last executing test programs: 14.769455536s ago: executing program 4 (id=499): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002080), 0x30200, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000002340)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002380)={&(0x7f00000023c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="000328bd7000fbdbdf2505000000340009800800010001000000080002003b07000008000100030000000800020007000000080001000004000008000200080000004c000280080001000200000008000200000000001c00038008000200fffeffff08000200810000000800010009000000080001000000010004000400080001006d00000008000100090000001c0009800800020003000000080001000100000008000200080000009c00048014000780080002000900000008000300db5300004c00078008000200050000000800010018000000080002000100000008000300090000000800020007000000080003000b0000000800020001000000080002000500000008000300f5ffffff0800010073797a30000000002c0007800800040006000000080001000c00000008000400060000000800020081000000080001000f0000001400098008000200060000000800020001000000340005801c000280080001020d0000000800030007000000080002008a5b00001400028008000200090000000800030016000000340007800c0004000800000000000000080001000300000008000200050000000c000400ffff00000000000008000100090000005d8940c221a4a5a03380ac7e"], 0x1c8}, 0x1, 0x0, 0x0, 0xc010}, 0x24048840) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002080), 0x30200, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000002340)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002380)={&(0x7f00000023c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0xc010}, 0x24048840) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) (async) 14.360201101s ago: executing program 4 (id=501): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, &(0x7f0000000000)="6f9d6620b3285b750e8181466c3beff5ab51d1964c4d7b9267a02eccc6de3bfa2d93b86fb1cf9403dafee474fb32ad15dc01b288babf91aadc112dd1e3a83b28680cfc1571bcfc4b64126d45edf98cc9f841f7264714536627", 0x59, 0x4000010, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r5, 0x88, 0x1, &(0x7f0000000080), 0x4) 8.824753549s ago: executing program 1 (id=521): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x25, 0x800, 0x5) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x15001}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x44}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) getsockopt$bt_hci(r7, 0x84, 0x80, 0x0, &(0x7f0000000000)) 8.105266833s ago: executing program 4 (id=523): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES16=r1], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000406010800000000000000000000000014000780080012400000000305001500000000000500010006"], 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) 7.45690179s ago: executing program 1 (id=524): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$FE_READ_SIGNAL_STRENGTH(r0, 0x80026f47, &(0x7f0000000040)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) brk(0x8) r2 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_LOCK(r2, 0xb) shmget$private(0x0, 0x7000, 0x78000000, &(0x7f0000ff9000/0x7000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$SHM_UNLOCK(r2, 0xc) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x7000, 0x5, &(0x7f0000000100)=""/5}]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000340)={0x1, 0x8}, 0x2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4c}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21) 6.461342868s ago: executing program 1 (id=532): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) inotify_init() writev(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000206010100004b89000000000000cc79e0df3226c4fdb4d7000105000400000100000900020073797a32000000000500a78c0b8e000005000100068000000c000300686173683a69700028623a35bc8f5769c03d78a0ea70d450334bca8cfcfc1e25fe3afdebe60ea32be5b47db12d945a6200998b59ae302be493374eb41805b53769fe35fd1f9f9bb0df534ad24d9b17dbf843d6f005f7343675fd6e61"], 0x44}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r1, 0x0, 0x20000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') lsm_list_modules(0x0, 0x0, 0x0) read$watch_queue(r5, &(0x7f0000001080)=""/4088, 0xff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x64}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) 5.80991087s ago: executing program 1 (id=533): dup(0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x200008c0) sendmsg$kcm(r0, 0x0, 0x0) close(r0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000003c0)={0x2, 0x100, 0x1}) 5.778116323s ago: executing program 4 (id=534): socket$nl_netfilter(0x10, 0x3, 0xc) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="85820528c32ef8bdfcaf925ed8b87c82d543b54a8dfd870b12d8e35da72ca1b0054905cabfe96f752e0bccc2078abbd6d9c9309834cceba35fac931bf01ef0991e0e0ea292937dbfa714c9e599064d1c25e4", 0xffffffe4}], 0x31, 0x1400, 0x0, 0x1) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r3, 0x3, &(0x7f0000000b00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8, r2, 0x0, 0x0, 0x800007, 0x0, 0x2}, 0x0, 0x0]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) sendto$inet6(r5, 0x0, 0x0, 0x24040054, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) 5.487238924s ago: executing program 1 (id=535): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef"], 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x543, 0xe621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x3ba, 0x25, 0x1, {0x22, 0xf73}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x5a, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x9, 0x95}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x6, 0x7, 0x0, 0x8, 0xff}, 0xcd, &(0x7f0000000540)={0x5, 0xf, 0xcd, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7, 0xf00, 0x0, [0x0, 0x0, 0x3f00, 0x3fc0, 0xff3f00, 0xff3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x4, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xa, 0xa3}, @ptm_cap={0x3}, @generic={0x90, 0x10, 0xb, "d41aea43c86eacafa072e6eb674d409de3b4ae458f1333f9fed524347d899ba9ada489489e23850b1f7bbee13a65e50ec21354420aacaf5fee9af3205f7fbb89786abec556ec7deb86139a1353514a6af6445c458b12dc4041150fd30dc77acd2471184ddc4e29bc33e9a0d15bb5dcc41fd356c119a2ebf491002129ab46d98f0fefd18b0dbff425e20047993b"}]}, 0x3, [{0x99, &(0x7f00000000c0)=@string={0x99, 0x3, "e8a5b09b53469ce107d90b9e99944eb62393d03b2ceab08a7e8fc56b2907fa45436656d1bad25d5bcc153589010172847e8845bfeb13a63819fd6a4a666a2cd7277096d040e29dab96f5caeb7be0a7c7b8dffb79432e024e58f517924ca94d746b9290edc15b11e1b4c68cda50f8cac2f79a97c6f7c05b8fe4a4a8b92fab2f9852d0b3c60a71eeeb9ddb9f7e5697be3bf7174a8b068ac9"}}, {0x6c, &(0x7f0000000240)=@string={0x6c, 0x3, "d1bbb9a05378cab147fd56439fdbbdc12fc2d25accf00cb1d9448f04e7a1ec43d39c9f345dc89b83d48e9da7bc7b1fd1951456ff5bd6daee5d96342edc5f18468b30f32ac6fe17bde320a074ba1ef19075b420aa2d261c9cae4328dc173c50333daff2b38fa4fb760fe2"}}, {0x9f, &(0x7f0000000380)=@string={0x9f, 0x3, "40fee306ea95d11c310905849065c133e572beca680bf178bd83d217aa2699ffdad25f37c1c110828e57fffd7c83b2be3d19872e9734eba8bbd591493894c2dc3bcad662f1f9fcfd9b1abdd294119a6b358e3425cefbd93c00580b5cb47613c74ea872a4220a58368b1a5868b5d052d70784c9b36ab7089a2d1a561fd87fe21802d364f3fffdc0f652aa3cac7fb334d19f666ff399560fb8d27ba50043"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x3f}, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x81, 0x1, "a6"}, 0x0, &(0x7f0000000340)={0x20, 0x83, 0x1, "f1"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.49326372s ago: executing program 3 (id=544): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) inotify_init() writev(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000206010100004b89000000000000cc79e0df3226c4fdb4d7000105000400000100000900020073797a32000000000500a78c0b8e000005000100068000000c000300686173683a69700028623a35bc8f5769c03d78a0ea70d450334bca8cfcfc1e25fe3afdebe60ea32be5b47db12d945a6200998b59ae302be493374eb41805b53769fe35fd1f9f9bb0df534ad24d9b17dbf843d6f005f7343675fd6e61"], 0x44}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r1, 0x0, 0x20000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') lsm_list_modules(0x0, 0x0, 0x0) read$watch_queue(r5, &(0x7f0000001080)=""/4088, 0xff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x64}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) 3.404390413s ago: executing program 0 (id=545): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x100000000007, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000000)=0x4) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.733289786s ago: executing program 0 (id=548): rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80000) (fail_nth: 5) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) 2.677418619s ago: executing program 2 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (fail_nth: 5) 2.370392211s ago: executing program 3 (id=550): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xff0f0000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 2.297228769s ago: executing program 0 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x32}, @void, @val={0xc, 0x99, {0x3, 0x4d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008095}, 0x20000080) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33fa2bbd7000fcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="140004006361696630000000000000000000000008000500090000000a00e8"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x284, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x803}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f7f}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xafc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffb140}]}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78df}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xce4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x761}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r5, &(0x7f0000000340)={&(0x7f0000000140)={0xa, 0x4e21, 0x7, @mcast2, 0x8000}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="6749dfefd17c846ca40e0f3c62a5814b212b21c03ca8b61a2c81386cda29217057898933c7dd10d89ef725a894e2ea4c0814eb25b3cdc4d369625cb45bc43002a365e080e09deed525a9ebcc35bbf7b42a59d08e390f6fe94dac4a38c86ae1f48bb6ba253b1c897101e1e70df26218fe08ad7fde1cc87c679b04f09fc04c9210cec419be12bbaad6fb2c481868b926e43717056849a394bcb3ff6d7533e205ea5fb330bcd3e7edc37f073ee420c07bde94ed2e22e47c37533a3962c72204ef1c2a7f7f0dbba47e6ec0a145a6031ac49b9e91854ecddda35c3973fd079452", 0xde}, {&(0x7f0000000280)="e9395466140e3da2e8fc045eb9b70f63828b5d2ac2dedef3a688385d8037beafb2cb18de90ccf2e2f1256e4fae783290b9bbb4472b23698dd0", 0x39}], 0x2}, 0xc4) 2.069739851s ago: executing program 2 (id=552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'pimreg\x00', 0x2000}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004000)=@deltfilter={0x243c, 0x2d, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xe, 0x7}, {0xa, 0xd}, {0x9, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x23fc, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x500000000000}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}]}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}, @TCA_CGROUP_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x612d, 0xfffffffffffffffc, 0x4de5, 0xffff, 0x5, {0x2, 0x0, 0x9b, 0x1, 0x101, 0x401}, {0x76, 0x0, 0xf3f7, 0x7, 0x85, 0x6}, 0x7fff, 0x5, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}]}, @TCA_CGROUP_ACT={0x2374, 0x1, [@m_skbedit={0x140, 0x10, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffff5f}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x101}]}, {0xfa, 0x6, "33be8e6771447428644ca1059bba4e3de3c76a839ceeb2c74079fde61406300e3f5f590b880f133b6a696c55ec3c6194f9f52db5fd9048a7b3b8316c4b8464e8e3acb129b62004b5fab42b90bcb4536cedfb0b8727d61f3949f86ea968fe57e8105f9a1d8fc1ff88921feadf674a18a08506c4824d1e3df6d0f42f0061197d1af6062d4c8a2f9de790a2a43da5fea977b231f924963da747dd4ed5db8761791b5004eb55cb4790719066a5a4c23d737efc1bb7677829b008ef462329eb10931616afd3bf698a985bb50ae348f5c7cf79220537bbb0417f3bb66108407251ef6ee75f1a68636e26c80c9bf63a4a92b2524947193e47f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x12c, 0x1f, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0xdc, 0x6, "a91ffc545a38d52ed8937a9513b57aceb5832495e6a98043cb27bbeb2cb7e71bb3c77b0bfaf369350cdae65b2561d45c077eacb4e355832e1dd7615c85ff5f46bedbaaf442513f177ba53b9eda8f2c5a42d64b4fb56acf3edb95a21cd1ac27d5765b4e0cf8af87a0eaed4799638ec43b990a2e2a5b72f0ea8f9fd618464d6657245145e53ff9c02ca2edd87194e001be62deea19afba6826c70beb43d7e51fa85f47216709639b67fa8e3c5abbda4e9aafde0b031c5f5d55fb0619a3150e6124b8817cb4235474454fc44e5b6ca3c26162fb41b6a61829da"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x90, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x67, 0x6, "9649d7efbe77021bd4503e72d3c971eac667156db26d31e401c7cdab1a3a53c34195e9f9978fcb41b2f3bb0e49dc4ab1e41b68aa0338b791b30a5f0fdc25fdf14131c54053d54357ebfe8b9ebba366dbc6036bc2561aa4957ede5aa6f4090f22be7aaf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x1d10, 0x0, 0x0, 0x0, {{0xb}, {0x1cdc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xe6bb, 0x6, 0x81, 0x585, 0x6, 0x2, 0x1, 0x4, 0x4, 0x51, 0x3, 0x4, 0x9, 0xc3, 0x860, 0x7, 0x6, 0x5c1c, 0x7, 0x9, 0x20000000, 0x9, 0x2, 0x9, 0x6, 0xb, 0x1000, 0x5, 0x7, 0x8, 0xe, 0x8, 0x1, 0xfffffff7, 0xffffffff, 0x59dcdf06, 0x80000001, 0x7, 0xfffffbff, 0x6, 0x1, 0x0, 0x9, 0x4de1, 0x1, 0x4, 0x1, 0x6, 0x82b, 0x8, 0x903, 0xf2a, 0xc, 0x3, 0x3, 0x1, 0x7ff, 0x46a63341, 0x1, 0x9, 0x6, 0x18000, 0x6, 0x8, 0xfffffffe, 0x4, 0x0, 0xf248, 0x7, 0x5, 0x7, 0x3, 0xed, 0x5754, 0x3, 0x1, 0x2, 0x2, 0x7, 0x3, 0xb, 0x6, 0x55247e30, 0x9, 0x7, 0x1, 0x11, 0x800, 0x9, 0x2, 0x0, 0x6, 0x4, 0x8, 0x3, 0x80000001, 0x0, 0x4, 0xffffffff, 0x4, 0x0, 0x1800, 0x7fffffff, 0x6, 0x1, 0x80000000, 0x9, 0x8, 0x7, 0x2d4, 0x0, 0x0, 0x90000, 0x8, 0xfffffffb, 0x4, 0x8000, 0x101, 0x7, 0x1, 0xfffffffc, 0xfffff001, 0x2, 0x18000, 0x7, 0x2, 0x0, 0xf5d, 0x9, 0x9d, 0x5, 0xd, 0x6, 0x1, 0xfffffffe, 0x1000, 0x3, 0x401, 0x168f, 0x5, 0x1, 0x0, 0x3, 0xce, 0x101, 0x7, 0x4fd3, 0x10001, 0x1, 0x1ff, 0x6, 0x800, 0xf, 0x0, 0x9, 0x69, 0x0, 0x3, 0x4, 0x80, 0x9aa, 0x0, 0x79, 0xd76d, 0x7, 0x80000000, 0xc76a, 0x81, 0xd, 0xffffff7f, 0x4, 0x0, 0x9b, 0x4, 0x0, 0xb531, 0x8000, 0xe8, 0x10001, 0x1, 0x8, 0x2, 0x3e, 0xafd4, 0x7, 0xed1, 0x1aa5, 0x101, 0x9, 0x1, 0x7, 0x6254, 0x8, 0x0, 0x8, 0x5, 0x2, 0x80000001, 0x4, 0x0, 0x7, 0xd6b2, 0xffff, 0x3, 0x0, 0x7, 0x7f, 0x6, 0x8, 0x2, 0x7, 0x767b, 0x0, 0x5e9, 0x8, 0x7fff, 0x1, 0x2b0e, 0x6, 0xcb, 0x75, 0xd1b, 0x8, 0x3, 0xfffffffb, 0x1, 0x5, 0x1, 0x10000, 0x7, 0x400, 0x9, 0x8, 0x9, 0xffff8001, 0x4, 0xdabd, 0xff, 0x1, 0x3, 0x29, 0x4, 0x81, 0x6, 0x8, 0xe, 0x8, 0x5, 0x600000, 0x5, 0x5, 0x6, 0xffffff7f, 0xfffffff9, 0xfff, 0x91]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7fff, 0x2, 0x8, 0x6, 0x7fff, 0xb, 0x7, 0x7, 0xff, 0x585, 0xffff, 0x8, 0x5, 0x7aeb, 0x8, 0x1, 0x38, 0x2, 0x703a, 0x7, 0xffffffff, 0x6, 0x1, 0x81, 0x5, 0x1, 0xf6e, 0x0, 0xffffffff, 0x8000, 0x5, 0x5, 0x6, 0xc42e, 0x3, 0x1, 0x2, 0x6, 0x9, 0x400, 0x1, 0xf, 0x9, 0x2, 0x4, 0xf, 0x2, 0xa455, 0x644f, 0x5, 0xbfd, 0xc, 0x8, 0x1c000000, 0xfffffffe, 0x0, 0x100, 0x97a, 0x7, 0x4, 0xfff, 0x100, 0x9, 0x5, 0x9, 0x9, 0x6, 0x7, 0x3ff, 0x100000, 0x10000, 0xffff710a, 0x7, 0x2, 0x1, 0x0, 0x3, 0x80000000, 0xfffffffe, 0x3ff, 0x3, 0xd17, 0x3, 0x2, 0xba, 0x6f64, 0x7, 0xfff, 0x9, 0x1, 0x6, 0x6, 0x2, 0x2, 0x7, 0x400, 0x6, 0x100, 0x3, 0x1, 