ 316.276984][ T9273] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 316.413153][ T5806] usb 4-1: config 0 has no interfaces? [ 316.429457][ T5806] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.443189][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.462091][ T5806] usb 4-1: Product: syz [ 316.469636][ T5806] usb 4-1: Manufacturer: syz [ 316.476469][ T5806] usb 4-1: SerialNumber: syz [ 316.493186][ T5806] usb 4-1: config 0 descriptor?? [ 316.533743][ T30] audit: type=1400 audit(1761149387.111:707): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.557801][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.585806][ T9288] bridge7: entered promiscuous mode [ 316.594584][ T9288] bridge7: entered allmulticast mode [ 316.613032][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.641679][ T30] audit: type=1400 audit(1761149387.111:708): avc: denied { open } for pid=5805 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.642681][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.712796][ T30] audit: type=1400 audit(1761149387.111:709): avc: denied { ioctl } for pid=5805 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.738308][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.774641][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.781063][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.247978][ T30] audit: type=1400 audit(1761149387.161:710): avc: denied { prog_load } for pid=9287 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 317.318782][ T9290] netlink: 64 bytes leftover after parsing attributes in process `syz.0.911'. [ 317.341245][ T9290] bond1: Unable to set up delay as MII monitoring is disabled [ 317.361351][ T9290] bond1 (unregistering): Released all slaves [ 317.386327][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.404150][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.466914][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 317.473026][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 317.513462][ T5897] usb 3-1: USB disconnect, device number 22 [ 318.295986][ T9305] netlink: 'syz.4.914': attribute type 5 has an invalid length. [ 318.304556][ T9305] netlink: 'syz.4.914': attribute type 5 has an invalid length. [ 318.569203][ T9308] netlink: 456 bytes leftover after parsing attributes in process `syz.4.915'. [ 318.636387][ T9316] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 319.116972][ T9324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.418341][ T5806] usb 4-1: USB disconnect, device number 27 [ 320.877911][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 320.887987][ T30] audit: type=1400 audit(1761149391.431:808): avc: denied { mounton } for pid=9327 comm="syz.1.922" path="/184/file1" dev="tmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 321.101150][ T30] audit: type=1400 audit(1761149391.431:809): avc: denied { mount } for pid=9327 comm="syz.1.922" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 321.132568][ T30] audit: type=1400 audit(1761149391.571:810): avc: denied { create } for pid=9336 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.187322][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.927'. [ 321.630560][ T5889] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 321.787936][ T30] audit: type=1400 audit(1761149391.711:811): avc: denied { create } for pid=9336 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.828484][ T30] audit: type=1400 audit(1761149391.791:812): avc: denied { create } for pid=9350 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 322.040232][ T30] audit: type=1400 audit(1761149391.811:813): avc: denied { write } for pid=9336 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.113845][ T5889] usb 1-1: config 0 has no interfaces? [ 322.145054][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.170093][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.236004][ T5889] usb 1-1: Product: syz [ 322.252861][ T5889] usb 1-1: Manufacturer: syz [ 322.255187][ T30] audit: type=1400 audit(1761149391.811:814): avc: denied { read } for pid=9336 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.275705][ T5889] usb 1-1: SerialNumber: syz [ 322.371005][ T5889] usb 1-1: config 0 descriptor?? [ 322.411066][ T30] audit: type=1400 audit(1761149391.841:815): avc: denied { write } for pid=9336 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 322.474420][ T30] audit: type=1400 audit(1761149391.841:816): avc: denied { create } for pid=9336 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.971755][ T30] audit: type=1400 audit(1761149391.911:817): avc: denied { bind } for pid=9350 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.152332][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.933'. [ 324.358262][ T9377] nbd: socks must be embedded in a SOCK_ITEM attr [ 324.446392][ T7333] block nbd64: NBD_DISCONNECT [ 324.584361][ T6047] usb 1-1: USB disconnect, device number 17 [ 324.924002][ T7333] udevd[7333]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 324.937348][ T9387] xt_hashlimit: max too large, truncated to 1048576 [ 325.106069][ T6047] kernel read not supported for file /vcs (pid: 6047 comm: kworker/1:5) [ 325.134365][ T9397] netlink: 'syz.3.940': attribute type 4 has an invalid length. [ 325.482757][ T5897] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 325.497969][ T5841] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 325.548540][ T9408] input: syz1 as /devices/virtual/input/input17 [ 325.666770][ T5897] usb 1-1: config 0 has no interfaces? [ 325.897588][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 325.897604][ T30] audit: type=1400 audit(1761149396.461:917): avc: denied { create } for pid=9410 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 325.929440][ T30] audit: type=1400 audit(1761149396.461:918): avc: denied { bpf } for pid=9410 comm="syz.3.945" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.951636][ T30] audit: type=1400 audit(1761149396.461:919): avc: denied { create } for pid=9410 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 325.975090][ T30] audit: type=1400 audit(1761149396.471:920): avc: denied { create } for pid=9410 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.002284][ T5897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.016738][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.077375][ T5897] usb 1-1: Product: syz [ 326.107645][ T5897] usb 1-1: Manufacturer: syz [ 326.135242][ T5897] usb 1-1: SerialNumber: syz [ 326.301185][ T30] audit: type=1400 audit(1761149396.471:921): avc: denied { prog_load } for pid=9410 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 326.321308][ T5897] usb 1-1: config 0 descriptor?? [ 326.494100][ T30] audit: type=1400 audit(1761149396.501:922): avc: denied { create } for pid=9415 comm="syz.2.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.501920][ T9423] netlink: 'syz.2.949': attribute type 4 has an invalid length. [ 326.515501][ T30] audit: type=1400 audit(1761149396.511:923): avc: denied { getopt } for pid=9415 comm="syz.2.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.563067][ T9426] netlink: 'syz.2.949': attribute type 4 has an invalid length. [ 326.620231][ T30] audit: type=1400 audit(1761149396.511:924): avc: denied { read } for pid=9415 comm="syz.2.946" dev="nsfs" ino=4026533335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 326.663549][ T30] audit: type=1400 audit(1761149396.511:925): avc: denied { open } for pid=9415 comm="syz.2.946" path="net:[4026533335]" dev="nsfs" ino=4026533335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 326.694242][ T9429] netlink: 'syz.3.951': attribute type 4 has an invalid length. [ 326.705374][ T9429] netlink: 'syz.3.951': attribute type 4 has an invalid length. [ 326.718739][ T9432] netlink: 56 bytes leftover after parsing attributes in process `syz.2.952'. [ 326.733206][ T30] audit: type=1400 audit(1761149396.511:926): avc: denied { create } for pid=9415 comm="syz.2.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 328.832224][ T9465] xt_hashlimit: max too large, truncated to 1048576 [ 328.975059][ T9467] netlink: 'syz.2.961': attribute type 4 has an invalid length. [ 329.335138][ T9479] bridge6: entered promiscuous mode [ 329.340465][ T9479] bridge6: entered allmulticast mode [ 329.988611][ T9481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 330.051473][ T9481] netlink: 'syz.3.964': attribute type 7 has an invalid length. [ 330.110335][ T9481] netlink: 'syz.3.964': attribute type 8 has an invalid length. [ 330.118065][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 330.137072][ T9482] bridge4: entered promiscuous mode [ 330.142321][ T9482] bridge4: entered allmulticast mode [ 330.185180][ T9481] ip6gretap0: entered promiscuous mode [ 330.213928][ T9481] syz_tun: entered promiscuous mode [ 330.332756][ T9481] ip6gretap0: left promiscuous mode [ 330.338465][ T9481] syz_tun: left promiscuous mode [ 330.464620][ T5806] usb 1-1: USB disconnect, device number 18 [ 330.565042][ T870] libceph: connect (1)[c::]:6789 error -101 [ 330.616031][ T870] libceph: mon0 (1)[c::]:6789 connect error [ 330.680373][ T6047] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 330.740964][ T9493] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 330.747884][ T9493] VFS: Can't find a romfs filesystem on dev nullb0. [ 330.747884][ T9493] [ 330.862410][ T6047] usb 2-1: config 0 has no interfaces? [ 330.869866][ T6047] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.883984][ T6047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.896396][ T6047] usb 2-1: Product: syz [ 330.900966][ T6047] usb 2-1: Manufacturer: syz [ 330.905631][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 330.905642][ T30] audit: type=1400 audit(1761149401.491:986): avc: denied { append } for pid=9498 comm="syz.2.970" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 330.935439][ T870] libceph: connect (1)[c::]:6789 error -101 [ 330.941531][ T5806] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 330.949557][ T30] audit: type=1400 audit(1761149401.491:987): avc: denied { create } for pid=9498 comm="syz.2.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 330.969735][ T870] libceph: mon0 (1)[c::]:6789 connect error [ 330.972041][ T30] audit: type=1400 audit(1761149401.491:988): avc: denied { bind } for pid=9498 comm="syz.2.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 331.035097][ T6047] usb 2-1: SerialNumber: syz [ 331.043031][ T6047] usb 2-1: config 0 descriptor?? [ 331.088931][ T30] audit: type=1400 audit(1761149401.491:989): avc: denied { connect } for pid=9498 comm="syz.2.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 331.109370][ T30] audit: type=1400 audit(1761149401.641:990): avc: denied { getopt } for pid=9499 comm="syz.4.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.184268][ T5889] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 331.216716][ T5806] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 331.252540][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.260843][ T5806] usb 1-1: Product: syz [ 331.270207][ T5806] usb 1-1: Manufacturer: syz [ 331.275211][ T5806] usb 1-1: SerialNumber: syz [ 331.277158][ T30] audit: type=1400 audit(1761149401.641:991): avc: denied { ioctl } for pid=9499 comm="syz.4.969" path="socket:[22015]" dev="sockfs" ino=22015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.292222][ T5806] usb 1-1: config 0 descriptor?? [ 331.338255][ T5806] hub 1-1:0.0: bad descriptor, ignoring hub [ 331.350246][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 331.355540][ T5806] hub 1-1:0.0: probe with driver hub failed with error -5 [ 331.357188][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 331.370916][ T5806] f81232 1-1:0.0: f81534a converter detected [ 331.372373][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.430419][ T5889] usb 3-1: config 0 has no interfaces? [ 331.477571][ T5889] usb 3-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 331.505445][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.517515][ T30] audit: type=1400 audit(1761149402.111:992): avc: denied { read } for pid=9507 comm="syz.3.971" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 331.552517][ T5889] usb 3-1: Product: syz [ 331.555523][ T6047] libceph: connect (1)[c::]:6789 error -101 [ 331.560593][ T5889] usb 3-1: Manufacturer: syz [ 331.574956][ T5889] usb 3-1: SerialNumber: syz [ 331.823669][ T6047] libceph: mon0 (1)[c::]:6789 connect error [ 331.842993][ T30] audit: type=1400 audit(1761149402.111:993): avc: denied { open } for pid=9507 comm="syz.3.971" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 331.984143][ T5889] usb 3-1: config 0 descriptor?? [ 332.064001][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 332.109753][ T30] audit: type=1400 audit(1761149402.401:994): avc: denied { ioctl } for pid=9507 comm="syz.3.971" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x564b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 332.250356][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 332.344016][ T9] usb 4-1: too many configurations: 200, using maximum allowed: 8 [ 332.357324][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 332.365575][ T9] usb 4-1: can't read configurations, error -61 [ 332.464836][ T9514] netlink: 'syz.2.970': attribute type 4 has an invalid length. [ 332.472616][ T9514] netlink: 17 bytes leftover after parsing attributes in process `syz.2.970'. [ 332.495561][ T9514] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 333.963152][ T6047] libceph: connect (1)[c::]:6789 error -101 [ 333.969942][ T6047] libceph: mon0 (1)[c::]:6789 connect error [ 333.978377][ T9486] ceph: No mds server is up or the cluster is laggy [ 333.991798][ T6047] libceph: connect (1)[c::]:6789 error -101 [ 333.999671][ T6047] libceph: mon0 (1)[c::]:6789 connect error [ 334.020671][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 334.241010][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 334.359840][ T9] usb 4-1: too many configurations: 200, using maximum allowed: 8 [ 334.369705][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 334.387716][ T9] usb 4-1: can't read configurations, error -61 [ 334.394506][ T9] usb usb4-port1: attempt power cycle [ 334.428220][ T5806] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 334.439676][ T5806] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 334.518950][ T5806] usb 1-1: USB disconnect, device number 19 [ 334.530341][ T30] audit: type=1400 audit(1761149405.121:995): avc: denied { read write } for pid=9515 comm="syz.4.972" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 334.576203][ T5806] f81232 1-1:0.0: device disconnected [ 334.585359][ T6047] usb 2-1: USB disconnect, device number 26 [ 334.694112][ T9] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 335.113246][ T9527] xt_hashlimit: max too large, truncated to 1048576 [ 335.221478][ T9] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 335.252653][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 335.272280][ T9] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 335.287758][ T9] usb 4-1: config 1 has no interface number 1 [ 335.299171][ T9] usb 4-1: config 1 interface 4 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 335.324714][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 335.340409][ T870] usb 3-1: USB disconnect, device number 23 [ 335.353576][ T9] usb 4-1: config 1 interface 4 has no altsetting 0 [ 335.366987][ T9] usb 4-1: string descriptor 0 read error: -22 [ 335.377492][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.395879][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.427052][ T9] usb 4-1: low speed audio streaming not supported [ 335.639254][ T870] usb 4-1: USB disconnect, device number 31 [ 335.666283][ T9537] netlink: 'syz.2.978': attribute type 4 has an invalid length. [ 336.489732][ T9556] netlink: 'syz.1.984': attribute type 5 has an invalid length. [ 336.506349][ T9556] netlink: 'syz.1.984': attribute type 5 has an invalid length. [ 336.900259][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 336.900276][ T30] audit: type=1400 audit(1761149407.051:1007): avc: denied { create } for pid=9551 comm="syz.2.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.979837][ T30] audit: type=1400 audit(1761149407.051:1008): avc: denied { write } for pid=9551 comm="syz.2.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.026075][ T30] audit: type=1400 audit(1761149407.071:1009): avc: denied { read write } for pid=9552 comm="syz.3.985" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 337.050395][ T30] audit: type=1400 audit(1761149407.071:1010): avc: denied { open } for pid=9552 comm="syz.3.985" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 337.074706][ T30] audit: type=1400 audit(1761149407.071:1011): avc: denied { ioctl } for pid=9552 comm="syz.3.985" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 337.396698][ T30] audit: type=1400 audit(1761149407.981:1012): avc: denied { connect } for pid=9571 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 337.472794][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 337.480545][ T30] audit: type=1400 audit(1761149408.061:1013): avc: denied { append } for pid=9574 comm="syz.1.993" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 337.518024][ T30] audit: type=1400 audit(1761149408.101:1014): avc: denied { shutdown } for pid=9571 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 337.589120][ T9582] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 337.595375][ T30] audit: type=1400 audit(1761149408.181:1015): avc: denied { create } for pid=9581 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.621677][ T30] audit: type=1400 audit(1761149408.181:1016): avc: denied { bind } for pid=9581 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.699668][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 337.854093][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.994'. [ 337.864108][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.872498][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.994'. [ 337.872839][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.695595][ T9] usb 5-1: config 0 has no interfaces? [ 338.734716][ T9] usb 5-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 338.754524][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.815125][ T9] usb 5-1: Product: syz [ 338.841143][ T9] usb 5-1: Manufacturer: syz [ 338.874072][ T9] usb 5-1: SerialNumber: syz [ 338.961059][ T9] usb 5-1: config 0 descriptor?? [ 339.030703][ T9594] can: request_module (can-proto-0) failed. [ 339.080994][ T9596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.999'. [ 339.114174][ T9596] nbd: socks must be embedded in a SOCK_ITEM attr [ 339.203100][ T7333] block nbd64: NBD_DISCONNECT [ 339.604975][ T9612] netlink: 'syz.4.989': attribute type 4 has an invalid length. [ 339.612804][ T9612] netlink: 17 bytes leftover after parsing attributes in process `syz.4.989'. [ 339.766834][ T9614] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 340.523675][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 341.539077][ T7333] udevd[7333]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 341.971826][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 342.074796][ T9631] loop5: detected capacity change from 0 to 7 [ 342.084963][ T5806] usb 5-1: USB disconnect, device number 17 [ 342.100323][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 342.100336][ T30] audit: type=1400 audit(1761149412.671:1036): avc: denied { setattr } for pid=9628 comm="syz.2.1006" name="L2TP/IPv6" dev="sockfs" ino=23554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.172481][ T9631] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 342.177932][ T9631] loop5: partition table partially beyond EOD, truncated [ 342.185624][ T9631] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 342.192840][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 342.690633][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 343.572416][ T7333] udevd[7333]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 343.628260][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 343.650597][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.651221][ T30] audit: type=1400 audit(1761149414.231:1037): avc: denied { ioctl } for pid=9645 