0xa85, 0x3, 0x4, 0xb2, 0xd, 0x6, 0x71cf, 0x2, 0x9, 0x3, 0xfff, 0xffffffff, 0xb, 0x7, 0x8, 0x3, 0x7fff, 0xd, 0xff, 0x5, 0xff, 0x8, 0xfffffff6, 0x5, 0x7ff, 0x8384, 0x1, 0x4, 0x10, 0x101, 0xff, 0x4e3, 0x7fffffff, 0x3, 0x5, 0x8, 0x2e, 0x7, 0x7, 0x3e4f, 0x2, 0x2, 0x852, 0x0, 0x64d1, 0xcc5, 0xffff7fff, 0x40, 0x4, 0x9, 0x1, 0x80000000, 0xffff6b8f, 0x500, 0x451df506, 0x9, 0xd, 0x2, 0xfffffff9, 0x8, 0x2, 0x8, 0x4, 0x9, 0xc, 0xe, 0x9, 0x9, 0x4, 0x2, 0x1, 0x5, 0x48, 0x401, 0x7, 0x3, 0x8, 0x6, 0xb, 0x9, 0x5, 0xe8b0, 0x4, 0x9, 0x477, 0x1, 0xfffffff2, 0x2, 0xcf5a, 0x0, 0x3, 0x84, 0xfffffffa, 0x8000, 0xc0ff, 0x1000000, 0x7, 0x7, 0xfffffffc, 0x7, 0x3, 0x1, 0x80000000, 0x0, 0x0, 0x421, 0x1, 0x3, 0x6, 0x5, 0xe537, 0x4, 0x101, 0x9, 0x63, 0x7, 0x4, 0x4, 0x6, 0xd5b, 0x1bf, 0x3, 0x0, 0x8, 0x1, 0x6, 0x8, 0x800, 0xfffffff8, 0x7, 0x0, 0x3, 0x7ff, 0x3, 0xb0426d77, 0x7, 0x80000001, 0x0, 0x10001, 0x9, 0x49, 0x8000, 0x1, 0x4, 0x5, 0x2, 0x2, 0x10, 0xee1, 0x9, 0x9, 0x8, 0xfff, 0x6, 0x401]}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x259de124, 0x7, 0x8d, 0x6, 0x400, {0x5, 0x0, 0x9, 0x281, 0x2}, {0x8, 0x0, 0xffff, 0x3c7d, 0x6, 0x6}, 0xfff, 0x1, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x9, 0x6, 0x3, 0x200, 0x0, 0x4, 0x7, 0x7, 0x0, 0x10, 0xffffffff, 0x4, 0x5, 0x5, 0x8, 0x4, 0x0, 0xfffffffa, 0x8, 0x2, 0x5, 0x1, 0x1, 0x5, 0x4, 0x2, 0x686, 0x0, 0xd8, 0x401, 0xffff, 0xfffffffb, 0x8, 0x4, 0xe, 0x80, 0x2, 0x9a, 0x7, 0x3, 0x4, 0x7ae, 0x7f7d60fb, 0xdab4, 0x9, 0x3ff, 0x5c0, 0x2, 0x8, 0x9, 0x5, 0x6, 0x2f41, 0x1e, 0x3, 0x0, 0x9, 0x0, 0x5, 0x2, 0x2, 0x8, 0x100, 0x5, 0x29, 0x3, 0x7, 0x1, 0x6, 0x6d50, 0x7, 0xfffffff6, 0x7, 0x6258, 0x1, 0x7fff, 0x3, 0xc, 0x1, 0xb43, 0x5, 0x7, 0x3, 0x6, 0xfffff0ec, 0x8000, 0x1ff, 0x3, 0x80000000, 0x7, 0x8000, 0x6, 0x1, 0xe8, 0x7ff, 0x7ff, 0x7fff, 0x922, 0x75041c4d, 0x800, 0x1, 0x0, 0x9, 0x7f, 0xc, 0x7, 0x0, 0x10000, 0xf, 0x5, 0x6, 0x80, 0x7, 0x4, 0x9, 0x8000, 0x7, 0x7, 0x3, 0x10, 0xdf70, 0x0, 0x7, 0x4, 0x4, 0x3, 0x7, 0x1, 0xffffffff, 0xfffffb66, 0x7, 0xfffffffe, 0x5, 0x7, 0x530c, 0x1, 0x7360, 0x6, 0x81, 0x0, 0xd, 0x3, 0x2, 0x1, 0x80, 0xd, 0x3, 0x7, 0x41fb, 0x6, 0xf, 0x6, 0x800, 0x10, 0x3, 0x30, 0x3, 0x5, 0xb, 0x0, 0x0, 0x8, 0x8, 0x4, 0x4, 0x0, 0x1ff, 0xc, 0x8, 0x9, 0x1, 0x0, 0x2, 0x7f, 0x1, 0x40, 0x2, 0x1, 0x4, 0x6, 0x0, 0x9, 0x0, 0x44, 0x3ff, 0x6, 0x101, 0xd21, 0x6, 0x3, 0x5, 0x8, 0x2, 0x1, 0x7ff, 0x4, 0xa, 0xfffffffc, 0x8, 0x61, 0xc72, 0x4, 0x1000, 0x11e, 0x6, 0x5c46, 0x7, 0x0, 0x1, 0xfff, 0xa, 0x7, 0xbe91, 0x6, 0x3ff, 0x2, 0x0, 0x4, 0x7fff, 0x100, 0xbd, 0x7, 0xfffffbff, 0x0, 0x1, 0x4, 0x1, 0x9, 0x3, 0xa1bc, 0xe513, 0x73a0ca1e, 0x9, 0x2, 0x5374, 0xa13a, 0xfffffffd, 0x7, 0x5, 0x7, 0x8bb, 0x1, 0x1ff, 0x7, 0x401, 0xe, 0x200, 0x9, 0x5, 0x5, 0x5, 0x1ff, 0x401, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x400, 0x2, 0x10000, 0x86e6, 0xdb, 0x7, 0x0, 0x3, 0x8000, 0xc, 0xfffffffb, 0xf0, 0xa2, 0x2, 0x9, 0x2, 0x9, 0x4, 0x3, 0x1, 0x5, 0x184, 0x2, 0x16261a13, 0xe, 0x4dc4, 0x9, 0x1, 0x9, 0xff, 0x3, 0x201, 0x0, 0x5, 0xb44d, 0x9, 0x4, 0x1, 0x4ed, 0x5, 0x4, 0x2, 0x9b24, 0xa6, 0xfffffffa, 0x10001, 0x7, 0x9ae1, 0x7, 0x1, 0x7, 0x9, 0x3, 0x9, 0x8, 0x2b6, 0xe, 0x6, 0x1, 0x8, 0xffff, 0x5, 0x6, 0x0, 0x3, 0x1, 0x1, 0x1, 0xa8c00000, 0x7, 0x7, 0x1, 0xbf59, 0x5, 0x6, 0x1, 0xf1e, 0xd, 0xeb5, 0x6, 0x2, 0x40, 0x3d2, 0x9, 0x5, 0x7, 0x9, 0x3, 0x3, 0x9, 0x0, 0xfffffffe, 0x80000000, 0x1, 0x69, 0x3, 0xffffffff, 0x6, 0x0, 0x8, 0xfffffffd, 0x9, 0x7, 0x4, 0x7, 0xffff7fff, 0xfffffff9, 0x7, 0x3f0, 0x9, 0x1, 0x10000, 0x7, 0xfffffffe, 0x4, 0x2, 0x8, 0x2, 0x5, 0x8, 0x5, 0x3, 0x400, 0xd4, 0x2, 0x8001, 0x7, 0x0, 0xffff, 0x401, 0x5, 0x37a5, 0x1, 0x6, 0x5, 0x6, 0x7, 0x28f, 0x1, 0x4, 0x5, 0xffffffff, 0x1, 0xfffffffb, 0x8cd, 0xfffffffd, 0xe97, 0x5, 0xfffffff9, 0x10, 0x0, 0xffff, 0x0, 0x4, 0x8266, 0xfff, 0x6, 0x8b89, 0x7, 0xf07d, 0x6, 0x2, 0x1000, 0x5, 0x6, 0x5, 0x4, 0x0, 0xffffff7f, 0xf0f, 0x5, 0x1ff, 0x6b6, 0x80, 0xada, 0x3, 0x2c1, 0xffffffff, 0x5, 0x3, 0x6, 0xfffffff9, 0x6, 0xe, 0x8, 0x6, 0x0, 0x400, 0x8, 0xd9, 0xb73a, 0x8, 0x6, 0x8, 0xd8, 0x4, 0x5, 0x7, 0x0, 0x7, 0x200, 0xffffb15c, 0x3, 0x3, 0x8, 0x1, 0x4, 0x3, 0x1ff, 0x8000, 0x18000000, 0x10000, 0x2, 0x80000000, 0x7fff, 0x5, 0x0, 0x8001, 0x2, 0x1, 0x10001, 0xfe3, 0x1, 0x400, 0xfffffffc, 0x7fffffff, 0xcc44, 0x9, 0xe000000, 0x67, 0x10000, 0x9069, 0x0, 0x1, 0xd11, 0xfffffff8, 0x8000, 0x5a222e4e, 0x5, 0x7fff, 0x10, 0xffffffff, 0xfffffffc, 0xffffffc0, 0x4, 0x4, 0x4, 0x0, 0x0, 0x9, 0x4, 0x2, 0xffffffff, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x80000001, 0x4, 0x4, 0x5, 0xffff, 0x80000000, 0x9, 0x7, 0x5, 0x0, 0x400, 0x9, 0x0, 0x80, 0xef70, 0x9, 0x2, 0x4, 0x9, 0x1ff, 0x5, 0x401, 0x4, 0xffffffff, 0x1, 0x1, 0x4, 0x401, 0x1ff, 0x5, 0x9, 0x6, 0xa73, 0x10001, 0x7, 0x0, 0x1, 0xc, 0x6, 0xda62, 0xffff, 0x8, 0x1, 0x9, 0x3, 0xfffff7ed, 0xf, 0xfffffff9, 0x5, 0xfffffffe, 0x2, 0x4, 0x9, 0x6, 0x4, 0x3, 0x5, 0x7ff, 0xee8, 0x5, 0x4, 0x7, 0x1, 0x7, 0x7, 0x3, 0x9, 0x5, 0x3ff, 0x1, 0x80000001, 0x10000, 0x88, 0xc, 0x7, 0x7, 0x34f7, 0x5, 0x4, 0x7, 0x8, 0x6, 0x4, 0x4, 0xffffff80, 0x1, 0x80000001, 0xee3, 0xfffffffe, 0x7469, 0x9, 0x6b15, 0xb, 0x3, 0x8, 0x2, 0x8, 0x5, 0xe, 0x1000, 0x5, 0x0, 0x10001, 0x5, 0x3a7f, 0x3, 0x81, 0x8001, 0xc, 0x3, 0x3, 0x60000, 0x8, 0x0, 0x9, 0x400, 0x8, 0x4a03, 0x3, 0x3, 0xce, 0xd1df, 0x0, 0x10001, 0x7, 0x4, 0x0, 0x1, 0xab4, 0x5, 0x376, 0x5, 0x4, 0x800, 0x3, 0xf4, 0x10000, 0x1, 0x3, 0xa, 0xc4a, 0x2, 0x10, 0x7, 0x2, 0x27, 0x10001, 0x6, 0x6, 0x7, 0x6, 0xc4, 0x8000, 0x0, 0x7fffffff, 0x1, 0x3, 0x101, 0x3, 0x3, 0x6, 0x5, 0x10, 0x8, 0x2, 0x1, 0xbd, 0x1, 0x4b7adeae, 0x47, 0x5, 0xbe77, 0x44b, 0x8b, 0x1, 0x7, 0x2, 0x972, 0xc07, 0x279f, 0x4, 0x7, 0x8, 0x6, 0xfa, 0xc, 0x80000000, 0x86, 0x0, 0x7, 0x7, 0xf, 0x4, 0x4, 0x476c0da1, 0xffffb982, 0x5, 0x81, 0x6, 0x4, 0x2af9, 0xf231, 0xfffffffb, 0x7, 0x401, 0x4, 0x4, 0x6, 0x6f, 0x7, 0x9, 0xed0d, 0x5, 0x0, 0xf4c, 0x7, 0x101, 0x2, 0x8695, 0x7, 0x1, 0x9, 0x6, 0x6, 0x9, 0x5, 0x10, 0x7, 0x1, 0x4, 0x4, 0x8, 0x8, 0x4, 0xa941, 0x200000, 0x4, 0x7, 0x3, 0x2, 0x7fffffff, 0xffffffff, 0x7e, 0x3, 0x3, 0x6, 0x8, 0x7c7, 0xc, 0x276e, 0x7f, 0x6, 0x6, 0x8, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0xd, 0x400, 0x6, {0x6, 0x0, 0x3, 0x4ab, 0x8, 0x7}, {0x8, 0x2, 0xd, 0x1ff, 0x2, 0x20000}, 0x800, 0x9, 0x4}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x27523ae1, 0x101, 0x0, 0x2, 0x9, 0xffffff94, 0x8, 0x5, 0x2, 0xfff, 0x3, 0x10, 0x401, 0xfffffff9, 0xff, 0x3ff, 0x5, 0x0, 0x3e8f, 0x7cd2, 0x7, 0x7da, 0x9, 0x3, 0x3, 0xf9, 0x2, 0x6, 0xffff, 0x9, 0x8, 0x9, 0x7fff, 0x5, 0x8, 0xf, 0xfffffff8, 0x9, 0x0, 0xfff, 0x10, 0x8001, 0x0, 0x8, 0x1000, 0x10000, 0x0, 0x9, 0x8, 0x862d, 0x9, 0x3, 0x7, 0x7, 0x89c, 0x9, 0x4, 0xe8, 0x9, 0x4, 0x8, 0x1, 0x2, 0x8621, 0x8, 0x8, 0x7fff, 0x2, 0x3, 0x592f, 0x401, 0xfffffff2, 0x80, 0x1, 0xb, 0x7, 0x6, 0x6, 0x3, 0x8001, 0x7fffffff, 0xc, 0xb8b, 0x1, 0x6, 0x8000, 0x7, 0x400, 0x1, 0x2, 0x100, 0x42, 0x8, 0x8000, 0x8, 0xd8, 0x69c, 0x9, 0xffff0000, 0x1, 0x0, 0xfffeffff, 0x2, 0x4162, 0x4b5, 0x2, 0x6, 0x2, 0x5, 0x876c, 0x9, 0x9, 0x2, 0x0, 0xf1, 0x6, 0x10000, 0x3, 0x3, 0x401, 0xc, 0x9, 0x6, 0x8, 0xffff8000, 0x7, 0x3, 0x9, 0x9, 0x2, 0x7, 0x3ff, 0x7, 0x6, 0xff, 0x0, 0x2, 0xf, 0x9, 0x6, 0x0, 0x8254, 0x3, 0xffffffff, 0x7ff8, 0xffff, 0xffffc000, 0xffffffff, 0x5c0a, 0x40, 0x10001, 0x8, 0x1, 0x0, 0x4, 0x4, 0x7ff, 0xaf, 0x8, 0x2, 0xda, 0x7, 0x2, 0x5bf3f7b7, 0xef9, 0x9, 0x0, 0x2, 0x10000, 0x7ff, 0x9, 0xfffffffd, 0xaea, 0x8001, 0x3, 0x0, 0x8, 0xb12a, 0xde, 0x1, 0xf, 0x0, 0x401, 0x80000001, 0x4, 0xffffff24, 0x9, 0xb1e, 0x8, 0xff, 0xfffff800, 0x1, 0x10, 0x5, 0x312, 0x8ae, 0x1, 0x58, 0x7, 0x7fff, 0x0, 0x1, 0xa, 0x6, 0x7, 0x6, 0x1, 0x0, 0x1, 0x4, 0x2, 0x3857eb5e, 0x401, 0x4, 0x8, 0xa6c, 0x2, 0x4, 0x0, 0xa, 0x27, 0x7, 0x4, 0x5, 0x1, 0x4, 0x100, 0x6, 0x7, 0x1, 0x10001, 0x9, 0xea, 0x5, 0x1, 0xdd6, 0x6, 0x1, 0x4, 0x7fff, 0x77, 0x1, 0x41, 0x3, 0xffffff6d, 0x9, 0x3, 0x0, 0x2, 0x0, 0x2, 0x1, 0x7aae, 0x6, 0x8, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3b48, 0x1ff, 0x7ff, 0x8, 0x346503be, 0x3, 0x7, 0x9, 0x9, 0x7ff, 0x6, 0x4, 0xff, 0x1, 0xffffffff, 0x2, 0x6, 0x0, 0x7, 0x8000, 0x36c, 0x4976, 0x7, 0xfffffff7, 0x0, 0x8, 0xf9f, 0xffffffff, 0x4, 0x8, 0x7, 0x8, 0x9, 0x3, 0x7, 0x4, 0x5, 0x3, 0x5, 0x0, 0x6, 0xffff, 0x56, 0x4, 0xdd9, 0x53, 0x0, 0x4, 0x8, 0x46, 0x101, 0x3, 0xa, 0x1, 0x58, 0x9, 0x9eff, 0x2, 0x7fffffff, 0x1, 0x1, 0x9, 0x5, 0x7901076f, 0x7, 0x6, 0x4, 0x80000001, 0x6, 0x6, 0x1, 0x1, 0x7, 0x100, 0xc69, 0x7, 0x1, 0x1ff, 0x4, 0x0, 0x3, 0x0, 0x4, 0x7, 0x6, 0x4, 0x6, 0xb, 0x2, 0x1, 0x3, 0x0, 0xa, 0x6, 0x8, 0x4, 0x7, 0xffffff80, 0x5, 0x5, 0xf0, 0xfb11f0e6, 0xb, 0x6, 0x6, 0x80000000, 0x5e, 0xc5c, 0x6e38a4a6, 0x1, 0x4, 0x2, 0x4, 0x2, 0x3, 0x9, 0x0, 0x7, 0x36, 0x1ff, 0x10, 0x80000000, 0x7fff, 0x5, 0xf78, 0x837, 0x7fff, 0x1b, 0x4555, 0x2, 0xf, 0x1, 0x8, 0x7f, 0x3, 0x2, 0x4, 0x3, 0x8, 0xd, 0x3, 0x91, 0xffffff81, 0x800, 0xe8, 0xfffffffb, 0xfffffbff, 0x1ff, 0xfbf8, 0x3, 0xa, 0x4, 0x5, 0x9, 0x8d, 0x4, 0x2, 0xffffffff, 0x7fffffff, 0x5, 0xf, 0x7ff, 0x1, 0x4, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x5, 0xf795, 0xdf, 0x1, 0x3, 0x2, 0x92, 0x9, 0x4, 0xa, 0x7, 0xb0d0, 0x9, 0x1, 0x101, 0x1, 0xf, 0x6, 0x2, 0x7, 0xb, 0x7ff, 0xb0000000, 0x800, 0x1, 0x2, 0x3, 0xf, 0x8e, 0x200000, 0xfffffff3, 0x80000001, 0x2, 0x200, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x5, 0xa, 0x0, 0x8, 0xd, 0x2, 0x5, 0x0, 0x7fff, 0x8000, 0x10000, 0xe, 0xb, 0x3, 0xfffff052, 0x5, 0x3b2, 0xfff, 0x4680000, 0x5, 0x6, 0x7, 0x10, 0x0, 0x5, 0x379, 0x2, 0x7ff, 0x6, 0x8, 0x94, 0x1c, 0xfffffffb, 0x101, 0x9cd40000, 0x850, 0xd, 0x6e3c, 0x89, 0x1, 0x4, 0x6, 0x5, 0xc2fb, 0x6, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]]}, {0xc, 0x6, "a61e5fff0b0ddf46"}, {0xc}, {0xc, 0x8, {0x3, 0x4}}}}, @m_ife={0x7c, 0xe, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x1, 0x3, 0xa}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xa4, 0xc, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d89}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18dd, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x8, 0x5, 0x4, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x216a, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x932, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x4, 0x3, 0x2000, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1369, 0x5}}]}, {0xc, 0x6, "1c519fdeca3d1d68"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0xe4, 0xa, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xc02f, 0x4, 0x7, 0x8, 0x5}, 0x1}}]}, {0x71, 0x6, "5825227d9fe21ec9a448c6878ac509987d2e8dc7125308d28ee8bc2dc29574c1c76f3f49e41803d450d986e651784e11a5eff2d3296946a4de872bfbe63d4a44f5f19a5a3e46e4fc7d5f406348bb36dd36e9fac3a20f2cd88c0b153f9d01593955ee4e9733f9e50b0c4006b104"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x160, 0x10, 0x0, 0x0, {{0x8}, {0xac, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="b4c2ed8b0fe8"}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xe}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x490}]}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0xab50}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x6c}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x8f, 0x6, "b473c34e23d49fbb74d0121fa4bad37d1dc602a95d1c075b8a8a605b4456e58288b5df459ef9bc95b9c02d8c8be0f3c3abe8cd8cfbf337316125031dd3a4774a78c1b2df947a148831492bd1bc48211abfaa62b1c798b855af6b98308120e4497d9c042a23001e6a4594b96b2168e1e7baf6bff9cb8de828c7343692a89ef68654e9b3e34cd9cb5655a016"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x243c}}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r16 = socket(0x400000000010, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r18, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r19 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r19, 0x4004ae99, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r19, 0x0) 1.994420205s ago: executing program 0 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket(0x1, 0x1, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000400)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000250009012cbd7000f9ffffff02000000080003004700000008003f00", @ANYRES32, @ANYBLOB="14aded0fcd924b4edbc70cd9f5723a1a3d7f2766debfbb091f7b4e0e9a336476bfb0afc4b0037f576c85da456b4ca9c4a7c5f962e9e7ddbb7dfd4a306587cae015fc11fa7e1b0bf085887c3132ac7b31b7555423eb351d08390468106a207b67b03004175aa2f2c7869671f0986b6dbaf50c70196ca3514865a566f7a9f46ffe870d7ecd662cfcb25ddf1492c92fa189e52c141a7c41642be0d58cc915d83afe1be2c52ae1eb03ada9feb4b5f8be1dcb406e5fd2074146"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$AUDIT_SET(r8, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfe, {0x70, 0x0, 0x1, 0x0, 0xde5f, 0x7f, 0x7, 0x10000b, 0x0, 0x40, 0xfb2b}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8884) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) clock_gettime(0x0, &(0x7f0000000080)) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) sendmmsg(r10, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 1.721013114s ago: executing program 2 (id=554): openat$kvm(0xffffffffffffff9c, 0x0, 0x401, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0xf0ffff, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 1.361955256s ago: executing program 3 (id=555): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newqdisc={0x294, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x1a4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5, 0xfffe, 0x0, 0x2, 0x3a131dbb, 0xbb, 0x5}}, {0xe, 0x2, [0x1, 0xff, 0x0, 0x1000, 0xf3a]}}, {{0x1c, 0x1, {0xba, 0xa, 0x5, 0x0, 0x0, 0x90, 0x8, 0x6}}, {0x10, 0x2, [0x1535, 0x188a, 0xd, 0x4, 0x1, 0xffff]}}, {{0x1c, 0x1, {0x1, 0x2, 0x0, 0x38000000, 0x1, 0x22a, 0x7, 0x4}}, {0xc, 0x2, [0x4, 0x0, 0xa, 0xffff]}}, {{0x1c, 0x1, {0x1, 0x3, 0xfff8, 0x80, 0x2, 0x2, 0x9, 0x5}}, {0xe, 0x2, [0x9, 0x4, 0xe, 0x0, 0x138a]}}, {{0x1c, 0x1, {0x2d, 0x4, 0x9, 0x5, 0x2, 0x0, 0x1, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x9, 0xfa, 0x7, 0xb41, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x2, [0x401, 0x200]}}, {{0x1c, 0x1, {0x4, 0x3, 0x2, 0x3, 0x0, 0xff, 0x9, 0x8}}, {0x14, 0x2, [0x800, 0x6, 0x3, 0x0, 0x9, 0x1, 0xffff, 0x349]}}, {{0x1c, 0x1, {0x7, 0xe, 0x9, 0x1, 0x0, 0x9, 0x1, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xaa, 0x3, 0x400, 0x7, 0x0, 0xe85de45a, 0x800, 0x8}}, {0x14, 0x2, [0x9, 0xa, 0x7, 0xaf5a, 0x5, 0x6, 0x8000, 0xe]}}, {{0x1c, 0x1, {0x2, 0xff, 0x1000, 0x7, 0x2, 0x6ada, 0xffffffb5, 0x3}}, {0xa, 0x2, [0x800, 0x7ff, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0xf3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0xd4, 0x54, 0x0, 0x2, 0x6, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}]}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x9, 0xffffffff, 0x2, 0x2, 0x4}}, {0x4}}, {{0x1c, 0x1, {0xfe, 0xd, 0x0, 0x1, 0x0, 0x1f0b, 0x9, 0x6}}, {0x10, 0x2, [0x4, 0x4, 0xdbd9, 0x0, 0x5, 0x2]}}, {{0x1c, 0x1, {0x6, 0x7, 0x1, 0xf, 0x2, 0xffff, 0xc20d, 0x4}}, {0xc, 0x2, [0x2, 0xff00, 0xfe, 0x7080]}}]}]}, 0x294}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.145248331s ago: executing program 4 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x2c0400d2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x401, 0x12, r3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 1.125922963s ago: executing program 3 (id=557): dup(0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x200008c0) sendmsg$kcm(r0, 0x0, 0x0) close(r0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000003c0)={0x2, 0x100, 0x1}) 1.055005029s ago: executing