comm="syz.3.1010" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.669450][ T9] usb 2-1: config 0 descriptor?? [ 343.778368][ T30] audit: type=1400 audit(1761149414.361:1038): avc: denied { map } for pid=9648 comm="syz.2.1012" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 343.801455][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.823675][ T30] audit: type=1400 audit(1761149414.411:1039): avc: denied { write } for pid=9648 comm="syz.2.1012" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 343.859979][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 343.926829][ T30] audit: type=1400 audit(1761149414.511:1040): avc: denied { connect } for pid=9657 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 343.971401][ T30] audit: type=1400 audit(1761149414.541:1041): avc: denied { open } for pid=9657 comm="syz.4.1015" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 344.609346][ T5897] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 344.850428][ T870] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 344.885079][ T30] audit: type=1400 audit(1761149415.421:1042): avc: denied { execute } for pid=9661 comm="syz.3.1016" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 345.000678][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 345.007903][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 345.014088][ T9671] netlink: 'syz.3.1020': attribute type 6 has an invalid length. [ 345.042322][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.052445][ T870] usb 3-1: Using ep0 maxpacket: 8 [ 345.061073][ T870] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 345.063314][ T5897] usb 1-1: config 0 has no interfaces? [ 345.072530][ T870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 345.084147][ T870] usb 3-1: SerialNumber: syz [ 345.086809][ T5897] usb 1-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 345.094326][ T870] usb 3-1: config 0 descriptor?? [ 345.100259][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.110825][ T5897] usb 1-1: Product: syz [ 345.115010][ T5897] usb 1-1: Manufacturer: syz [ 345.119607][ T5897] usb 1-1: SerialNumber: syz [ 345.126106][ T5897] usb 1-1: config 0 descriptor?? [ 345.130226][ T5806] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 345.540509][ T5806] usb 5-1: Using ep0 maxpacket: 16 [ 345.547802][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.557997][ T5806] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 345.567284][ T5806] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 345.579242][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.589440][ T5806] usb 5-1: config 0 descriptor?? [ 345.669537][ T9677] netlink: 'syz.0.1014': attribute type 4 has an invalid length. [ 345.677392][ T9677] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1014'. [ 345.698785][ T9677] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 345.761449][ T30] audit: type=1326 audit(1761149416.351:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.2.1017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6741f8efc9 code=0x0 [ 345.784435][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.560267][ T9] gspca_sonixj: i2c_w8 err -71 [ 346.580314][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 346.591202][ T9] usb 2-1: USB disconnect, device number 27 [ 347.610620][ T9689] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1023'. [ 347.968754][ T9689] bond1: Unable to set up delay as MII monitoring is disabled [ 347.989315][ T9689] bond1 (unregistering): Released all slaves [ 348.116553][ T30] audit: type=1400 audit(1761149418.641:1044): avc: denied { setopt } for pid=9693 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.141574][ T9697] can0: slcan on ptm0. [ 348.227001][ T30] audit: type=1400 audit(1761149418.751:1045): avc: denied { search } for pid=5477 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.249672][ T30] audit: type=1400 audit(1761149418.751:1046): avc: denied { search } for pid=5477 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.782031][ T5806] usb 3-1: USB disconnect, device number 24 [ 348.791659][ T9] usb 1-1: USB disconnect, device number 20 [ 348.808498][ T30] audit: type=1400 audit(1761149418.751:1047): avc: denied { search } for pid=5477 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.845391][ T30] audit: type=1400 audit(1761149418.751:1048): avc: denied { read } for pid=5477 comm="dhcpcd" name="n112" dev="tmpfs" ino=5716 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 348.880197][ T30] audit: type=1400 audit(1761149418.751:1049): avc: denied { open } for pid=5477 comm="dhcpcd" path="/run/udev/data/n112" dev="tmpfs" ino=5716 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.106856][ T30] audit: type=1400 audit(1761149418.751:1050): avc: denied { getattr } for pid=5477 comm="dhcpcd" path="/run/udev/data/n112" dev="tmpfs" ino=5716 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.251563][ T30] audit: type=1400 audit(1761149418.871:1051): avc: denied { connect } for pid=9693 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.361452][ T30] audit: type=1400 audit(1761149418.871:1052): avc: denied { write } for pid=9693 comm="syz.3.1024" path="socket:[22428]" dev="sockfs" ino=22428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.498909][ T30] audit: type=1400 audit(1761149418.941:1053): avc: denied { getopt } for pid=9693 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 350.014084][ T9729] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1030'. [ 350.043434][ T9731] netlink: 'syz.1.1031': attribute type 6 has an invalid length. [ 350.070623][ T870] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 350.090245][ T5806] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 350.820388][ T5806] usb 1-1: Using ep0 maxpacket: 16 [ 350.827034][ T870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.838874][ T870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.838964][ T5806] usb 1-1: config 0 has no interfaces? [ 350.854684][ T870] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 350.864862][ T870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.875840][ T870] usb 3-1: config 0 descriptor?? [ 350.883489][ T5806] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 350.892778][ T5806] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 350.900801][ T5806] usb 1-1: Manufacturer: syz [ 351.021809][ T5806] usb 1-1: config 0 descriptor?? [ 351.111050][ T9692] can0 (unregistered): slcan off ptm0. [ 351.143004][ T5897] usb 5-1: USB disconnect, device number 18 [ 351.287041][ T870] hid-rmi 0003:0461:4E72.000E: unknown main item tag 0x0 [ 351.342925][ T870] hid-rmi 0003:0461:4E72.000E: hidraw0: USB HID v0.06 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 351.445844][ T5806] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 351.489202][ T5897] usb 3-1: USB disconnect, device number 25 [ 351.569983][ T9762] FAULT_INJECTION: forcing a failure. [ 351.569983][ T9762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.583235][ T9762] CPU: 0 UID: 0 PID: 9762 Comm: syz.4.1037 Not tainted syzkaller #0 PREEMPT(full) [ 351.583257][ T9762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.583267][ T9762] Call Trace: [ 351.583273][ T9762] [ 351.583280][ T9762] dump_stack_lvl+0x16c/0x1f0 [ 351.583312][ T9762] should_fail_ex+0x512/0x640 [ 351.583338][ T9762] _copy_from_user+0x2e/0xd0 [ 351.583362][ T9762] video_usercopy+0xee2/0x1720 [ 351.583381][ T9762] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 351.583409][ T9762] ? __pfx_video_usercopy+0x10/0x10 [ 351.583423][ T9762] ? rcu_is_watching+0x12/0xc0 [ 351.583451][ T9762] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 351.583480][ T9762] v4l2_ioctl+0x1bd/0x250 [ 351.583505][ T9762] ? __pfx_v4l2_ioctl+0x10/0x10 [ 351.583532][ T9762] __x64_sys_ioctl+0x18e/0x210 [ 351.583553][ T9762] do_syscall_64+0xcd/0xfa0 [ 351.583572][ T9762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.583590][ T9762] RIP: 0033:0x7fc5dff8efc9 [ 351.583603][ T9762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.583625][ T9762] RSP: 002b:00007fc5e0eca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.583643][ T9762] RAX: ffffffffffffffda RBX: 00007fc5e01e6180 RCX: 00007fc5dff8efc9 [ 351.583654][ T9762] RDX: 00002000000000c0 RSI: 00000000c0285629 RDI: 000000000000000a [ 351.583665][ T9762] RBP: 00007fc5e0eca090 R08: 0000000000000000 R09: 0000000000000000 [ 351.583675][ T9762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.583685][ T9762] R13: 00007fc5e01e6218 R14: 00007fc5e01e6180 R15: 00007ffebcbab2e8 [ 351.583709][ T9762] [ 351.749774][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.775746][ T9719] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 351.825395][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.832666][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.854653][ T5806] usb 4-1: config 128 has an invalid interface number: 72 but max is 0 [ 351.859628][ T9763] bridge_slave_1: left allmulticast mode [ 351.869117][ T9763] bridge_slave_1: left promiscuous mode [ 351.878135][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.878204][ T5806] usb 4-1: config 128 has no interface number 0 [ 351.896238][ T9763] bridge_slave_0: left allmulticast mode [ 351.905881][ T9763] bridge_slave_0: left promiscuous mode [ 351.912654][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.916232][ T5806] usb 4-1: config 128 interface 72 has no altsetting 0 [ 351.945141][ T5806] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=e9.21 [ 351.978699][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.023561][ T5806] usb 4-1: Product: syz [ 352.038493][ T5806] usb 4-1: Manufacturer: syz [ 352.043921][ T5806] usb 4-1: SerialNumber: syz [ 352.343463][ T5806] usb 4-1: USB disconnect, device number 32 [ 352.403753][ T9778] loop5: detected capacity change from 0 to 7 [ 352.448851][ T9778] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 352.455396][ T9778] loop5: partition table partially beyond EOD, truncated [ 352.463903][ T9778] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 352.530032][ T7333] udevd[7333]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 353.768468][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 353.768482][ T30] audit: type=1400 audit(1761149423.441:1073): avc: denied { bind } for pid=9788 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.824144][ T5806] usb 1-1: USB disconnect, device number 21 [ 354.013754][ T9799] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 354.270234][ T30] audit: type=1400 audit(1761149423.451:1074): avc: denied { name_bind } for pid=9788 comm="syz.1.1045" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 354.628313][ T30] audit: type=1400 audit(1761149423.451:1075): avc: denied { node_bind } for pid=9788 comm="syz.1.1045" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 354.828034][ T30] audit: type=1400 audit(1761149423.461:1076): avc: denied { getopt } for pid=9788 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 354.903239][ T30] audit: type=1400 audit(1761149425.461:1077): avc: denied { read } for pid=9807 comm="syz.1.1049" dev="sockfs" ino=23876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 354.986418][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1049'. [ 355.007419][ T30] audit: type=1400 audit(1761149425.561:1078): avc: denied { read write } for pid=9807 comm="syz.1.1049" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 355.229978][ T870] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 355.476334][ T9814] bridge8: entered promiscuous mode [ 355.502220][ T9814] bridge8: entered allmulticast mode [ 355.519268][ T30] audit: type=1400 audit(1761149425.561:1079): avc: denied { open } for pid=9807 comm="syz.1.1049" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 355.547465][ T9818] netdevsim netdevsim1: Direct firmware load for . [ 355.547465][ T9818] failed with error -2 [ 355.568878][ T9818] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 355.568878][ T9818] [ 355.595926][ T30] audit: type=1400 audit(1761149426.151:1080): avc: denied { firmware_load } for pid=9807 comm="syz.1.1049" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 355.630741][ T870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.638891][ T870] usb 3-1: config 0 has no interface number 0 [ 355.672405][ T870] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 355.706636][ T870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.731257][ T870] usb 3-1: config 0 descriptor?? [ 355.758683][ T870] usb 3-1: selecting invalid altsetting 1 [ 355.790283][ T870] dvb_ttusb_budget: ttusb_init_controller: error [ 355.796725][ T870] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 356.069874][ T30] audit: type=1400 audit(1761149426.651:1081): avc: denied { create } for pid=9837 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 356.191974][ T870] DVB: Unable to find symbol cx22700_attach() [ 356.216402][ T9847] sp0: Synchronizing with TNC [ 356.271653][ T9847] sp0: Found TNC [ 356.301040][ T870] DVB: Unable to find symbol tda10046_attach() [ 356.350988][ T870] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 356.558648][ T870] usb 3-1: USB disconnect, device number 26 [ 356.580728][ T9857] netlink: 'syz.1.1062': attribute type 4 has an invalid length. [ 356.700195][ T30] audit: type=1400 audit(1761149427.221:1082): avc: denied { mount } for pid=9841 comm="syz.0.1059" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 356.747844][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1058'. [ 357.723437][ T9876] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.761352][ T9875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1067'. [ 357.930752][ T9875] nbd: socks must be embedded in a SOCK_ITEM attr [ 358.596743][ T9900] FAULT_INJECTION: forcing a failure. [ 358.596743][ T9900] name failslab, interval 1, probability 0, space 0, times 1 [ 358.641353][ T9896] loop6: detected capacity change from 0 to 524288000 [ 358.676198][ T9900] CPU: 0 UID: 0 PID: 9900 Comm: syz.2.1072 Not tainted syzkaller #0 PREEMPT(full) [ 358.676229][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.676242][ T9900] Call Trace: [ 358.676249][ T9900] [ 358.676257][ T9900] dump_stack_lvl+0x16c/0x1f0 [ 358.676297][ T9900] should_fail_ex+0x512/0x640 [ 358.676322][ T9900] ? fs_reclaim_acquire+0xae/0x150 [ 358.676355][ T9900] should_failslab+0xc2/0x120 [ 358.676385][ T9900] __kmalloc_noprof+0xdd/0x880 [ 358.676408][ T9900] ? tomoyo_encode2+0x100/0x3e0 [ 358.676442][ T9900] ? tomoyo_encode2+0x100/0x3e0 [ 358.676467][ T9900] tomoyo_encode2+0x100/0x3e0 [ 358.676499][ T9900] tomoyo_encode+0x29/0x50 [ 358.676534][ T9900] tomoyo_realpath_from_path+0x18f/0x6e0 [ 358.676571][ T9900] tomoyo_mount_acl+0x664/0x850 [ 358.676597][ T9900] ? bpf_ksym_find+0x127/0x1c0 [ 358.676627][ T9900] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 358.676653][ T9900] ? unwind_get_return_address+0x59/0xa0 [ 358.676716][ T9900] ? tomoyo_domain+0xbb/0x150 [ 358.676734][ T9900] ? tomoyo_profile+0x47/0x60 [ 358.676756][ T9900] tomoyo_mount_permission+0x16d/0x420 [ 358.676780][ T9900] ? tomoyo_mount_permission+0x14f/0x420 [ 358.676809][ T9900] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 358.676853][ T9900] security_sb_mount+0x9b/0x260 [ 358.676883][ T9900] path_mount+0x158/0x23a0 [ 358.676922][ T9900] ? __pfx_path_mount+0x10/0x10 [ 358.676953][ T9900] ? kmem_cache_free+0x2d4/0x6c0 [ 358.676976][ T9900] ? putname+0x154/0x1a0 [ 358.676998][ T9900] ? putname+0x154/0x1a0 [ 358.677012][ T9900] ? putname+0x154/0x1a0 [ 358.677032][ T9900] ? __x64_sys_mount+0x293/0x310 [ 358.677058][ T9900] __x64_sys_mount+0x293/0x310 [ 358.677088][ T9900] ? __pfx___x64_sys_mount+0x10/0x10 [ 358.677126][ T9900] do_syscall_64+0xcd/0xfa0 [ 358.677148][ T9900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.677168][ T9900] RIP: 0033:0x7f6741f8efc9 [ 358.677185][ T9900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.677204][ T9900] RSP: 002b:00007f6742de8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.677225][ T9900] RAX: ffffffffffffffda RBX: 00007f67421e5fa0 RCX: 00007f6741f8efc9 [ 358.677237][ T9900] RDX: 0000200000000300 RSI: 0000200000000040 RDI: 0000200000000100 [ 358.677249][ T9900] RBP: 00007f6742de8090 R08: 0000000000000000 R09: 0000000000000000 [ 358.677260][ T9900] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000002 [ 358.677271][ T9900] R13: 00007f67421e6038 R14: 00007f67421e5fa0 R15: 00007ffce54f09b8 [ 358.677300][ T9900] [ 358.740658][ T9900] ERROR: Out of memory at tomoyo_realpath_from_path. [ 359.113636][ T9905] bridge0: entered promiscuous mode [ 359.118874][ T9905] bridge0: entered allmulticast mode [ 359.609784][ T9910] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 359.616778][ T9910] /dev/nullb0: Can't open blockdev [ 360.048948][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 360.048978][ T30] audit: type=1400 audit(1761149430.631:1087): avc: denied { create } for pid=9916 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 360.357646][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 360.373006][ T9928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1079'. [ 360.401071][ T30] audit: type=1400 audit(1761149430.631:1088): avc: denied { ioctl } for pid=9916 comm="syz.1.1078" path="socket:[24857]" dev="sockfs" ino=24857 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 360.442162][ T30] audit: type=1400 audit(1761149430.971:1089): avc: denied { read } for pid=9926 comm="syz.4.1079" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 360.510785][ T30] audit: type=1400 audit(1761149430.971:1090): avc: denied { open } for pid=9926 comm="syz.4.1079" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 360.520296][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 360.562090][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 360.570995][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.591658][ T9] usb 1-1: config 0 has no interfaces? [ 360.607979][ T9] usb 1-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 360.692963][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.701047][ T9] usb 1-1: Product: syz [ 360.705213][ T9] usb 1-1: Manufacturer: syz [ 360.709806][ T9] usb 1-1: SerialNumber: syz [ 360.731236][ T9] usb 1-1: config 0 descriptor?? [ 361.434805][ T30] audit: type=1400 audit(1761149432.011:1091): avc: denied { ioctl } for pid=9930 comm="syz.2.1082" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 361.541991][ T9950] netlink: 'syz.0.1076': attribute type 4 has an invalid length. [ 361.549782][ T9950] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1076'. [ 361.698015][ T9952] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 362.410067][ T9943] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 362.459426][ T9943] /dev/nullb0: Can't open blockdev [ 363.353623][ T9954] input: syz1 as /devices/virtual/input/input19 [ 363.404432][ T30] audit: type=1400 audit(1761149433.991:1092): avc: denied { ioctl } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3127 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 363.598550][ T9960] kernel read not supported for file /eth0 (pid: 9960 comm: syz.2.1087) [ 363.663473][ T30] audit: type=1800 audit(1761149434.251:1093): pid=9960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1087" name="eth0" dev="mqueue" ino=24351 res=0 errno=0 [ 363.759050][ T9965] xt_hashlimit: max too large, truncated to 1048576 [ 363.775111][ T9967] FAULT_INJECTION: forcing a failure. [ 363.775111][ T9967] name failslab, interval 1, probability 0, space 0, times 0 [ 363.987629][ T9967] CPU: 1 UID: 0 PID: 9967 Comm: syz.4.1090 Not tainted syzkaller #0 PREEMPT(full) [ 363.987663][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.987673][ T9967] Call Trace: [ 363.987679][ T9967] [ 363.987686][ T9967] dump_stack_lvl+0x16c/0x1f0 [ 363.987720][ T9967] should_fail_ex+0x512/0x640 [ 363.987742][ T9967] ? __kmalloc_cache_noprof+0x5f/0x780 [ 363.987765][ T9967] should_failslab+0xc2/0x120 [ 363.987791][ T9967] __kmalloc_cache_noprof+0x72/0x780 [ 363.987811][ T9967] ? alloc_fs_context+0x57/0x9c0 [ 363.987841][ T9967] ? alloc_fs_context+0x57/0x9c0 [ 363.987867][ T9967] alloc_fs_context+0x57/0x9c0 [ 363.987897][ T9967] path_mount+0xe1b/0x23a0 [ 363.987928][ T9967] ? __pfx_path_mount+0x10/0x10 [ 363.987955][ T9967] ? kmem_cache_free+0x2d4/0x6c0 [ 363.987975][ T9967] ? putname+0x154/0x1a0 [ 