program 0 (id=558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x214, r1, 0x1}) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f00000001c0)=0x101, 0x4) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) close(0x3) 1.053446658s ago: executing program 3 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = geteuid() quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000200)=@nullb, r2, &(0x7f0000000280)) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK/file0', [], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145"}, 0x59) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x1000, 0xfffffffffffffffc, 0x6, 0x7fffffff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4044) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 684.582716ms ago: executing program 0 (id=560): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400181, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b04, 0x0) io_uring_setup(0x7939, &(0x7f0000000580)={0x0, 0x6e0, 0x2, 0x0, 0x212}) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x20000) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900), 0x0, 0x0) r5 = userfaultfd(0x80001) r6 = syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0xbc324a77b820f988, 0x66, "9a8ca8a24783de6d3b11219984f08c0a88776d1c356d1c4cd15665ca7ca3183f1c801e3f8c7b2ccd44b06f1ff613a8758abd2d8f9106e156d23a21c7d72970bc27732b13cd5d1e964d7032848b164e5c57f05b236e5378cf80350df97d1d4b5988032e40a44e"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x10, 0x80}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xa}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '1f'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="d3ed0f1553ec"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "f902"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x7b}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xb}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000001000/0x2000)=nil, 0x2000}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r7, 0x5453, 0x0) 662.148625ms ago: executing program 4 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000096900001202060000052406000005240000000d240f01000000000200000004090582020002000000090503020002000000fdce69b02b83eb9adf764cf59aea2f2066ea94a53821859389a8669fff4488735d243088e7404a934e99433761bb34f802a514540f22375b695662f5d64a98cc7902116f55df2e57570e7615219e53c347f45b7aa25eec093f4129dd4f545ca442f4888cecf0958db0a196214885a2b7229dd7c7b65d2a1a863ce2c3f814394a483ee0227772e9"], 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x20000080) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x97, "76e1af35bf91d0ae9384217730f21dab0cbca9e4bbc242d7db96649f68fce84ecbdf746d35d17e91d67d667632a98bacf058105ca76898de9d7e195a65f681d5685f54964c63032d2fa85ac15d9bf39e71e947ecf16eb96642fc5d8da676ddc36e0a14a62a7de394e373179c3b6a3e570f825bac00d460c6da506a3b4c129fae019b1b9d327c0e62490a185f45c2525c61590b519957d8"}, &(0x7f0000000040)=0x9f) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r4, 0x8}, &(0x7f0000000340)=0x8) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) 623.906965ms ago: executing program 1 (id=562): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x0, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 537.227864ms ago: executing program 3 (id=563): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101302, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x9) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x8000fffffffc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) 319.102639ms ago: executing program 2 (id=564): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000000000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) move_pages(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000), 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x15b, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 218.743835ms ago: executing program 2 (id=565): socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_rr_get_interval(r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x0, @multicast2}}) 0s ago: executing program 2 (id=566): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xfffffffffffffff0, 0x8000000020008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000380)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, &(0x7f0000000140)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000180)={0x40900, 0xb0, 0x4}, 0x18) openat(r3, &(0x7f0000000080)='./file1\x00', 0x48943, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x182, 0x6be) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x24040, 0x2f) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000280)={0x100, r7}, 0x0) close(r7) close(r6) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): onfig register raw data: 0xfffffffb [ 125.692415][ T5853] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 125.738122][ T5853] em28xx 2-1:0.0: No AC97 audio processor [ 126.481752][ T5808] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.672108][ T5808] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 126.689226][ T5808] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 126.711544][ T5808] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 126.736063][ T5808] usb 5-1: config 220 has no interface number 2 [ 126.757252][ T5808] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 126.789162][ T5808] usb 5-1: config 220 interface 0 has no altsetting 0 [ 126.808817][ T5808] usb 5-1: config 220 interface 76 has no altsetting 0 [ 126.827374][ T5808] usb 5-1: config 220 interface 1 has no altsetting 0 [ 126.851258][ T5808] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 126.875577][ T5804] usb 2-1: USB disconnect, device number 6 [ 126.882755][ T5804] em28xx 2-1:0.0: Disconnecting em28xx [ 126.893566][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.914586][ T5804] em28xx 2-1:0.0: Freeing device [ 126.921528][ T5808] usb 5-1: Product: syz [ 126.930827][ T5808] usb 5-1: Manufacturer: syz [ 126.935460][ T5808] usb 5-1: SerialNumber: syz [ 127.036320][ T793] redrat3 4-1:254.79: Couldn't find all endpoints [ 127.053890][ T793] usb 4-1: USB disconnect, device number 7 [ 127.193130][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.199489][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.087706][ T5808] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 128.095066][ T5808] uvcvideo 5-1:220.0: No valid video chain found. [ 128.103529][ T5808] usb 5-1: selecting invalid altsetting 0 [ 128.167201][ T5808] usb 5-1: selecting invalid altsetting 0 [ 128.180023][ T5808] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 128.190642][ T5808] usb 5-1: USB disconnect, device number 3 [ 128.960138][ T6596] comedi comedi2: dt2814: I/O port conflict (0xcf7,2) [ 129.119641][ T6588] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 129.793913][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 129.804582][ T6601] fuse: Bad value for 'fd' [ 130.263243][ T6598] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 130.310087][ T5810] Bluetooth: hci2: command 0x0401 tx timeout [ 130.330151][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.728175][ T24] usb 1-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 130.877792][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.886065][ T24] usb 1-1: Product: syz [ 130.890406][ T24] usb 1-1: Manufacturer: syz [ 130.906039][ T24] usb 1-1: SerialNumber: syz [ 130.954738][ T24] usb 1-1: config 0 descriptor?? [ 131.001993][ T24] go7007 1-1:0.0: Sensoray 2250 found [ 131.024702][ T24] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 131.166661][ T6624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.182'. [ 131.284548][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 131.284563][ T30] audit: type=1400 audit(1771138265.115:332): avc: denied { mounton } for pid=6608 comm="syz.0.179" path="/26/file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.389561][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 131.399842][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.408475][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.449549][ T30] audit: type=1400 audit(1771138265.115:333): avc: denied { mount } for pid=6608 comm="syz.0.179" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 132.359724][ T30] audit: type=1400 audit(1771138266.185:334): avc: denied { create } for pid=6636 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 132.590151][ T5810] Bluetooth: hci2: command 0x0401 tx timeout [ 132.641503][ T30] audit: type=1400 audit(1771138266.215:335): avc: denied { write } for pid=6636 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 132.662072][ T30] audit: type=1400 audit(1771138266.415:336): avc: denied { read } for pid=6636 comm="syz.1.184" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.686026][ T30] audit: type=1400 audit(1771138266.415:337): avc: denied { open } for pid=6636 comm="syz.1.184" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.987652][ T793] usb 1-1: USB disconnect, device number 5 [ 132.990730][ T30] audit: type=1400 audit(1771138266.775:338): avc: denied { ioctl } for pid=6636 comm="syz.1.184" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.308940][ T30] audit: type=1400 audit(1771138266.805:339): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 133.560311][ T6651] netlink: 60 bytes leftover after parsing attributes in process `syz.4.186'. [ 133.583751][ T30] audit: type=1400 audit(1771138267.315:340): avc: denied { wake_alarm } for pid=6644 comm="syz.0.187" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.361849][ T30] audit: type=1400 audit(1771138267.325:341): avc: denied { append } for pid=6640 comm="syz.3.185" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.942331][ T6665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.192'. [ 135.028379][ T6667] netlink: 'syz.3.191': attribute type 4 has an invalid length. [ 135.210659][ T6671] QAT: Device 7 not found [ 136.510681][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 136.510692][ T30] audit: type=1400 audit(1771138270.345:348): avc: denied { mount } for pid=6693 comm="syz.2.200" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 136.550851][ T6695] netlink: 72 bytes leftover after parsing attributes in process `syz.2.200'. [ 136.608427][ T30] audit: type=1400 audit(1771138270.435:349): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 136.680066][ T5804] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.830176][ T793] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.888229][ T6703] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 136.962558][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 137.252616][ T5804] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 137.260861][ T5804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.271071][ T5804] usb 4-1: config 0 has no interface number 0 [ 137.277685][ T5804] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.293211][ T5804] usb 4-1: config 0 interface 85 has no altsetting 0 [ 137.327026][ T5804] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 137.336787][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.345574][ T793] usb 5-1: Using ep0 maxpacket: 8 [ 137.351492][ T5804] usb 4-1: Product: syz [ 137.356602][ T793] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 137.365148][ T793] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.375222][ T793] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.385015][ T5804] usb 4-1: Manufacturer: syz [ 137.389645][ T5804] usb 4-1: SerialNumber: syz [ 137.395386][ T793] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.407641][ T5804] usb 4-1: config 0 descriptor?? [ 137.459274][ T5804] appletouch 4-1:0.85: Could not find int-in endpoint [ 137.467210][ T793] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.481329][ T30] audit: type=1400 audit(1771138271.305:350): avc: denied { listen } for pid=6706 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.509298][ T5804] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 137.523223][ T793] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.537058][ T5804] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 137.548651][ T30] audit: type=1400 audit(1771138271.315:351): avc: denied { accept } for pid=6706 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.570055][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.653259][ T6681] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.167657][ T24] usb 4-1: USB disconnect, device number 8 [ 138.207972][ T30] audit: type=1400 audit(1771138271.315:352): avc: denied { write } for pid=6706 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.258234][ T30] audit: type=1400 audit(1771138271.605:353): avc: denied { create } for pid=6706 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.344554][ T793] usb 5-1: GET_CAPABILITIES returned 0 [ 138.371783][ T793] usbtmc 5-1:16.0: can't read capabilities [ 138.556918][ T5808] usb 5-1: USB disconnect, device number 4 [ 138.788198][ T6719] netlink: 60 bytes leftover after parsing attributes in process `syz.1.206'. [ 138.830059][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.053417][ T5928] kernel write not supported for file /139/net/sockstat6 (pid: 5928 comm: kworker/1:8) [ 139.370082][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.370103][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.390806][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 139.390851][ T24] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 139.390869][ T24] usb 3-1: Manufacturer: syz [ 139.488276][ T24] usb 3-1: config 0 descriptor?? [ 139.580132][ T5808] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.720412][ T5808] usb 4-1: device descriptor read/64, error -71 [ 139.916211][ T6730] overlayfs: failed to resolve './file1': -2 [ 139.944598][ T30] audit: type=1400 audit(1771138273.775:354): avc: denied { watch watch_reads } for pid=6729 comm="syz.4.211" path="/47/bus" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 139.980319][ T5808] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.038866][ T6718] FAT-fs (nbd2): unable to read boot sector [ 140.062416][ T30] audit: type=1400 audit(1771138273.865:355): avc: denied { mounton } for pid=6716 comm="syz.2.207" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 140.264137][ T5808] usb 4-1: device descriptor read/64, error -71 [ 140.480116][ T5808] usb usb4-port1: attempt power cycle [ 140.512199][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 140.519656][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 140.552372][ T24] usb 3-1: USB disconnect, device number 10 [ 140.656136][ T30] audit: type=1400 audit(1771138274.485:356): avc: denied { ioctl } for pid=6741 comm="syz.2.215" path="/dev/sg0" dev="devtmpfs" ino=749 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.706100][ T6741] mmap: syz.2.215 (6741): VmData 29204480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 140.829625][ T6747] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 140.840090][ T5808] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.859936][ T6747] [U] J"—e:ÀÆ" [ 140.883185][ T6747] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 140.899866][ T5808] usb 4-1: device descriptor read/8, error -71 [ 140.933622][ T6747] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 141.988131][ T6747] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 142.068678][ T5808] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 142.078852][ T6747] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 142.205905][ T5808] usb 4-1: device descriptor read/8, error -71 [ 142.212893][ T6747] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 142.308308][ T6759] /dev/nullb0: Can't open blockdev [ 142.369289][ T6759] Failed to initialize the IGMP autojoin socket (err -2) [ 142.616312][ T5808] usb usb4-port1: unable to enumerate USB device [ 142.653902][ T30] audit: type=1400 audit(1771138276.115:357): avc: denied { create } for pid=6754 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 142.660201][ T6747] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 142.674879][ T30] audit: type=1400 audit(1771138276.115:358): avc: denied { write } for pid=6754 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 142.727888][ T30] audit: type=1326 audit(1771138276.125:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b659bf79 code=0x7ffc0000 [ 142.783609][ T30] audit: type=1326 audit(1771138276.125:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b659bf79 code=0x7ffc0000 [ 143.040435][ T6747] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 143.570399][ T30] audit: type=1326 audit(1771138276.135:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f67b659bf79 code=0x7ffc0000 [ 143.581482][ T6747] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 143.593743][ T30] audit: type=1326 audit(1771138276.145:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b659bf79 code=0x7ffc0000 [ 143.650077][ T6747] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 143.746702][ T30] audit: type=1326 audit(1771138276.145:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b659bf79 code=0x7ffc0000 [ 143.800091][ T30] audit: type=1326 audit(1771138276.155:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f67b659bf79 code=0x7ffc0000 [ 143.850053][ T30] audit: type=1326 audit(1771138276.155:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b659bf79 code=0x7ffc0000 [ 143.939051][ T30] audit: type=1326 audit(1771138276.155:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b659bf79 code=0x7ffc0000 [ 143.970088][ T5874] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.223938][ T5874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.552065][ T5874] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.563857][ T5874] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.580228][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.656075][ T6767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.670882][ T5874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.741149][ T6777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.224'. [ 145.060326][ T6780] overlay: Bad value for 'uuid' [ 145.547523][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 146.834160][ T5874] usb 5-1: USB disconnect, device number 5 [ 147.963518][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 148.330269][ T5860] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.345872][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 148.345896][ T30] audit: type=1400 audit(1771138282.165:390): avc: denied { getopt } for pid=6809 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.564064][ T5860] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.574607][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.587448][ T5860] usb 2-1: config 0 descriptor?? [ 148.608285][ T5860] cp210x 2-1:0.0: cp210x converter detected [ 149.024858][ T5860] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 149.032556][ T30] audit: type=1400 audit(1771138282.845:391): avc: denied { write } for pid=6805 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.159325][ T5860] usb 2-1: cp210x converter now attached to ttyUSB0 [ 150.312277][ T6826] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 150.415304][ T30] audit: type=1400 audit(1771138284.245:392): avc: denied { create } for pid=6837 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 150.679353][ T6845] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 150.953361][ T5860] usb 2-1: USB disconnect, device number 7 [ 150.970767][ T5860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 151.012785][ T5860] cp210x 2-1:0.0: device disconnected [ 151.097580][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 151.121842][ T30] audit: type=1400 audit(1771138284.925:393): avc: denied { create } for pid=6847 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 151.150644][ T6851] netlink: 136 bytes leftover after parsing attributes in process `syz.4.239'. [ 151.159840][ T6851] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 151.420878][ T5810] Bluetooth: hci2: command 0x0401 tx timeout [ 151.852433][ T30] audit: type=1400 audit(1771138284.925:394): avc: denied { write } for pid=6847 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 151.911178][ T30] audit: type=1400 audit(1771138285.215:395): avc: denied { write } for pid=6848 comm="syz.1.241" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 153.123836][ T6862] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 153.410060][ T5860] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.742283][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 153.761052][ T30] audit: type=1400 audit(1771138287.595:396): avc: denied { lock } for pid=6876 comm="syz.0.246" path="socket:[12790]" dev="sockfs" ino=12790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 153.870539][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 153.880488][ T6881] bridge_slave_1: left allmulticast mode [ 153.887545][ T6881] bridge_slave_1: left promiscuous mode [ 153.898154][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.979416][ T5860] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 154.170701][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.172146][ T6881] bridge_slave_0: left allmulticast mode [ 154.220071][ T6881] bridge_slave_0: left promiscuous mode [ 154.230160][ T5810] Bluetooth: hci2: command 0x0401 tx timeout [ 154.248829][ T5860] usb 5-1: config 0 descriptor?? [ 154.257730][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.262183][ T5860] smsusb:smsusb_probe: board id=8, interface number 0 [ 154.280935][ T5860] smsusb:smsusb_probe: Device initialized with return code -19 [ 154.392040][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 154.495252][ T6867] vlan2: entered promiscuous mode [ 154.501305][ T6867] bridge0: entered promiscuous mode [ 154.530070][ T9] usb 4-1: device descriptor read/64, error -71 [ 154.626428][ T6867] bridge0: port 3(veth0_to_team) entered blocking state [ 154.634302][ T6867] bridge0: port 3(veth0_to_team) entered disabled state [ 154.643587][ T6867] veth0_to_team: entered allmulticast mode [ 154.655520][ T6867] veth0_to_team: entered promiscuous mode [ 154.662055][ T6867] bridge0: port 3(veth0_to_team) entered blocking state [ 154.669096][ T6867] bridge0: port 3(veth0_to_team) entered forwarding state [ 154.850677][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 154.980299][ T9] usb 4-1: device descriptor read/64, error -71 [ 155.100358][ T9] usb usb4-port1: attempt power cycle [ 155.115489][ T6892] syzkaller0: entered promiscuous mode [ 155.128806][ T6892] syzkaller0: entered allmulticast mode [ 155.145442][ T30] audit: type=1400 audit(1771138288.975:397): avc: denied { relabelfrom } for pid=6891 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 155.282135][ T30] audit: type=1400 audit(1771138288.975:398): avc: denied { relabelto } for pid=6891 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 155.460063][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 155.480062][ T5804] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.493666][ T9] usb 4-1: device descriptor read/8, error -71 [ 155.621272][ T5804] usb 2-1: device descriptor read/64, error -71 [ 155.763978][ T5860] usb 5-1: USB disconnect, device number 6 [ 155.774452][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 155.810935][ T9] usb 4-1: device descriptor read/8, error -71 [ 155.840144][ T5808] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.880241][ T5804] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.921175][ T9] usb usb4-port1: unable to enumerate USB device [ 156.020057][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 156.037340][ T5808] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 156.050024][ T5804] usb 2-1: device descriptor read/64, error -71 [ 156.060023][ T5808] usb 1-1: config 0 has no interface number 0 [ 156.070314][ T5808] usb 1-1: config 0 interface 182 has no altsetting 0 [ 156.097187][ T5808] usb 1-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 156.120100][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.128097][ T5808] usb 1-1: Product: syz [ 156.150019][ T5808] usb 1-1: Manufacturer: syz [ 156.158437][ T5808] usb 1-1: SerialNumber: syz [ 156.179335][ T5808] usb 1-1: config 0 descriptor?? [ 156.184818][ T5804] usb usb2-port1: attempt power cycle [ 156.207371][ T5808] hub 1-1:0.182: bad descriptor, ignoring hub [ 156.224249][ T5808] hub 1-1:0.182: probe with driver hub failed with error -5 [ 156.231836][ T5860] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.424479][ T5860] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 156.446756][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.449801][ T5808] kaweth 1-1:0.182: Firmware present in device. [ 156.458491][ T5860] usb 5-1: config 0 descriptor?? [ 156.560181][ T5804] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 156.604250][ T5804] usb 2-1: device descriptor read/8, error -71 [ 156.618925][ T5808] kaweth 1-1:0.182: Error reading configuration (-32), no net device created [ 156.640506][ T5808] kaweth 1-1:0.182: probe with driver kaweth failed with error -5 [ 156.709328][ T5860] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 156.729243][ T5860] hackrf 5-1:0.0: Could not detect board [ 156.742028][ T5860] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 156.777171][ T5860] usb 5-1: USB disconnect, device number 7 [ 156.850233][ T5804] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.892518][ T5804] usb 2-1: device descriptor read/8, error -71 [ 157.001002][ T5804] usb usb2-port1: unable to enumerate USB device [ 157.569240][ T30] audit: type=1400 audit(1771138291.395:399): avc: denied { write } for pid=6918 comm="syz.2.259" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 157.591630][ T30] audit: type=1400 audit(1771138291.395:400): avc: denied { open } for pid=6918 comm="syz.2.259" path="/57/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 157.793609][ T6906] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 157.861303][ T30] audit: type=1400 audit(1771138291.695:401): avc: denied { write } for pid=6925 comm="syz.3.262" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 157.887763][ T30] audit: type=1400 audit(1771138291.715:402): avc: denied { create } for pid=6925 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 157.908675][ T5804] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.917877][ T30] audit: type=1400 audit(1771138291.715:403): avc: denied { ioctl } for pid=6925 comm="syz.3.262" path="socket:[12896]" dev="sockfs" ino=12896 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 157.964473][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 157.995358][ T6928] netlink: 240 bytes leftover after parsing attributes in process `syz.3.263'. [ 158.093563][ T5804] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 158.104422][ T5804] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 158.117473][ T5804] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 158.130402][ T5804] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 158.144048][ T5804] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 158.153463][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.378568][ T5804] ath6kl: Failed to submit usb control message: -71 [ 158.395007][ T5804] ath6kl: unable to send the bmi data to the device: -71 [ 158.402844][ T5804] ath6kl: Unable to send get target info: -71 [ 158.409401][ T5804] ath6kl: Failed to init ath6kl core: -71 [ 158.416806][ T5804] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 158.434968][ T5804] usb 3-1: USB disconnect, device number 11 [ 158.525510][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 158.558654][ T30] audit: type=1400 audit(1771138292.385:404): avc: denied { bind } for pid=6933 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.676048][ T5810] Bluetooth: hci2: command 0x0401 tx timeout [ 159.689548][ T5804] usb 1-1: USB disconnect, device number 6 [ 159.832242][ T30] audit: type=1400 audit(1771138293.665:405): avc: denied { append } for pid=6964 comm="syz.0.273" name="video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 159.861729][ T5810] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 159.869297][ T5810] Bluetooth: Wrong link type (-22) [ 159.875475][ T5810] Bluetooth: hci1: link tx timeout [ 159.881267][ T5810] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.889268][ T6965] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 159.895769][ T6965] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.911485][ T6965] vhci_hcd vhci_hcd.0: Device attached [ 159.917237][ T30] audit: type=1400 audit(1771138293.685:406): avc: denied { listen } for pid=6964 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.945705][ T6966] vhci_hcd: connection closed [ 159.947507][ T36] vhci_hcd vhci_hcd.0: stop threads [ 159.988169][ T36] vhci_hcd vhci_hcd.0: release socket [ 160.006039][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 160.108370][ T30] audit: type=1400 audit(1771138293.935:407): avc: denied { getopt } for pid=6970 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.526017][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 161.439134][ T24] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 161.501235][ T30] audit: type=1400 audit(1771138295.315:408): avc: denied { read write } for pid=6983 comm="syz.0.279" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.502100][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.596846][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 161.631326][ T24] usb 4-1: Product: syz [ 161.658820][ T24] usb 4-1: Manufacturer: syz [ 161.721788][ T24] usb 4-1: SerialNumber: syz [ 161.751868][ T24] usb 4-1: config 0 descriptor?? [ 161.756025][ T30] audit: type=1400 audit(1771138295.325:409): avc: denied { open } for pid=6983 comm="syz.0.279" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.791113][ T24] go7007 4-1:0.0: Sensoray 2250 found [ 161.794121][ T30] audit: type=1400 audit(1771138295.335:410): avc: denied { ioctl } for pid=6983 comm="syz.0.279" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.809168][ T24] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 162.023222][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 162.163168][ T6998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.281'. [ 162.965819][ T30] audit: type=1400 audit(1771138296.675:411): avc: denied { getopt } for pid=7009 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.013949][ T7005] nvme_fabrics: missing parameter 'transport=%s' [ 