363.987995][ T9967] ? putname+0x154/0x1a0 [ 363.988008][ T9967] ? putname+0x154/0x1a0 [ 363.988026][ T9967] ? __x64_sys_mount+0x293/0x310 [ 363.988049][ T9967] __x64_sys_mount+0x293/0x310 [ 363.988076][ T9967] ? __pfx___x64_sys_mount+0x10/0x10 [ 363.988109][ T9967] do_syscall_64+0xcd/0xfa0 [ 363.988128][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.988146][ T9967] RIP: 0033:0x7fc5dff8efc9 [ 363.988160][ T9967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.988176][ T9967] RSP: 002b:00007fc5e0f0c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 363.988194][ T9967] RAX: ffffffffffffffda RBX: 00007fc5e01e5fa0 RCX: 00007fc5dff8efc9 [ 363.988204][ T9967] RDX: 0000200000000300 RSI: 0000200000000040 RDI: 0000200000000100 [ 363.988216][ T9967] RBP: 00007fc5e0f0c090 R08: 0000000000000000 R09: 0000000000000000 [ 363.988226][ T9967] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000002 [ 363.988235][ T9967] R13: 00007fc5e01e6038 R14: 00007fc5e01e5fa0 R15: 00007ffebcbab2e8 [ 363.988260][ T9967] [ 364.569627][ T9972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1091'. [ 364.617710][ T9976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1094'. [ 364.798859][ T9980] fuse: Unknown parameter 'JcU#MHmCci?bqaH%RŮ"\1Ɔʕ#"O1t6̚^$O2B1QCd' [ 364.879015][ T5806] usb 1-1: USB disconnect, device number 22 [ 364.929517][ T9986] netlink: 'syz.4.1096': attribute type 4 has an invalid length. [ 364.966043][ T9986] netlink: 'syz.4.1096': attribute type 4 has an invalid length. [ 365.197819][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1097'. [ 365.275739][ T9989] netlink: 'syz.3.1097': attribute type 7 has an invalid length. [ 365.290622][ T9989] netlink: 'syz.3.1097': attribute type 8 has an invalid length. [ 365.298359][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 365.504135][ T9989] ip6gretap0: entered promiscuous mode [ 365.579610][ T9989] syz_tun: entered promiscuous mode [ 365.637843][ T9989] ip6gretap0: left promiscuous mode [ 365.826984][ T9999] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1101'. [ 365.871236][ T9989] syz_tun: left promiscuous mode [ 366.116039][ T30] audit: type=1400 audit(1761149436.701:1094): avc: denied { connect } for pid=10005 comm="syz.0.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 366.190299][ T30] audit: type=1400 audit(1761149436.701:1095): avc: denied { ioctl } for pid=10005 comm="syz.0.1104" path="socket:[24452]" dev="sockfs" ino=24452 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 366.320603][ T30] audit: type=1400 audit(1761149436.711:1096): avc: denied { create } for pid=10002 comm="syz.4.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 366.380573][T10016] netlink: 'syz.1.1107': attribute type 4 has an invalid length. [ 366.410245][ T30] audit: type=1400 audit(1761149436.741:1097): avc: denied { setopt } for pid=10005 comm="syz.0.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 366.469665][ T30] audit: type=1400 audit(1761149436.741:1098): avc: denied { bind } for pid=10005 comm="syz.0.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 366.799938][T10027] bridge7: entered promiscuous mode [ 366.805231][T10027] bridge7: entered allmulticast mode [ 367.112748][ T30] audit: type=1400 audit(1761149436.741:1099): avc: denied { name_bind } for pid=10005 comm="syz.0.1104" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 367.410534][ T30] audit: type=1400 audit(1761149436.741:1100): avc: denied { node_bind } for pid=10005 comm="syz.0.1104" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 367.432692][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.516037][T10031] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1111'. [ 367.618920][ T30] audit: type=1400 audit(1761149436.741:1101): avc: denied { write } for pid=10005 comm="syz.0.1104" path="socket:[24463]" dev="sockfs" ino=24463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 367.688903][T10033] bond1: Unable to set up delay as MII monitoring is disabled [ 367.712239][ T30] audit: type=1400 audit(1761149436.811:1102): avc: denied { create } for pid=10002 comm="syz.4.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 367.798411][T10033] bond1 (unregistering): Released all slaves [ 367.858057][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 367.905363][ T30] audit: type=1400 audit(1761149436.811:1103): avc: denied { write } for pid=10002 comm="syz.4.1102" path="socket:[24468]" dev="sockfs" ino=24468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 368.051850][ T9] usb 2-1: config 0 has no interfaces? [ 368.060876][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.069920][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.086865][T10037] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 368.116565][T10039] loop5: detected capacity change from 0 to 7 [ 368.135473][T10039] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 368.145971][T10039] loop5: partition table partially beyond EOD, truncated [ 368.158725][T10039] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 368.212851][ T7333] udevd[7333]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 368.234221][ T9] usb 2-1: Product: syz [ 368.259445][ T9] usb 2-1: Manufacturer: syz [ 368.290519][ T9] usb 2-1: SerialNumber: syz [ 368.317280][ T9] usb 2-1: config 0 descriptor?? [ 368.710091][T10050] netlink: 'syz.2.1116': attribute type 4 has an invalid length. [ 368.719199][T10050] netlink: 'syz.2.1116': attribute type 4 has an invalid length. [ 368.972857][T10055] netlink: 'syz.2.1117': attribute type 4 has an invalid length. [ 369.000089][T10055] netlink: 'syz.2.1117': attribute type 4 has an invalid length. [ 369.344236][T10062] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1120'. [ 369.849733][T10077] FAULT_INJECTION: forcing a failure. [ 369.849733][T10077] name failslab, interval 1, probability 0, space 0, times 0 [ 369.871395][T10077] CPU: 0 UID: 0 PID: 10077 Comm: syz.2.1124 Not tainted syzkaller #0 PREEMPT(full) [ 369.871413][T10077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.871419][T10077] Call Trace: [ 369.871423][T10077] [ 369.871430][T10077] dump_stack_lvl+0x16c/0x1f0 [ 369.871453][T10077] should_fail_ex+0x512/0x640 [ 369.871468][T10077] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 369.871486][T10077] should_failslab+0xc2/0x120 [ 369.871502][T10077] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 369.871517][T10077] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 369.871536][T10077] ? kmemdup_nul+0x49/0xf0 [ 369.871549][T10077] kmemdup_nul+0x49/0xf0 [ 369.871562][T10077] vfs_parse_fs_qstr+0x112/0x1c0 [ 369.871577][T10077] ? lockdep_init_map_type+0x5c/0x280 [ 369.871592][T10077] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 369.871608][T10077] ? lockdep_init_map_type+0x5c/0x280 [ 369.871623][T10077] ? romfs_init_fs_context+0xd/0x40 [ 369.871640][T10077] ? alloc_fs_context+0x59b/0x9c0 [ 369.871658][T10077] path_mount+0x743/0x23a0 [ 369.871676][T10077] ? __pfx_path_mount+0x10/0x10 [ 369.871693][T10077] ? putname+0x154/0x1a0 [ 369.871705][T10077] ? putname+0x154/0x1a0 [ 369.871713][T10077] ? putname+0x154/0x1a0 [ 369.871723][T10077] ? __x64_sys_mount+0x293/0x310 [ 369.871737][T10077] __x64_sys_mount+0x293/0x310 [ 369.871753][T10077] ? __pfx___x64_sys_mount+0x10/0x10 [ 369.871773][T10077] do_syscall_64+0xcd/0xfa0 [ 369.871785][T10077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.871796][T10077] RIP: 0033:0x7f6741f8efc9 [ 369.871805][T10077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.871815][T10077] RSP: 002b:00007f6742de8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 369.871826][T10077] RAX: ffffffffffffffda RBX: 00007f67421e5fa0 RCX: 00007f6741f8efc9 [ 369.871833][T10077] RDX: 0000200000000300 RSI: 0000200000000040 RDI: 0000200000000100 [ 369.871840][T10077] RBP: 00007f6742de8090 R08: 0000000000000000 R09: 0000000000000000 [ 369.871846][T10077] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000002 [ 369.871852][T10077] R13: 00007f67421e6038 R14: 00007f67421e5fa0 R15: 00007ffce54f09b8 [ 369.871867][T10077] [ 370.304315][T10082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1126'. [ 370.315000][T10075] loop6: detected capacity change from 0 to 524288000 [ 370.346828][ T6047] usb 2-1: USB disconnect, device number 28 [ 370.405465][ T870] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 370.459439][T10086] loop5: detected capacity change from 0 to 7 [ 370.470216][T10082] nbd: socks must be embedded in a SOCK_ITEM attr [ 370.571824][ T870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.586196][T10086] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 370.596025][ T870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.606745][T10086] loop5: partition table partially beyond EOD, truncated [ 370.619179][ T870] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 370.629663][T10086] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 370.636826][ T870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.651055][ T870] usb 3-1: SerialNumber: syz [ 370.682574][ T5799] block nbd64: NBD_DISCONNECT [ 370.887034][ T870] usb 3-1: 0:2 : does not exist [ 370.914775][ T870] usb 3-1: USB disconnect, device number 27 [ 370.967610][ T7334] udevd[7334]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 371.024495][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.052694][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1128'. [ 371.290026][ T5799] udevd[5799]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 371.510464][T10098] xt_hashlimit: max too large, truncated to 1048576 [ 371.709194][T10102] netlink: 'syz.2.1130': attribute type 4 has an invalid length. [ 371.790044][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 371.790055][ T30] audit: type=1400 audit(1761149442.371:1109): avc: denied { create } for pid=10103 comm="syz.1.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 371.817842][T10106] netlink: 'syz.2.1130': attribute type 4 has an invalid length. [ 372.051478][T10109] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 372.058482][T10109] /dev/nullb0: Can't open blockdev [ 372.093507][ T5897] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 372.406583][T10115] xt_hashlimit: max too large, truncated to 1048576 [ 372.472736][ T30] audit: type=1400 audit(1761149443.051:1110): avc: denied { create } for pid=10110 comm="syz.2.