163.013975][ T7005] nvme_fabrics: missing parameter 'nqn=%s' [ 163.177405][ T5804] usb 4-1: USB disconnect, device number 17 [ 163.243097][ T30] audit: type=1400 audit(1771138297.075:412): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=37798 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 163.513075][ T30] audit: type=1400 audit(1771138297.325:413): avc: denied { ioctl } for pid=7028 comm="syz.1.290" path="socket:[13101]" dev="sockfs" ino=13101 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.513125][ T30] audit: type=1400 audit(1771138297.325:414): avc: denied { write } for pid=7028 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.550563][ T5804] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 163.578107][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.720948][ T5804] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 163.730458][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.750063][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 163.759847][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.766673][ T9] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 163.780812][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.789739][ T5804] usb 4-1: config 0 descriptor?? [ 163.797422][ T5804] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 163.828050][ T9] usb 5-1: config 0 descriptor?? [ 164.253458][ T5804] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 164.287073][ T9] hid-u2fzero 0003:20A0:4287.0004: hidraw0: USB HID v0.00 Device [HID 20a0:4287] on usb-dummy_hcd.4-1/input0 [ 164.322639][ T9] hid-u2fzero 0003:20A0:4287.0004: NitroKey U2F LED initialised [ 164.339772][ T9] hid-u2fzero 0003:20A0:4287.0004: NitroKey U2F RNG initialised [ 164.454408][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.471131][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.513258][ T24] usb 5-1: USB disconnect, device number 8 [ 165.348744][ T7041] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 165.351643][ T7051] netlink: 'syz.2.295': attribute type 11 has an invalid length. [ 165.371780][ T7051] i2c i2c-0: dtv_property_process_set: SET cmd 0x04b94cdb undefined [ 165.507752][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 165.507767][ T30] audit: type=1400 audit(1771138299.335:417): avc: denied { search } for pid=5472 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.619930][ T30] audit: type=1400 audit(1771138299.335:418): avc: denied { search } for pid=5472 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.693320][ T30] audit: type=1400 audit(1771138299.335:419): avc: denied { search } for pid=5472 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.752927][ T5804] gspca_cpia1: usb_control_msg 02, error -110 [ 165.762620][ T30] audit: type=1400 audit(1771138299.335:420): avc: denied { read } for pid=5472 comm="dhcpcd" name="n100" dev="tmpfs" ino=3210 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.784972][ T5804] gspca_cpia1: usb_control_msg 05, error -32 [ 165.822466][ T30] audit: type=1400 audit(1771138299.335:421): avc: denied { open } for pid=5472 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3210 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.850003][ T5804] gspca_cpia1: usb_control_msg 05, error -32 [ 165.856347][ T5804] gspca_cpia1: usb_control_msg 05, error -32 [ 165.895427][ T5804] gspca_cpia1: usb_control_msg 05, error -32 [ 165.917186][ T5804] cpia1 4-1:0.0: unexpected systemstate: 00 [ 165.953357][ T7072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.299'. [ 165.966377][ T30] audit: type=1400 audit(1771138299.335:422): avc: denied { getattr } for pid=5472 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3210 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.027897][ T30] audit: type=1400 audit(1771138299.545:423): avc: denied { read open } for pid=7060 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.150099][ T5804] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.216445][ T30] audit: type=1400 audit(1771138299.545:424): avc: denied { getattr } for pid=7060 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.357196][ T7084] 9pnet_virtio: no channels available for device ./bus [ 166.570089][ T5810] Bluetooth: hci2: command 0x0401 tx timeout [ 166.724709][ T30] audit: type=1400 audit(1771138300.545:425): avc: denied { add_name } for pid=7056 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.795591][ T24] usb 4-1: USB disconnect, device number 18 [ 166.832980][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 166.842638][ T30] audit: type=1400 audit(1771138300.545:426): avc: denied { create } for pid=7056 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.875071][ T5804] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 166.934297][ T5804] usb 1-1: config 0 has no interface number 0 [ 166.950121][ T5804] usb 1-1: config 0 interface 114 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 16 [ 167.290882][ T5804] usb 1-1: config 0 interface 114 has no altsetting 0 [ 167.317595][ T5804] usb 1-1: New USB device found, idVendor=31e3, idProduct=2be7, bcdDevice=8d.2b [ 167.482049][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.502474][ T7102] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 167.568076][ T5804] usb 1-1: Product: syz [ 167.711249][ T7092] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 167.843315][ T5804] usb 1-1: Manufacturer: syz [ 167.881770][ T5804] usb 1-1: SerialNumber: syz [ 167.911775][ T5804] usb 1-1: config 0 descriptor?? [ 167.976478][ T7070] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 168.813209][ T7117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.044310][ T7122] macvtap0: entered allmulticast mode [ 169.049761][ T7122] veth0_macvtap: entered allmulticast mode [ 169.094749][ T7070] netlink: 10 bytes leftover after parsing attributes in process `syz.0.297'. [ 169.151005][ T5804] usb 1-1: USB disconnect, device number 7 [ 169.202139][ T7130] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 169.234347][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.251280][ T7128] team0: Port device batadv1 added [ 169.261888][ T7128] hub 9-0:1.0: USB hub found [ 169.269620][ T7128] hub 9-0:1.0: 1 port detected [ 169.274448][ T5810] Bluetooth: hci2: command 0x0401 tx timeout [ 169.707783][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 169.730049][ T793] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.832819][ T7152] netlink: 68 bytes leftover after parsing attributes in process `syz.3.319'. [ 169.843044][ T7152] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 169.956463][ T793] usb 5-1: Using ep0 maxpacket: 16 [ 169.967797][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.978811][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.988646][ T793] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.010151][ T793] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 170.025001][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.416355][ T793] usb 5-1: config 0 descriptor?? [ 170.633335][ T7159] nvme_fabrics: missing parameter 'transport=%s' [ 170.639704][ T7159] nvme_fabrics: missing parameter 'nqn=%s' [ 170.649192][ T7163] random: crng reseeded on system resumption [ 170.664917][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 170.664944][ T30] audit: type=1400 audit(1771138304.475:435): avc: denied { write } for pid=7162 comm="syz.1.322" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 170.665657][ T7151] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 170.671041][ T30] audit: type=1400 audit(1771138304.475:436): avc: denied { open } for pid=7162 comm="syz.1.322" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 170.863370][ T30] audit: type=1400 audit(1771138304.695:437): avc: denied { firmware_load } for pid=7165 comm="syz.1.323" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 170.906422][ T7166] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 170.931089][ T30] audit: type=1800 audit(1771138304.735:438): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.1.323" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 170.960530][ T7166] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 171.002415][ T7166] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 171.002464][ T30] audit: type=1400 audit(1771138304.835:439): avc: denied { firmware_load } for pid=7165 comm="syz.1.323" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 171.182507][ T793] usbhid 5-1:0.0: can't add hid device: -71 [ 171.334959][ T793] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 171.345584][ T793] usb 5-1: USB disconnect, device number 9 [ 171.358260][ T7166] syz.1.323 (7166) used greatest stack depth: 19672 bytes left [ 171.698700][ T30] audit: type=1400 audit(1771138305.505:440): avc: denied { listen } for pid=7184 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.758182][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 171.830094][ T5810] Bluetooth: hci2: command 0x0401 tx timeout [ 171.899511][ T30] audit: type=1400 audit(1771138305.505:441): avc: denied { accept } for pid=7184 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.167585][ T30] audit: type=1400 audit(1771138305.585:442): avc: denied { setopt } for pid=7184 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.669603][ T30] audit: type=1400 audit(1771138305.915:443): avc: denied { mounton } for pid=7192 comm="syz.0.331" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 173.809016][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.333'. [ 173.989483][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'. [ 174.017268][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.333'. [ 174.261254][ T5853] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 174.507704][ T5853] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 174.525534][ T5853] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 174.649854][ T7225] FAULT_INJECTION: forcing a failure. [ 174.649854][ T7225] name failslab, interval 1, probability 0, space 0, times 0 [ 174.662680][ T7225] CPU: 0 UID: 0 PID: 7225 Comm: syz.4.338 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.662707][ T7225] Tainted: [L]=SOFTLOCKUP [ 174.662712][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.662721][ T7225] Call Trace: [ 174.662726][ T7225] [ 174.662730][ T7225] dump_stack_lvl+0x100/0x190 [ 174.662751][ T7225] should_fail_ex.cold+0x5/0xa [ 174.662766][ T7225] should_failslab+0xc2/0x120 [ 174.662783][ T7225] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 174.662797][ T7225] ? key_alloc+0x3c5/0x1310 [ 174.662813][ T7225] ? rcu_is_watching+0x12/0xc0 [ 174.662829][ T7225] key_alloc+0x3c5/0x1310 [ 174.662850][ T7225] ? __pfx_key_alloc+0x10/0x10 [ 174.662868][ T7225] ? hook_cred_prepare+0x269/0x310 [ 174.662880][ T7225] keyring_alloc+0x44/0xc0 [ 174.662898][ T7225] lookup_user_key+0x9b8/0x1300 [ 174.662916][ T7225] ? __pfx_lookup_user_key+0x10/0x10 [ 174.662932][ T7225] ? __might_fault+0xc5/0x140 [ 174.662947][ T7225] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 174.662964][ T7225] ? _copy_from_user+0x59/0xd0 [ 174.662976][ T7225] ? memdup_user+0x82/0xe0 [ 174.662992][ T7225] __do_sys_request_key+0x1c4/0x3c0 [ 174.663005][ T7225] ? __pfx___do_sys_request_key+0x10/0x10 [ 174.663017][ T7225] ? ksys_write+0x1ac/0x250 [ 174.663037][ T7225] do_syscall_64+0x106/0xf80 [ 174.663050][ T7225] ? clear_bhb_loop+0x40/0x90 [ 174.663064][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.663075][ T7225] RIP: 0033:0x7f67b659bf79 [ 174.663085][ T7225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.663095][ T7225] RSP: 002b:00007f67b738f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 174.663107][ T7225] RAX: ffffffffffffffda RBX: 00007f67b6816180 RCX: 00007f67b659bf79 [ 174.663114][ T7225] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 174.663120][ T7225] RBP: 00007f67b738f090 R08: 0000000000000000 R09: 0000000000000000 [ 174.663126][ T7225] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 174.663132][ T7225] R13: 00007f67b6816218 R14: 00007f67b6816180 R15: 00007ffc2e85d4e8 [ 174.663146][ T7225] [ 174.984675][ T5853] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.081236][ T5853] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 175.125808][ T7224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7224 comm=syz.2.339 [ 175.153924][ T5853] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 175.209927][ T5853] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 175.234170][ T30] audit: type=1400 audit(1771138309.065:444): avc: denied { execute } for pid=7227 comm="syz.3.340" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.268868][ T5853] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 175.316642][ T5853] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.365724][ T5853] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 175.409495][ T5853] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 175.441549][ T7233] netlink: 'syz.1.343': attribute type 28 has an invalid length. [ 175.511217][ T5853] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 175.520059][ T5853] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 175.533772][ T5853] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.545672][ T5853] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 175.557026][ T5853] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 175.579313][ T5853] usb 1-1: string descriptor 0 read error: -22 [ 175.607372][ T7241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.630121][ T5853] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 175.693911][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.710508][ T7247] FAULT_INJECTION: forcing a failure. [ 175.710508][ T7247] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 175.741562][ T5853] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 175.752620][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.4.341 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.752646][ T7247] Tainted: [L]=SOFTLOCKUP [ 175.752651][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.752661][ T7247] Call Trace: [ 175.752667][ T7247] [ 175.752673][ T7247] dump_stack_lvl+0x100/0x190 [ 175.752704][ T7247] should_fail_ex.cold+0x5/0xa [ 175.752726][ T7247] _copy_to_iter+0x1f3/0x1720 [ 175.752746][ T7247] ? do_raw_spin_unlock+0x145/0x1e0 [ 175.752766][ T7247] ? _raw_spin_unlock+0x28/0x50 [ 175.752785][ T7247] ? __pfx__copy_to_iter+0x10/0x10 [ 175.752809][ T7247] ? __folio_put+0x3b9/0x540 [ 175.752834][ T7247] copy_page_to_iter+0x12a/0x1e0 [ 175.752855][ T7247] pipe_to_user+0xb0/0x170 [ 175.752885][ T7247] ? anon_pipe_buf_release+0x411/0x530 [ 175.752913][ T7247] __splice_from_pipe+0x20c/0x7f0 [ 175.752941][ T7247] ? __pfx_pipe_to_user+0x10/0x10 [ 175.752972][ T7247] __do_sys_vmsplice+0x4a2/0x14f0 [ 175.753009][ T7247] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 175.753038][ T7247] ? get_pid_task+0x106/0x250 [ 175.753066][ T7247] ? find_held_lock+0x2b/0x80 [ 175.753092][ T7247] ? find_held_lock+0x2b/0x80 [ 175.753128][ T7247] ? __fget_files+0x21f/0x3d0 [ 175.753159][ T7247] ? fput+0x79/0x100 [ 175.753176][ T7247] ? ksys_write+0x1ac/0x250 [ 175.753198][ T7247] ? __pfx_ksys_write+0x10/0x10 [ 175.753228][ T7247] ? do_syscall_64+0x106/0xf80 [ 175.753248][ T7247] do_syscall_64+0x106/0xf80 [ 175.753266][ T7247] ? clear_bhb_loop+0x40/0x90 [ 175.753288][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.753304][ T7247] RIP: 0033:0x7f67b659bf79 [ 175.753320][ T7247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.753336][ T7247] RSP: 002b:00007f67b738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 175.753353][ T7247] RAX: ffffffffffffffda RBX: 00007f67b6816180 RCX: 00007f67b659bf79 [ 175.753363][ T7247] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 175.753373][ T7247] RBP: 00007f67b738f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.753383][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.753392][ T7247] R13: 00007f67b6816218 R14: 00007f67b6816180 R15: 00007ffc2e85d4e8 [ 175.753417][ T7247] [ 177.460063][ T793] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 177.623227][ T793] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 177.634019][ T793] usb 3-1: config 0 has no interface number 0 [ 177.654277][ T793] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 177.700458][ T7282] fuse: Bad value for 'fd' [ 177.706411][ T793] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 177.720228][ T7283] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 177.749632][ T793] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 177.759204][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.778562][ T793] usb 3-1: Product: syz [ 177.783295][ T793] usb 3-1: Manufacturer: syz [ 177.787913][ T793] usb 3-1: SerialNumber: syz [ 177.821456][ T793] usb 3-1: config 0 descriptor?? [ 177.980055][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 177.980055][ T5860] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 178.041616][ T5810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 178.053112][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.053142][ T5810] Tainted: [L]=SOFTLOCKUP [ 178.053149][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.053161][ T5810] Workqueue: hci0 hci_rx_work [ 178.053184][ T5810] Call Trace: [ 178.053190][ T5810] [ 178.053197][ T5810] dump_stack_lvl+0x100/0x190 [ 178.053226][ T5810] sysfs_warn_dup.cold+0x1c/0x28 [ 178.053243][ T5810] sysfs_create_dir_ns+0x24b/0x2b0 [ 178.053257][ T5810] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 178.053269][ T5810] ? find_held_lock+0x2b/0x80 [ 178.053283][ T5810] ? kobject_add_internal+0x25f/0x930 [ 178.053307][ T5810] ? kobject_add_internal+0x25f/0x930 [ 178.053333][ T5810] ? do_raw_spin_unlock+0x145/0x1e0 [ 178.053352][ T5810] kobject_add_internal+0x2c8/0x930 [ 178.053375][ T5810] kobject_add+0x16a/0x1e0 [ 178.053391][ T5810] ? __pfx_kobject_add+0x10/0x10 [ 178.053406][ T5810] ? class_to_subsys+0x10f/0x150 [ 178.053420][ T5810] ? kobject_put+0xb9/0x640 [ 178.053436][ T5810] ? _raw_spin_unlock+0x28/0x50 [ 178.053461][ T5810] device_add+0x294/0x1950 [ 178.053479][ T5810] ? __pfx_dev_set_name+0x10/0x10 [ 178.053500][ T5810] ? __pfx_device_add+0x10/0x10 [ 178.053515][ T5810] ? mgmt_send_event_skb+0x2fb/0x460 [ 178.053531][ T5810] hci_conn_add_sysfs+0x1a3/0x260 [ 178.053545][ T5810] le_conn_complete_evt+0x11cb/0x1f40 [ 178.053560][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 178.053587][ T5810] hci_le_conn_complete_evt+0x23c/0x3a0 [ 178.053607][ T5810] ? skb_pull_data+0x15f/0x1e0 [ 178.053637][ T5810] hci_le_meta_evt+0x34a/0x5f0 [ 178.053657][ T5810] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 178.053672][ T5810] hci_event_packet+0x682/0x11c0 [ 178.053685][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 178.053700][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 178.053713][ T5810] ? kcov_remote_start+0x374/0x660 [ 178.053734][ T5810] ? lockdep_hardirqs_on+0x78/0x100 [ 178.053760][ T5810] hci_rx_work+0x451/0xfc0 [ 178.053781][ T5810] process_one_work+0x9d7/0x1920 [ 178.053804][ T5810] ? __pfx_process_one_work+0x10/0x10 [ 178.053820][ T5810] ? __pfx_hci_rx_work+0x10/0x10 [ 178.053834][ T5810] worker_thread+0x5da/0xe40 [ 178.053850][ T5810] ? kthread+0x13a/0x450 [ 178.053859][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 178.053874][ T5810] kthread+0x370/0x450 [ 178.053889][ T5810] ? __pfx_kthread+0x10/0x10 [ 178.053916][ T5810] ret_from_fork+0x754/0xd80 [ 178.053933][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 178.053948][ T5810] ? __switch_to+0x7b4/0x1120 [ 178.053962][ T5810] ? __pfx_kthread+0x10/0x10 [ 178.053979][ T5810] ret_from_fork_asm+0x1a/0x30 [ 178.053999][ T5810] [ 178.054018][ T5810] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 178.332981][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 178.338181][ T5810] Bluetooth: hci0: failed to register connection device [ 178.365040][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.380557][ T5860] usb 2-1: device descriptor read/64, error -71 [ 178.388264][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 178.434072][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 34494, setting to 1024 [ 178.460636][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 178.470197][ T9] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 178.511134][ T9] usb 4-1: Product: syz [ 178.528525][ T9] usb 4-1: Manufacturer: syz [ 178.535045][ T9] usb 4-1: SerialNumber: syz [ 178.559171][ T9] usb 4-1: config 0 descriptor?? [ 178.577908][ T7282] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 178.630979][ T5860] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 178.674980][ T9] rc_core: IR keymap rc-imon-rsc not found [ 178.688366][ T9] Registered IR keymap rc-empty [ 178.702179][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 178.715533][ T5804] usb 1-1: USB disconnect, device number 8 [ 178.734512][ T7292] overlayfs: failed to resolve './file0': -2 [ 178.748242][ T9] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 178.780099][ T5860] usb 2-1: device descriptor read/64, error -71 [ 178.815925][ T24] usb 4-1: USB disconnect, device number 19 [ 179.133191][ T5860] usb usb2-port1: attempt power cycle [ 179.590253][ T5860] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 179.621162][ T5860] usb 2-1: device descriptor read/8, error -71 [ 179.730028][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 179.870178][ T5860] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 179.873027][ T7302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.362'. [ 180.056675][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.080351][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.107736][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 180.132143][ T5860] usb 2-1: device descriptor read/8, error -71 [ 180.185252][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.238752][ T9] usb 4-1: config 0 descriptor?? [ 180.240409][ T5860] usb usb2-port1: unable to enumerate USB device [ 180.244010][ T793] usb 3-1: USB disconnect, device number 12 [ 180.355025][ T7306] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 181.089398][ T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.111354][ T9] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 181.134887][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 181.134901][ T30] audit: type=1400 audit(1771138314.965:446): avc: denied { ioctl } for pid=7316 comm="syz.0.369" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 181.240099][ T30] audit: type=1400 audit(1771138315.005:447): avc: denied { mounton } for pid=7316 comm="syz.0.369" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 181.290725][ T9] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 181.408429][ T7329] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7329 comm=syz.1.371 [ 181.735282][ T7337] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 181.876386][ T7337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.905968][ T7299] cp2112 0003:10C4:EA90.0005: Multi-message I2C transactions not supported [ 181.915248][ T9] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 181.925513][ T9] usb 4-1: USB disconnect, device number 20 [ 181.940497][ T7340] macvlan2: entered promiscuous mode [ 181.946672][ T7340] macvlan2: entered allmulticast mode [ 181.953449][ T7340] bond1: entered allmulticast mode [ 181.963344][ T7340] bond1: entered promiscuous mode [ 181.975761][ T7340] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.018021][ T7342] dlm: no local IP address has been set [ 182.027402][ T7342] dlm: cannot start dlm midcomms -107 [ 182.096708][ T7340] team0: Port device macvlan2 added [ 182.125395][ T7343] bond1: (slave ip6gretap1): making interface the new active one [ 182.153907][ T7343] ip6gretap1: entered promiscuous mode [ 182.167205][ T7343] ip6gretap1: entered allmulticast mode [ 182.195230][ T7343] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 182.412566][ T7348] sp0: Synchronizing with TNC [ 182.552191][ T7350] ref_ctr_offset mismatch. inode: 0x17b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3737373737373130 [ 183.590911][ T7378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7378 comm=syz.2.384 [ 183.841498][ T7383] netlink: 830 bytes leftover after parsing attributes in process `syz.3.386'. [ 185.610064][ T5128] Bluetooth: hci3: command 0x0406 tx timeout [ 185.610880][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 185.617405][ T5128] Bluetooth: hci1: command 0x0406 tx timeout [ 185.623747][ T5818] Bluetooth: hci2: command 0x0401 tx timeout [ 185.696896][ T5860] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 185.969855][ T7392] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 186.010048][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 186.015606][ T5860] usb 1-1: too many configurations: 30, using maximum allowed: 8 [ 186.026606][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 186.041037][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 186.051721][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 186.080484][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 186.090507][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 186.100349][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 186.110179][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 186.129646][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 186.145864][ T5860] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 186.182491][ T7424] Failed to initialize the IGMP autojoin socket (err -2) [ 186.199691][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.237818][ T5860] usb 1-1: Product: syz [ 186.270530][ T5860] usb 1-1: Manufacturer: syz [ 186.275131][ T5860] usb 1-1: SerialNumber: syz [ 186.305883][ T5860] r8152-cfgselector 1-1: Unknown version 0x0000 [ 186.325731][ T5860] r8152-cfgselector 1-1: config 0 descriptor?? [ 186.557868][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.395'. [ 186.575529][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.395'. [ 186.588306][ T7410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7410 comm=syz.0.395 [ 186.671057][ T5928] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 186.869444][ T30] audit: type=1400 audit(1771138320.695:448): avc: denied { connect } for pid=7435 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.937902][ T30] audit: type=1400 audit(1771138320.765:449): avc: denied { bind } for pid=7435 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.980035][ T5860] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 187.007811][ T30] audit: type=1400 audit(1771138320.795:450): avc: denied { write } for pid=7435 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.061437][ T7436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'. [ 187.192029][ T5860] usb 3-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 187.220081][ T5860] usb 3-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 187.246225][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 187.302670][ T5860] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 187.336785][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.355712][ T5860] usb 3-1: config 0 descriptor?? [ 187.364189][ T7434] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.373977][ T7442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7442 comm=syz.0.407 [ 187.415374][ T30] audit: type=1400 audit(1771138321.245:451): avc: denied { setopt } for pid=7441 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.492627][ T30] audit: type=1800 audit(1771138321.315:452): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.406" name="bus" dev="overlay" ino=479 res=0 errno=0 [ 187.531804][ T5810] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 187.532606][ T7445] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 187.545918][ T7445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.605906][ T7445] vhci_hcd vhci_hcd.0: Device attached [ 187.710196][ T7446] vhci_hcd: connection closed [ 187.711078][ T6785] vhci_hcd vhci_hcd.0: stop threads [ 187.773208][ T6785] vhci_hcd vhci_hcd.0: release socket [ 187.790724][ T6785] vhci_hcd vhci_hcd.0: disconnect device [ 187.860054][ T5926] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 187.990333][ T5810] Bluetooth: hci2: command 0x0401 tx timeout [ 188.074675][ T5860] usbhid 3-1:0.0: can't add hid device: -71 [ 188.083384][ T5860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 188.210300][ T5860] usb 3-1: USB disconnect, device number 13 [ 188.539942][ T7458] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 188.618004][ T7462] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 188.637086][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.644476][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.673285][ T7458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.746626][ T7466] FAULT_INJECTION: forcing a failure. [ 188.746626][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.766058][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.1.