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 372.492668][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 372.543765][ T5897] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 372.551940][ T5897] usb 2-1: config 0 has no interface number 0 [ 372.558031][ T5897] usb 2-1: config 0 interface 23 altsetting 1 endpoint 0xE has invalid maxpacket 16742, setting to 64 [ 372.582405][ T5897] usb 2-1: config 0 interface 23 altsetting 1 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 373.533335][ T5897] usb 2-1: config 0 interface 23 altsetting 1 endpoint 0x8B has invalid maxpacket 24984, setting to 1024 [ 373.573477][ T5897] usb 2-1: config 0 interface 23 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 1024 [ 373.587343][ T5897] usb 2-1: config 0 interface 23 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 373.612706][ T5897] usb 2-1: config 0 interface 23 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 373.690385][ T5897] usb 2-1: config 0 interface 23 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 373.730961][ T5897] usb 2-1: config 0 interface 23 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 373.742412][ T5897] usb 2-1: config 0 interface 23 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 373.756691][ T5897] usb 2-1: config 0 interface 23 has no altsetting 0 [ 373.775910][ T5897] usb 2-1: New USB device found, idVendor=177f, idProduct=0165, bcdDevice=dd.a8 [ 373.790333][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.803274][ T5897] usb 2-1: Product: syz [ 373.815940][ T5897] usb 2-1: Manufacturer: syz [ 373.820933][ T5897] usb 2-1: SerialNumber: syz [ 373.827195][T10131] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 373.839929][T10131] VFS: Can't find a romfs filesystem on dev nullb0. [ 373.839929][T10131] [ 373.851448][ T5897] usb 2-1: config 0 descriptor?? [ 373.862043][T10104] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.072444][T10104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.081324][T10104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.099006][ T5897] usb 2-1: USB disconnect, device number 29 [ 374.632396][T10136] bpf: Bad value for 'gid' [ 374.639385][ T30] audit: type=1400 audit(1761149445.221:1111): avc: denied { getopt } for pid=10132 comm="syz.3.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 375.081696][T10140] netlink: 'syz.0.1139': attribute type 6 has an invalid length. [ 375.623490][T10145] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 376.780674][T10151] netlink: 'syz.3.1145': attribute type 13 has an invalid length. [ 376.790284][T10151] netlink: 940 bytes leftover after parsing attributes in process `syz.3.1145'. [ 377.031185][T10162] net veth1_virt_wifi : renamed from virt_wifi0 [ 377.174019][T10164] bridge0: port 3(batadv1) entered blocking state [ 377.277952][T10164] bridge0: port 3(batadv1) entered disabled state [ 377.298697][T10164] batadv1: entered allmulticast mode [ 377.310442][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 377.321109][T10164] batadv1: entered promiscuous mode [ 377.419432][ T30] audit: type=1400 audit(1761149447.961:1112): avc: denied { module_request } for pid=10153 comm="syz.2.1144" kmod="netdev-syztnl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 377.472919][ T9] usb 1-1: config 0 has no interfaces? [ 377.482298][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.531894][T10172] input: syz1 as /devices/virtual/input/input20 [ 377.550405][ T30] audit: type=1400 audit(1761149447.971:1113): avc: denied { ioctl } for pid=10158 comm="syz.0.1147" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 377.584898][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.619291][ T30] audit: type=1400 audit(1761149448.081:1114): avc: denied { read } for pid=10171 comm="syz.4.1149" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 377.640253][ T9] usb 1-1: Product: syz [ 377.651580][ T9] usb 1-1: Manufacturer: syz [ 377.656201][ T9] usb 1-1: SerialNumber: syz [ 377.670487][ T8358] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 377.670522][ T8358] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 377.683871][ T9] usb 1-1: config 0 descriptor?? [ 377.710814][ T30] audit: type=1400 audit(1761149448.081:1115): avc: denied { open } for pid=10171 comm="syz.4.1149" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 377.813909][ T30] audit: type=1400 audit(1761149448.081:1116): avc: denied { ioctl } for pid=10171 comm="syz.4.1149" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 377.865837][ T30] audit: type=1400 audit(1761149448.101:1117): avc: denied { create } for pid=10171 comm="syz.4.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.918689][ T30] audit: type=1400 audit(1761149448.101:1118): avc: denied { write } for pid=10171 comm="syz.4.1149" name="tcp6" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 377.957589][ T30] audit: type=1400 audit(1761149448.171:1119): avc: denied { read } for pid=10165 comm="syz.3.1148" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 378.226224][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.232857][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.251153][ T30] audit: type=1400 audit(1761149448.171:1120): avc: denied { open } for pid=10165 comm="syz.3.1148" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 378.280378][ T30] audit: type=1400 audit(1761149448.191:1121): avc: denied { prog_load } for pid=10165 comm="syz.3.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 378.662976][T10184] loop6: detected capacity change from 0 to 524288000 [ 379.143101][T10192] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1153'. [ 379.641213][T10197] netlink: 'syz.1.1155': attribute type 6 has an invalid length. [ 379.806763][ T870] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 379.926017][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'. [ 380.050909][ T870] usb 4-1: Using ep0 maxpacket: 8 [ 380.061144][ T870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.075900][ T870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.118493][ T870] usb 4-1: config 0 has no interfaces? [ 380.553302][ T870] usb 4-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 380.689640][ T870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.716206][ T870] usb 4-1: Product: syz [ 380.735063][ T870] usb 4-1: Manufacturer: syz [ 380.753098][ T870] usb 4-1: SerialNumber: syz [ 380.855283][ T870] usb 4-1: config 0 descriptor?? [ 380.890748][ T9] usb 1-1: USB disconnect, device number 23 [ 381.305113][T10223] xt_hashlimit: max too large, truncated to 1048576 [ 381.418236][T10227] netlink: 'syz.3.1154': attribute type 4 has an invalid length. [ 381.426058][T10227] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1154'. [ 381.496009][T10227] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 383.210567][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 383.210583][ T30] audit: type=1400 audit(1761149453.791:1198): avc: denied { append } for pid=10228 comm="syz.2.1165" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 383.370311][ T30] audit: type=1400 audit(1761149453.801:1199): avc: denied { open } for pid=10228 comm="syz.2.1165" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 383.437703][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'. [ 383.534177][ T30] audit: type=1400 audit(1761149453.801:1200): avc: denied { name_bind } for pid=10228 comm="syz.2.1165" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 383.557545][ T30] audit: type=1400 audit(1761149453.801:1201): avc: denied { node_bind } for pid=10228 comm="syz.2.1165" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 383.580169][ T30] audit: type=1400 audit(1761149453.831:1202): avc: denied { ioctl } for pid=10228 comm="syz.2.1165" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 383.792908][ T30] audit: type=1400 audit(1761149453.961:1203): avc: denied { read write } for pid=10231 comm="syz.0.1166" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 383.920210][ T5897] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 383.955563][ T30] audit: type=1400 audit(1761149453.961:1204): avc: denied { open } for pid=10231 comm="syz.0.1166" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.056414][ T30] audit: type=1400 audit(1761149453.961:1205): avc: denied { ioctl } for pid=10231 comm="syz.0.1166" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.081491][ T5897] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.081517][ T5897] usb 1-1: config 0 has no interface number 0 [ 384.083144][ T5897] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 384.227022][ T30] audit: type=1400 audit(1761149454.001:1206): avc: denied { read } for pid=10224 comm="syz.1.1163" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 384.297525][ T30] audit: type=1400 audit(1761149454.001:1207): avc: denied { open } for pid=10224 comm="syz.1.1163" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 384.390975][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.422709][ T5897] usb 1-1: Product: syz [ 384.426893][ T5897] usb 1-1: Manufacturer: syz [ 384.460186][ T5897] usb 1-1: SerialNumber: syz [ 384.471248][ T5806] usb 4-1: USB disconnect, device number 34 [ 384.507665][ T5897] usb 1-1: config 0 descriptor?? [ 385.100365][ T5897] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 385.166285][ T5897] usb 1-1: USB disconnect, device number 24 [ 386.001335][T10258] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 386.014689][T10258] /dev/nullb0: Can't open blockdev [ 386.021614][T10260] xt_hashlimit: max too large, truncated to 1048576 [ 386.417126][T10269] bridge9: entered promiscuous mode [ 386.438266][T10269] bridge9: entered allmulticast mode [ 386.453365][T10271] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1175'. [ 386.600375][T10273] netlink: 'syz.4.1176': attribute type 4 has an invalid length. [ 386.768275][T10278] netlink: 'syz.2.1177': attribute type 5 has an invalid length. [ 386.838097][T10278] netlink: 'syz.2.1177': attribute type 5 has an invalid