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.766084][ T7466] Tainted: [L]=SOFTLOCKUP [ 188.766090][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.766099][ T7466] Call Trace: [ 188.766106][ T7466] [ 188.766112][ T7466] dump_stack_lvl+0x100/0x190 [ 188.766136][ T7466] should_fail_ex.cold+0x5/0xa [ 188.766150][ T7466] _copy_from_user+0x2e/0xd0 [ 188.766163][ T7466] copy_msghdr_from_user+0x9f/0x4f0 [ 188.766182][ T7466] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 188.766205][ T7466] ___sys_sendmsg+0x106/0x1e0 [ 188.766222][ T7466] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.766255][ T7466] __sys_sendmsg+0x170/0x220 [ 188.766267][ T7466] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.766288][ T7466] do_syscall_64+0x106/0xf80 [ 188.766302][ T7466] ? clear_bhb_loop+0x40/0x90 [ 188.766316][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.766327][ T7466] RIP: 0033:0x7f97e259bf79 [ 188.766337][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.766348][ T7466] RSP: 002b:00007f97e3491028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.766359][ T7466] RAX: ffffffffffffffda RBX: 00007f97e2816090 RCX: 00007f97e259bf79 [ 188.766366][ T7466] RDX: 0000000000000804 RSI: 00002000000000c0 RDI: 0000000000000003 [ 188.766372][ T7466] RBP: 00007f97e3491090 R08: 0000000000000000 R09: 0000000000000000 [ 188.766378][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.766385][ T7466] R13: 00007f97e2816128 R14: 00007f97e2816090 R15: 00007fffec5891b8 [ 188.766398][ T7466] [ 188.940993][ T7462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.196847][ T7471] dlm: no local IP address has been set [ 189.202548][ T7471] dlm: cannot start dlm midcomms -107 [ 189.433508][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 189.520207][ T5928] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 189.567131][ T30] audit: type=1400 audit(1771138323.395:453): avc: denied { setopt } for pid=7482 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.568643][ T7484] netlink: 52 bytes leftover after parsing attributes in process `syz.4.418'. [ 189.760488][ T5928] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 189.833404][ T5928] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 189.844050][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.864040][ T5928] usb 1-1: Product: syz [ 189.868299][ T5928] usb 1-1: Manufacturer: syz [ 189.873208][ T5928] usb 1-1: SerialNumber: syz [ 189.893054][ T5928] usb 1-1: config 0 descriptor?? [ 189.932282][ T5928] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 190.039157][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.050810][ T5928] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 190.068007][ T5928] usb 1-1: media controller created [ 190.085589][ T7476] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 190.389728][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.424964][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.554561][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.601076][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 190.657988][ T30] audit: type=1400 audit(1771138324.485:454): avc: denied { execute } for pid=7490 comm="syz.3.422" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 190.723323][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 190.732973][ T7486] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 190.796504][ T5810] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 190.841659][ T5928] DVB: Unable to find symbol mt352_attach() [ 190.937032][ T5928] DVB: Unable to find symbol nxt6000_attach() [ 190.944144][ T5928] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 191.002570][ T5928] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 191.019525][ T5928] dvb-usb: schedule remote query interval to 1000 msecs. [ 191.027890][ T5928] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 191.041190][ T5928] dvb-usb: bulk message failed: -22 (7/0) [ 191.048323][ T5928] dvb-usb: bulk message failed: -22 (7/0) [ 191.075735][ T5928] usb 1-1: USB disconnect, device number 10 [ 191.099391][ T7494] block nbd3: shutting down sockets [ 191.162829][ T5928] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 191.220786][ T5860] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 191.275922][ T7517] dlm: no local IP address has been set [ 191.365979][ T7517] dlm: cannot start dlm midcomms -107 [ 191.382570][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 191.397150][ T5860] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 191.406621][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.438378][ T5860] usb 2-1: Product: syz [ 191.454014][ T5860] usb 2-1: Manufacturer: syz [ 191.467272][ T5860] usb 2-1: SerialNumber: syz [ 191.486616][ T5860] usb 2-1: config 0 descriptor?? [ 191.522342][ T5860] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 192.719504][ T5860] gspca_vc032x: reg_w err -110 [ 192.727703][ T5860] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 194.246741][ T7526] netlink: 56 bytes leftover after parsing attributes in process `syz.4.430'. [ 194.407150][ T5926] usb 2-1: USB disconnect, device number 16 [ 194.491031][ T30] audit: type=1400 audit(1771138328.325:455): avc: denied { setopt } for pid=7532 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.579538][ T30] audit: type=1400 audit(1771138328.345:456): avc: denied { accept } for pid=7532 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.968251][ T30] audit: type=1400 audit(1771138328.795:457): avc: denied { read write } for pid=7543 comm="syz.3.434" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 195.035912][ T30] audit: type=1400 audit(1771138328.795:458): avc: denied { open } for pid=7543 comm="syz.3.434" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 195.115663][ T7547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.210221][ T793] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 195.221229][ T7531] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 195.457796][ T793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.468228][ T793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 195.477192][ T30] audit: type=1400 audit(1771138329.305:459): avc: denied { create } for pid=7554 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.477472][ T793] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 195.967306][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.986542][ T793] usb 4-1: config 0 descriptor?? [ 196.169928][ T7551] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 196.332544][ T7563] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 196.443019][ T7563] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 196.454115][ T7563] overlayfs: failed to look up (tracing) for ino (-66) [ 196.558562][ T30] audit: type=1400 audit(1771138330.155:460): avc: denied { mounton } for pid=7560 comm="syz.1.439" path="/92/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 196.605609][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 197.240836][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 197.317016][ T30] audit: type=1400 audit(1771138330.415:461): avc: denied { read write } for pid=7543 comm="syz.3.434" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 197.437109][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 197.503658][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 197.512442][ T9] usb 5-1: config 0 has no interface number 0 [ 197.519318][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 197.620418][ T30] audit: type=1400 audit(1771138330.415:462): avc: denied { open } for pid=7543 comm="syz.3.434" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 197.688888][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 197.750371][ T793] Bluetooth: Can't get state to change to load configuration err [ 197.758158][ T793] Bluetooth: Loading sysconfig file failed [ 197.768973][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.777244][ T793] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 197.784894][ T9] usb 5-1: Product: syz [ 197.789053][ T9] usb 5-1: Manufacturer: syz [ 197.794079][ T9] usb 5-1: SerialNumber: syz [ 197.811038][ T9] usb 5-1: config 0 descriptor?? [ 197.816011][ T793] usb 4-1: USB disconnect, device number 21 [ 198.224562][ T30] audit: type=1400 audit(1771138332.055:463): avc: denied { connect } for pid=7572 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 198.381954][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 198.723656][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 198.815180][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 198.838661][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 199.233669][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 199.518193][ T30] audit: type=1400 audit(1771138333.315:464): avc: denied { audit_write } for pid=7593 comm="syz.0.446" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 199.631707][ T7601] input: syz0 as /devices/virtual/input/input10 [ 199.848404][ T30] audit: type=1400 audit(1771138333.665:465): avc: denied { read } for pid=5162 comm="acpid" name="event4" dev="devtmpfs" ino=2951 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.964847][ T9] usb 5-1: USB disconnect, device number 10 [ 200.439479][ T30] audit: type=1400 audit(1771138333.665:466): avc: denied { open } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2951 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.746405][ T30] audit: type=1400 audit(1771138333.665:467): avc: denied { ioctl } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2951 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.806764][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 201.855310][ T7614] netlink: 'syz.4.452': attribute type 10 has an invalid length. [ 201.879142][ T7615] FAULT_INJECTION: forcing a failure. [ 201.879142][ T7615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.894688][ T7611] binder: 7610:7611 ioctl 8040942d 200000000080 returned -22 [ 201.905692][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.951033][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.3.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.951062][ T7615] Tainted: [L]=SOFTLOCKUP [ 201.951069][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.951077][ T7615] Call Trace: [ 201.951083][ T7615] [ 201.951090][ T7615] dump_stack_lvl+0x100/0x190 [ 201.951122][ T7615] should_fail_ex.cold+0x5/0xa [ 201.951144][ T7615] _copy_from_user+0x2e/0xd0 [ 201.951164][ T7615] __sys_bpf+0x243/0x4b90 [ 201.951183][ T7615] ? __pfx___sys_bpf+0x10/0x10 [ 201.951208][ T7615] ? proc_fail_nth_write+0x9f/0x220 [ 201.951227][ T7615] ? find_held_lock+0x2b/0x80 [ 201.951253][ T7615] ? find_held_lock+0x2b/0x80 [ 201.951273][ T7615] ? ksys_write+0x190/0x250 [ 201.951301][ T7615] ? __mutex_unlock_slowpath+0x15c/0x790 [ 201.951324][ T7615] ? __fget_files+0x215/0x3d0 [ 201.951360][ T7615] ? fput+0x79/0x100 [ 201.951373][ T7615] ? ksys_write+0x1ac/0x250 [ 201.951391][ T7615] ? __pfx_ksys_write+0x10/0x10 [ 201.951412][ T7615] __x64_sys_bpf+0x7b/0xc0 [ 201.951433][ T7615] ? lockdep_hardirqs_on+0x78/0x100 [ 201.951449][ T7615] do_syscall_64+0x106/0xf80 [ 201.951467][ T7615] ? clear_bhb_loop+0x40/0x90 [ 201.951488][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.951502][ T7615] RIP: 0033:0x7f0fcbb9bf79 [ 201.951514][ T7615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.951527][ T7615] RSP: 002b:00007f0fcca76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.951541][ T7615] RAX: ffffffffffffffda RBX: 00007f0fcbe15fa0 RCX: 00007f0fcbb9bf79 [ 201.951552][ T7615] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002 [ 201.951561][ T7615] RBP: 00007f0fcca76090 R08: 0000000000000000 R09: 0000000000000000 [ 201.951571][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.951580][ T7615] R13: 00007f0fcbe16038 R14: 00007f0fcbe15fa0 R15: 00007ffcbc286468 [ 201.951603][ T7615] [ 201.951887][ T7614] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 202.254098][ T30] audit: type=1400 audit(1771138336.055:468): avc: denied { map } for pid=7610 comm="syz.2.450" path="socket:[15980]" dev="sockfs" ino=15980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.342708][ T30] audit: type=1400 audit(1771138336.055:469): avc: denied { read accept } for pid=7610 comm="syz.2.450" path="socket:[15980]" dev="sockfs" ino=15980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.816275][ T30] audit: type=1400 audit(1771138336.645:470): avc: denied { ioctl } for pid=7612 comm="syz.4.452" path="socket:[15302]" dev="sockfs" ino=15302 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.120143][ T5853] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 203.353592][ T7636] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 203.446653][ T5853] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.455735][ T5853] usb 4-1: not running at top speed; connect to a high speed hub [ 203.470889][ T5853] usb 4-1: config 136 has an invalid interface number: 30 but max is 0 [ 203.538300][ T5853] usb 4-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 203.598567][ T5853] usb 4-1: config 136 has no interface number 0 [ 203.630463][ T5853] usb 4-1: config 136 interface 30 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 203.649202][ T5853] usb 4-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.681256][ T5853] usb 4-1: New USB device found, idVendor=0499, idProduct=1a0e, bcdDevice=f0.f4 [ 203.691088][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.770327][ T5853] usb 4-1: Product: syz [ 203.774947][ T5853] usb 4-1: Manufacturer: syz [ 203.779769][ T5853] usb 4-1: SerialNumber: syz [ 203.842911][ T793] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 204.055842][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.070416][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.115131][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.155102][ T793] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 204.185375][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.205940][ T793] usb 5-1: config 0 descriptor?? [ 204.575485][ T7652] FAULT_INJECTION: forcing a failure. [ 204.575485][ T7652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.589486][ T7652] CPU: 1 UID: 0 PID: 7652 Comm: syz.0.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.589520][ T7652] Tainted: [L]=SOFTLOCKUP [ 204.589526][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.589536][ T7652] Call Trace: [ 204.589543][ T7652] [ 204.589550][ T7652] dump_stack_lvl+0x100/0x190 [ 204.589583][ T7652] should_fail_ex.cold+0x5/0xa [ 204.589605][ T7652] _copy_to_user+0x32/0xd0 [ 204.589625][ T7652] simple_read_from_buffer+0xcb/0x170 [ 204.589652][ T7652] proc_fail_nth_read+0x1af/0x230 [ 204.589682][ T7652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.589712][ T7652] ? rw_verify_area+0xce/0x6d0 [ 204.589732][ T7652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.589759][ T7652] vfs_read+0x1e4/0xb30 [ 204.589785][ T7652] ? __pfx_vfs_read+0x10/0x10 [ 204.589807][ T7652] ? __fget_files+0x215/0x3d0 [ 204.589838][ T7652] ? __fget_files+0x21f/0x3d0 [ 204.589870][ T7652] ksys_read+0x12a/0x250 [ 204.589893][ T7652] ? __pfx_ksys_read+0x10/0x10 [ 204.589922][ T7652] do_syscall_64+0x106/0xf80 [ 204.589942][ T7652] ? clear_bhb_loop+0x40/0x90 [ 204.589966][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.589984][ T7652] RIP: 0033:0x7f3c62b5c84e [ 204.589999][ T7652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.590016][ T7652] RSP: 002b:00007f3c63a22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.590032][ T7652] RAX: ffffffffffffffda RBX: 00007f3c63a236c0 RCX: 00007f3c62b5c84e [ 204.590044][ T7652] RDX: 000000000000000f RSI: 00007f3c63a230a0 RDI: 0000000000000006 [ 204.590054][ T7652] RBP: 00007f3c63a23090 R08: 0000000000000000 R09: 0000000000000000 [ 204.590064][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.590074][ T7652] R13: 00007f3c62e16218 R14: 00007f3c62e16180 R15: 00007ffcfe78ea48 [ 204.590099][ T7652] [ 204.830330][ T793] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 204.902898][ T5853] usb 4-1: USB disconnect, device number 22 [ 204.908987][ T793] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input11 [ 204.952833][ T6553] udevd[6553]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.446193][ T30] audit: type=1400 audit(1771138339.085:471): avc: denied { connect } for pid=7654 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.522408][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.683306][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.936552][ T793] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 206.119454][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.150152][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.335024][ T5853] usb 5-1: USB disconnect, device number 11 [ 206.336212][ T7669] autofs: Unknown