length. [ 387.008075][T10287] sp0: Synchronizing with TNC [ 387.012943][ T5897] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 387.027380][T10287] sp0: Found TNC [ 387.067828][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1180'. [ 387.531046][ T5889] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 387.565612][ T5897] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 387.619044][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.684762][ T5897] usb 5-1: config 0 descriptor?? [ 387.748477][ T5897] cp210x 5-1:0.0: cp210x converter detected [ 387.755310][ T5889] usb 1-1: config 0 has no interfaces? [ 387.899494][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.908622][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.926246][ T5889] usb 1-1: Product: syz [ 387.944808][ T5889] usb 1-1: Manufacturer: syz [ 387.983922][ T5889] usb 1-1: SerialNumber: syz [ 388.024801][ T5889] usb 1-1: config 0 descriptor?? [ 388.163890][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 388.179485][ T5897] usb 5-1: cp210x converter now attached to ttyUSB0 [ 388.210823][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 388.339870][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 388.339890][ T30] audit: type=1400 audit(1761149458.921:1251): avc: denied { sys_module } for pid=10279 comm="syz.0.1179" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 388.561035][ T870] usb 5-1: USB disconnect, device number 19 [ 388.573739][ T870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 388.723364][ T870] cp210x 5-1:0.0: device disconnected [ 388.959138][ T30] audit: type=1400 audit(1761149459.511:1252): avc: denied { bind } for pid=10303 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 389.271262][ T30] audit: type=1400 audit(1761149459.701:1253): avc: denied { create } for pid=10305 comm="syz.3.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 389.320919][ T30] audit: type=1400 audit(1761149459.711:1254): avc: denied { connect } for pid=10305 comm="syz.3.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 389.964509][ T30] audit: type=1400 audit(1761149459.721:1255): avc: denied { ioctl } for pid=10305 comm="syz.3.1185" path="socket:[26105]" dev="sockfs" ino=26105 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 389.999325][ T30] audit: type=1400 audit(1761149460.581:1256): avc: denied { create } for pid=10317 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.071633][ T30] audit: type=1400 audit(1761149460.621:1257): avc: denied { write } for pid=10317 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.259927][ T30] audit: type=1400 audit(1761149460.621:1258): avc: denied { nlmsg_write } for pid=10317 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.708282][ T30] audit: type=1400 audit(1761149460.691:1259): avc: denied { create } for pid=10319 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 390.730249][ T30] audit: type=1400 audit(1761149460.701:1260): avc: denied { bind } for pid=10319 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 390.759271][T10328] xt_hashlimit: max too large, truncated to 1048576 [ 390.956682][T10330] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 391.830759][ T5806] usb 1-1: USB disconnect, device number 25 [ 391.838227][T10337] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 391.860995][T10337] VFS: Can't find a romfs filesystem on dev nullb0. [ 391.860995][T10337] [ 392.200391][ T5806] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 392.681554][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.692999][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.711707][ T5806] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 392.721382][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.760492][ T5806] usb 1-1: config 0 descriptor?? [ 393.181160][ T5806] cp2112 0003:10C4:EA90.000F: collection stack underflow [ 393.189493][ T5806] cp2112 0003:10C4:EA90.000F: item 0 0 0 12 parsing failed [ 393.202086][ T5806] cp2112 0003:10C4:EA90.000F: parse failed [ 393.209180][ T5806] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -22 [ 393.449677][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 393.449687][ T30] audit: type=1400 audit(1761149464.031:1275): avc: denied { create } for pid=10362 comm="syz.1.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 393.824756][T10359] loop6: detected capacity change from 0 to 524288000 [ 393.942997][ T30] audit: type=1400 audit(1761149464.531:1276): avc: denied { sqpoll } for pid=10362 comm="syz.1.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 394.332232][T10368] netlink: 'syz.1.1204': attribute type 4 has an invalid length. [ 394.341110][T10368] netlink: 'syz.1.1204': attribute type 4 has an invalid length. [ 394.453203][ T30] audit: type=1400 audit(1761149465.041:1277): avc: denied { create } for pid=10369 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.558176][ T30] audit: type=1400 audit(1761149465.281:1278): avc: denied { setopt } for pid=10369 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 395.578141][ T30] audit: type=1400 audit(1761149465.281:1279): avc: denied { bind } for pid=10369 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 395.598090][ T30] audit: type=1400 audit(1761149465.281:1280): avc: denied { name_bind } for pid=10369 comm="syz.1.1205" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 395.621276][ T30] audit: type=1400 audit(1761149465.281:1281): avc: denied { node_bind } for pid=10369 comm="syz.1.1205" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 395.644062][ T30] audit: type=1400 audit(1761149465.301:1282): avc: denied { getopt } for pid=10369 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.962829][ T5806] usb 1-1: USB disconnect, device number 26 [ 396.351518][T10385] bridge10: entered promiscuous mode [ 396.356877][T10385] bridge10: entered allmulticast mode [ 396.786248][ T30] audit: type=1400 audit(1761149467.321:1283): avc: denied { write } for pid=10378 comm="syz.0.1208" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 396.855137][T10383] futex_wake_op: syz.2.1202 tries to shift op by 32; fix this program [ 397.180540][ T30] audit: type=1400 audit(1761149467.321:1284): avc: denied { read } for pid=10378 comm="syz.0.1208" path="socket:[26651]" dev="sockfs" ino=26651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 439.740612][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.746928][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.260108][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 503.267073][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10395/2:b..l [ 503.275407][ C1] rcu: (detected by 1, t=10502 jiffies, g=32645, q=577 ncpus=2) [ 503.283722][ C1] task:syz.3.1210 state:R running task stack:26544 pid:10395 tgid:10394 ppid:5834 task_flags:0x400140 flags:0x00080001 [ 503.297690][ C1] Call Trace: [ 503.300961][ C1] [ 503.303885][ C1] __schedule+0x1190/0x5de0 [ 503.308386][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 503.313431][ C1] ? __pfx___schedule+0x10/0x10 [ 503.318284][ C1] ? mark_held_locks+0x49/0x80 [ 503.323048][ C1] preempt_schedule_irq+0x51/0x90 [ 503.328067][ C1] irqentry_exit+0x36/0x90 [ 503.332468][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 503.338438][ C1] RIP: 0010:write_comp_data+0x3c/0x90 [ 503.343806][ C1] Code: 8b 05 48 ac e7 11 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 7c 16 00 00 85 c0 74 4f <8b> 82 58 16 00 00 83 f8 03 75 44 48 8b 82 60 16 00 00 8b 92 5c 16 [ 503.363402][ C1] RSP: 0018:ffffc90003a27500 EFLAGS: 00000246 [ 503.369467][ C1] RAX: 0000000080000000 RBX: ffff8880543cde42 RCX: ffffffff8b65f1bc [ 503.377426][ C1] RDX: ffff88802b7c2480 RSI: 0000000000000002 RDI: 0000000000000007 [ 503.385384][ C1] RBP: ffffc90003a27770 R08: 0000000000000007 R09: 0000000000000002 [ 503.393343][ C1] R10: 0000000000000002 R11: 0000000000000001 R12: 000000000000000c [ 503.401301][ C1] R13: ffff88806a186c00 R14: 0000000000000002 R15: 0000000000000001 [ 503.409267][ C1] ? xas_load+0x1dc/0x5b0 [ 503.413590][ C1] xas_load+0x1dc/0x5b0 [ 503.417738][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 503.423185][ C1] xas_find+0x573/0x890 [ 503.427331][ C1] ? find_held_lock+0x2b/0x80 [ 503.432000][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 503.437448][ C1] xas_next_entry+0x267/0x3c0 [ 503.442117][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 503.447564][ C1] next_uptodate_folio+0x29/0x4a0 [ 503.452582][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 503.458026][ C1] filemap_map_pages+0x1c7/0x1b70 [ 503.463041][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 503.469359][ C1] ? folio_add_file_rmap_ptes+0xa1f/0xdb0 [ 503.475075][ C1] ? __lock_acquire+0x622/0x1c90 [ 503.480008][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 503.485468][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 503.490914][ C1] do_pte_missing+0xe33/0x3ba0 [ 503.495672][ C1] ? find_held_lock+0x2b/0x80 [ 503.500338][ C1] ? __handle_mm_fault+0x1529/0x2aa0 [ 503.505616][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 503.510724][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 503.516176][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 503.521629][ C1] ? find_held_lock+0x2b/0x80 [ 503.526301][ C1] ? follow_page_pte+0x5cf/0x1390 [ 503.531328][ C1] handle_mm_fault+0x589/0xd10 [ 503.536084][ C1] __get_user_pages+0x54e/0x3530 [ 503.541027][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 503.546402][ C1] populate_vma_page_range+0x267/0x3f0 [ 503.551856][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 503.557824][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 503.563625][ C1] ? do_mmap+0x69c/0x1210 [ 503.567950][ C1] __mm_populate+0x1d8/0x380 [ 503.572530][ C1] ? __pfx___mm_populate+0x10/0x10 [ 503.577628][ C1] ? up_write+0x1b2/0x520 [ 503.581954][ C1] vm_mmap_pgoff+0x37f/0x470 [ 503.587061][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 503.592171][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 503.597098][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 503.602030][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 503.606701][ C1] ? xfd_validate_state+0x61/0x180 [ 503.611802][ C1] ? __sys_setsockopt+0x1c0/0x230 [ 503.616824][ C1] __x64_sys_mmap+0x125/0x190 [ 503.621496][ C1] do_syscall_64+0xcd/0xfa0 [ 503.625989][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.631866][ C1] RIP: 0033:0x7fb904f8efc9 [ 503.636269][ C1] RSP: 002b:00007fb905de8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 503.644668][ C1] RAX: ffffffffffffffda RBX: 00007fb9051e5fa0 RCX: 00007fb904f8efc9 [ 503.652624][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 503.660581][ C1] RBP: 00007fb905011f91 R08: ffffffffffffffff R09: 0000000000000000 [ 503.668536][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 503.676491][ C1] R13: 00007fb9051e6038 R14: 00007fb9051e5fa0 R15: 00007ffd32862018 [ 503.684462][ C1] [ 503.687469][ C1] rcu: rcu_preempt kthread starved for 9631 jiffies! g32645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 503.698558][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 503.708512][ C1] rcu: RCU grace-period kthread stack dump: [ 503.714383][ C1] task:rcu_preempt state:R running task stack:28232 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 503.727863][ C1] Call Trace: [ 503.731131][ C1] [ 503.734051][ C1] __schedule+0x1190/0x5de0 [ 503.738566][ C1] ? __pfx___schedule+0x10/0x10 [ 503.743421][ C1] ? find_held_lock+0x2b/0x80 [ 503.748087][ C1] ? schedule+0x2d7/0x3a0 [ 503.752420][ C1] schedule+0xe7/0x3a0 [ 503.756485][ C1] schedule_timeout+0x123/0x290 [ 503.761327][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 503.766691][ C1] ? __pfx_process_timeout+0x10/0x10 [ 503.771966][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 503.777766][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 503.783217][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 503.787978][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 503.793254][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.798441][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 503.803371][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 503.808222][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.814024][ C1] rcu_gp_kthread+0x26d/0x380 [ 503.818695][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 503.823882][ C1] ? rcu_is_watching+0x12/0xc0 [ 503.828633][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.833821][ C1] ? __kthread_parkme+0x19e/0x250 [ 503.838837][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 503.844025][ C1] kthread+0x3c5/0x780 [ 503.848085][ C1] ? __pfx_kthread+0x10/0x10 [ 503.852670][ C1] ? rcu_is_watching+0x12/0xc0 [ 503.857425][ C1] ? __pfx_kthread+0x10/0x10 [ 503.862006][ C1] ret_from_fork+0x675/0x7d0 [ 503.866585][ C1] ? __pfx_kthread+0x10/0x10 [ 503.871166][ C1] ret_from_fork_asm+0x1a/0x30 [ 503.875933][ C1] [ 503.878937][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 503.885244][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 503.894161][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 503.904202][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 503.909830][ C1] Code: 57 73 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 35 22 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 503.929423][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 503.935474][ C1] RAX: 00000000021b8737 RBX: 0000000000000001 RCX: ffffffff8b67f2a9 [ 503.943430][ C1] RDX: 0000000000000000 RSI: ffffffff8db06380 RDI: ffffffff8bf1de40 [ 503.951388][ C1] RBP: ffffed1003b5b490 R08: 0000000000000001 R09: ffffed10170a6655 [ 503.959349][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 503.967304][ C1] R13: ffff88801dada480 R14: ffffffff90833ad0 R15: 0000000000000000 [ 503.975266][ C1] FS: 0000000000000000(0000) GS:ffff888124ad1000(0000) knlGS:0000000000000000 [ 503.984184][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.990754][ C1] CR2: 00007fc3eb822c62 CR3: 000000007bb48000 CR4: 00000000003526f0 [ 503.998699][ C1] Call Trace: [ 504.001947][ C1] [ 504.004851][ C1] default_idle+0x13/0x20 [ 504.009153][ C1] default_idle_call+0x6c/0xb0 [ 504.013884][ C1] do_idle+0x38d/0x500 [ 504.017925][ C1] ? __pfx_do_idle+0x10/0x10 [ 504.022483][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 504.027665][ C1] cpu_startup_entry+0x4f/0x60 [ 504.032398][ C1] start_secondary+0x21d/0x2b0 [ 504.037136][ C1] ? __pfx_start_secondary+0x10/0x10 [ 504.042391][ C1] common_startup_64+0x13e/0x148 [ 504.047320][ C1] [ 504.162326][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.168631][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.387326][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 504.387342][ T30] audit: type=1400 audit(1761149574.971:1287): avc: denied { map_read map_write } for pid=10418 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 504.686743][ T30] audit: type=1400 audit(1761149575.091:1288): avc: denied { read write } for pid=10418 comm="syz.4.1217" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 504.711515][ T30] audit: type=1400 audit(1761149575.091:1289): avc: denied { open } for pid=10418 comm="syz.4.1217" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 504.736033][ T30] audit: type=1400 audit(1761149575.121:1290): avc: denied { ioctl } for pid=10418 comm="syz.4.1217" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 SYZFAIL: failed to send rpc fd=3 want=520 sent=0 n=-1 (errno 32: Broken pipe) [ 504.939945][ T30] audit: type=1400 audit(1761149575.521:1291): avc: denied { write } for pid=5795 comm="syz-executor" path="pipe:[4014]" dev="pipefs" ino=4014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 507.100995][ T8380] bridge_slave_1: left allmulticast mode [ 507.107054][ T8380] bridge_slave_1: left promiscuous mode [ 507.119655][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.132619][ T8380] bridge_slave_0: left allmulticast mode [ 507.138267][ T8380] bridge_slave_0: left promiscuous mode [ 507.144751][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.803285][ T8380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.813251][ T8380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.823430][ T8380] bond0 (unregistering): Released all slaves [ 507.883268][ T8380] bond1 (unregistering): Released all slaves [ 507.893800][ T8380] (unregistering): Released all slaves [ 507.963418][ T30] audit: type=1400 audit(1761149578.551:1292): avc: denied { read open } for pid=10436 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.990187][ T8380] tipc: Left network mode [ 508.025316][ T30] audit: type=1400 audit(1761149578.551:1293): avc: denied { getattr } for pid=10436 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.115806][ T30] audit: type=1400 audit(1761149578.701:1294): avc: denied { add_name } for pid=10435 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.138724][ T30] audit: type=1400 audit(1761149578.701:1295): avc: denied { create } for pid=10435 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.169595][ T30] audit: type=1400 audit(1761149578.701:1296): avc: denied { write } for pid=10435 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=6309 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.288059][ T8380] hsr_slave_0: left promiscuous mode [ 508.294180][ T8380] hsr_slave_1: left promiscuous mode [ 508.300072][ T8380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.308620][ T8380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.321351][ T8380] veth1_vlan: left allmulticast mode [ 509.032367][ T8380] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.096184][ T8380] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.177427][ T8380] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.236874][ T8380] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.265268][ T8380] batadv1: left allmulticast mode [ 510.271811][ T8380] batadv1: left promiscuous mode [ 510.276932][ T8380] bridge0: port 3(batadv1) entered disabled state [ 510.289470][ T8380] bridge_slave_1: left allmulticast mode [ 510.296339][ T8380] bridge_slave_1: left promiscuous mode [ 510.302500][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.313475][ T8380] bridge_slave_0: left allmulticast mode [ 510.319127][ T8380] bridge_slave_0: left promiscuous mode [ 510.325250][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.341785][ T8380] bridge_slave_1: left allmulticast mode [ 510.347434][ T8380] bridge_slave_1: left promiscuous mode [ 510.353453][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.365110][ T8380] bridge_slave_0: left allmulticast mode [ 510.371062][ T8380] bridge_slave_0: left promiscuous mode [ 510.376747][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.419405][ T8380] bridge_slave_1: left allmulticast mode [ 510.426039][ T8380] bridge_slave_1: left promiscuous mode [ 510.433396][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.441562][ T8380] bridge_slave_0: left allmulticast mode [ 510.447174][ T8380] bridge_slave_0: left promiscuous mode [ 510.453460][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.598148][ T8380] dvmrp0 (unregistering): left allmulticast mode [ 511.015011][ T8380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.026582][ T8380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.036596][ T8380] bond0 (unregistering): Released all slaves [ 511.046787][ T8380] (unregistering): Released all slaves [ 511.406759][ T8380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.416212][ T8380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.425434][ T8380] bond0 (unregistering): Released all slaves [ 511.435844][ T8380] (unregistering): Released all slaves [ 512.099787][ T8380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.109213][ T8380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.118726][ T8380] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 512.128923][ T8380] bond0 (unregistering): Released all slaves [ 512.185843][ T8380] (unregistering): Released all slaves [ 512.733016][ T8380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.742424][ T8380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.751675][ T8380] bond0 (unregistering): Released all slaves [ 512.762118][ T8380] (unregistering): Released all slaves [ 512.935928][ T8380] : left promiscuous mode [ 513.016274][ T8380] tipc: Left network mode