parameter '0000000000000000000' [ 206.347432][ T30] audit: type=1400 audit(1771138340.165:472): avc: denied { read } for pid=7668 comm="syz.0.469" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 206.360357][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.469'. [ 206.412111][ T7675] fido_id[7675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 206.426851][ T30] audit: type=1400 audit(1771138340.165:473): avc: denied { open } for pid=7668 comm="syz.0.469" path="/77/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 207.073435][ T7694] overlayfs: failed to resolve './file1': -2 [ 208.740039][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 208.891343][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 209.630532][ T9] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.671155][ T9] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 209.700084][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.706789][ T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 209.718509][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.735889][ T9] usb 2-1: config 0 descriptor?? [ 209.789362][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 209.939674][ T30] audit: type=1326 audit(1771138343.715:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 210.069096][ T7731] macvlan2: entered promiscuous mode [ 210.092131][ T7731] macvlan2: entered allmulticast mode [ 210.116143][ T7704] netlink: 104 bytes leftover after parsing attributes in process `syz.1.476'. [ 210.125666][ T7731] bond1: entered promiscuous mode [ 210.135593][ T7731] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.213202][ T7731] bond1: left promiscuous mode [ 210.269566][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 210.296144][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 210.327986][ T30] audit: type=1326 audit(1771138343.715:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 210.375281][ T9] usb 2-1: USB disconnect, device number 17 [ 210.524321][ T30] audit: type=1326 audit(1771138343.715:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 210.637438][ T30] audit: type=1326 audit(1771138343.715:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 210.687266][ T30] audit: type=1326 audit(1771138343.715:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 211.011322][ T30] audit: type=1326 audit(1771138343.715:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 211.064836][ T30] audit: type=1326 audit(1771138343.715:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 211.140505][ T30] audit: type=1326 audit(1771138343.715:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 211.799780][ T7750] FAULT_INJECTION: forcing a failure. [ 211.799780][ T7750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.813176][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.2.483 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.813203][ T7750] Tainted: [L]=SOFTLOCKUP [ 211.813209][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.813219][ T7750] Call Trace: [ 211.813225][ T7750] [ 211.813231][ T7750] dump_stack_lvl+0x100/0x190 [ 211.813261][ T7750] should_fail_ex.cold+0x5/0xa [ 211.813283][ T7750] _copy_from_user+0x2e/0xd0 [ 211.813302][ T7750] kstrtouint_from_user+0xd6/0x1d0 [ 211.813325][ T7750] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 211.813346][ T7750] ? __lock_acquire+0x4a5/0x2630 [ 211.813374][ T7750] ? lock_acquire+0x1cf/0x380 [ 211.813404][ T7750] proc_fail_nth_write+0x83/0x220 [ 211.813423][ T7750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 211.813448][ T7750] vfs_write+0x2aa/0x1070 [ 211.813473][ T7750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 211.813493][ T7750] ? __pfx_vfs_write+0x10/0x10 [ 211.813514][ T7750] ? __fget_files+0x215/0x3d0 [ 211.813546][ T7750] ? __fget_files+0x21f/0x3d0 [ 211.813578][ T7750] ksys_write+0x12a/0x250 [ 211.813600][ T7750] ? __pfx_ksys_write+0x10/0x10 [ 211.813630][ T7750] do_syscall_64+0x106/0xf80 [ 211.813651][ T7750] ? clear_bhb_loop+0x40/0x90 [ 211.813672][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.813690][ T7750] RIP: 0033:0x7ff12775c84e [ 211.813704][ T7750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.813720][ T7750] RSP: 002b:00007ff1286bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.813738][ T7750] RAX: ffffffffffffffda RBX: 00007ff1286be6c0 RCX: 00007ff12775c84e [ 211.813748][ T7750] RDX: 0000000000000001 RSI: 00007ff1286be0a0 RDI: 0000000000000005 [ 211.813758][ T7750] RBP: 00007ff1286be090 R08: 0000000000000000 R09: 0000000000000000 [ 211.813767][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.813777][ T7750] R13: 00007ff127a16128 R14: 00007ff127a16090 R15: 00007fffb4f03118 [ 211.813801][ T7750] [ 212.250191][ T30] audit: type=1326 audit(1771138343.715:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 212.290055][ T30] audit: type=1326 audit(1771138343.715:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 212.313303][ T30] audit: type=1326 audit(1771138343.715:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 212.360037][ T30] audit: type=1326 audit(1771138343.715:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 212.762387][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.130064][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 213.156398][ T9] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 213.182599][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.923566][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.488'. [ 214.080978][ T9] usb 3-1: Product: syz [ 214.104165][ T9] usb 3-1: Manufacturer: syz [ 214.120501][ T9] usb 3-1: SerialNumber: syz [ 214.144018][ T9] usb 3-1: config 0 descriptor?? [ 214.161124][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 214.169128][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 214.191104][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.221037][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 214.334012][ T9] usb 3-1: media controller created [ 214.375692][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.417931][ T9] usb 3-1: selecting invalid altsetting 7 [ 214.418420][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.510452][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.583580][ T9] cxusb: set interface failed [ 214.588267][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 214.600173][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 214.761885][ T7784] cxusb: i2c rd: len=80 is too big! [ 214.761885][ T7784] [ 214.955240][ T7786] netlink: 48 bytes leftover after parsing attributes in process `syz.4.494'. [ 215.115852][ T5926] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 215.193549][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 215.199815][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 215.293670][ T5926] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 215.304043][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.322942][ T5926] usb 2-1: Product: syz [ 215.327215][ T5926] usb 2-1: Manufacturer: syz [ 215.340128][ T5926] usb 2-1: SerialNumber: syz [ 215.355331][ T5926] usb 2-1: config 0 descriptor?? [ 215.380623][ T9] rc_core: IR keymap rc-dvico-portable not found [ 215.381862][ T5860] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 215.388491][ T9] Registered IR keymap rc-empty [ 215.409428][ T5926] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 215.450752][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 215.468958][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 215.490747][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 215.497696][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 215.569454][ T9] usb 3-1: USB disconnect, device number 14 [ 215.587245][ T5860] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 215.607611][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.671714][ T5926] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 215.689225][ T5860] usb 1-1: config 0 descriptor?? [ 215.694547][ T5926] sq905c 2-1:0.0: Get version command failed [ 215.696747][ T5860] usb 1-1: unsupported MDLM descriptors [ 215.706303][ T5926] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 215.757142][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 215.768397][ T5926] usb 2-1: USB disconnect, device number 18 [ 215.822325][ T7794] netlink: 824 bytes leftover after parsing attributes in process `syz.4.496'. [ 215.845783][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 215.845797][ T30] audit: type=1800 audit(1771138349.675:496): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.496" name="bus" dev="overlay" ino=592 res=0 errno=0 [ 215.874193][ T7794] netlink: 104 bytes leftover after parsing attributes in process `syz.4.496'. [ 215.885333][ T7794] 9p: Bad value for 'wfdno' [ 215.911174][ T5804] usb 1-1: USB disconnect, device number 11 [ 215.948960][ T30] audit: type=1400 audit(1771138349.715:497): avc: denied { read } for pid=7793 comm="syz.4.496" dev="sockfs" ino=16277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.284806][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 216.292492][ T7801] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 216.298969][ T7801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.319340][ T7801] vhci_hcd vhci_hcd.0: Device attached [ 216.402682][ T7803] vhci_hcd: connection closed [ 216.403799][ T36] vhci_hcd vhci_hcd.2: stop threads [ 216.441691][ T36] vhci_hcd vhci_hcd.2: release socket [ 216.477980][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 216.500897][ T5928] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 216.795586][ T7818] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 216.890715][ T7818] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 216.954949][ T7818] overlayfs: failed to look up (tracing) for ino (-66) [ 216.995968][ T30] audit: type=1400 audit(1771138350.715:498): avc: denied { ioctl } for pid=7812 comm="syz.4.501" path="socket:[16318]" dev="sockfs" ino=16318 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.518377][ T7823] netlink: 'syz.2.503': attribute type 40 has an invalid length. [ 218.022864][ T7825] binder: 7824:7825 ioctl c0306201 200000000640 returned -22 [ 218.035279][ T30] audit: type=1400 audit(1771138351.865:499): avc: denied { create } for pid=7824 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 218.134588][ T30] audit: type=1400 audit(1771138351.935:500): avc: denied { write } for pid=7824 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 218.240593][ T7827] netlink: 48 bytes leftover after parsing attributes in process `syz.2.505'. [ 219.391437][ T7841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.508'. [ 219.403390][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 219.552895][ T5926] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 219.672001][ T7843] binder: BINDER_SET_CONTEXT_MGR already set [ 219.698114][ T7843] binder: 7842:7843 ioctl 4018620d 200000004a80 returned -16 [ 219.745477][ T5926] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.768885][ T5926] usb 1-1: config 0 has no interface number 0 [ 219.785251][ T5926] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 219.867512][ T5926] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 219.887414][ T5926] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.938332][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.971793][ T5926] usb 1-1: config 0 descriptor?? [ 219.985705][ T7816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 220.063966][ T5926] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 220.251931][ T5926] usb 1-1: USB disconnect, device number 12 [ 220.867259][ T7858] dlm: no local IP address has been set [ 220.880076][ T7858] dlm: cannot start dlm midcomms -107 [ 220.909408][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'. [ 220.992927][ T7864] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 221.063457][ T7872] FAULT_INJECTION: forcing a failure. [ 221.063457][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 221.076978][ T7872] CPU: 1 UID: 0 PID: 7872 Comm: syz.1.518 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.077006][ T7872] Tainted: [L]=SOFTLOCKUP [ 221.077012][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.077022][ T7872] Call Trace: [ 221.077028][ T7872] [ 221.077034][ T7872] dump_stack_lvl+0x100/0x190 [ 221.077065][ T7872] should_fail_ex.cold+0x5/0xa [ 221.077088][ T7872] should_failslab+0xc2/0x120 [ 221.077113][ T7872] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 221.077134][ T7872] ? skb_clone+0x190/0x400 [ 221.077158][ T7872] skb_clone+0x190/0x400 [ 221.077184][ T7872] netlink_deliver_tap+0xaed/0xcc0 [ 221.077212][ T7872] netlink_unicast+0x650/0x870 [ 221.077238][ T7872] ? __pfx_netlink_unicast+0x10/0x10 [ 221.077270][ T7872] netlink_sendmsg+0x8b0/0xda0 [ 221.077297][ T7872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.077318][ T7872] ? __might_fault+0x20/0x140 [ 221.077348][ T7872] ____sys_sendmsg+0xa54/0xc30 [ 221.077375][ T7872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.077412][ T7872] ___sys_sendmsg+0x190/0x1e0 [ 221.077439][ T7872] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.077496][ T7872] __sys_sendmsg+0x170/0x220 [ 221.077517][ T7872] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.077554][ T7872] do_syscall_64+0x106/0xf80 [ 221.077574][ T7872] ? clear_bhb_loop+0x40/0x90 [ 221.077595][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.077613][ T7872] RIP: 0033:0x7f97e259bf79 [ 221.077627][ T7872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.077643][ T7872] RSP: 002b:00007f97e34b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.077661][ T7872] RAX: ffffffffffffffda RBX: 00007f97e2815fa0 RCX: 00007f97e259bf79 [ 221.077673][ T7872] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 221.077683][ T7872] RBP: 00007f97e34b2090 R08: 0000000000000000 R09: 0000000000000000 [ 221.077693][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.077703][ T7872] R13: 00007f97e2816038 R14: 00007f97e2815fa0 R15: 00007fffec5891b8 [ 221.077728][ T7872] [ 221.077766][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.518'. [ 221.113997][ T7870] netlink: 48 bytes leftover after parsing attributes in process `syz.3.517'. [ 221.163336][ T5926] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 221.350069][ T793] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 221.408677][ T7875] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 221.418655][ T30] audit: type=1400 audit(1771138355.245:501): avc: denied { module_load } for pid=7874 comm="syz.1.519" path="/sys/kernel/notes" dev="sysfs" ino=1404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 221.418805][ T7875] Invalid ELF header magic: != ELF [ 221.471558][ T5926] usb 1-1: not running at top speed; connect to a high speed hub [ 221.480784][ T5926] usb 1-1: config 1 interface 0 has no altsetting 0 [ 221.493845][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 221.509168][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.522959][ T5926] usb 1-1: Product: syz [ 221.527537][ T5926] usb 1-1: Manufacturer: syz [ 221.532161][ T5926] usb 1-1: SerialNumber: syz [ 221.547184][ T793] usb 3-1: Invalid ep0 maxpacket: 64 [ 221.686316][ T793] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 221.860075][ T793] usb 3-1: Invalid ep0 maxpacket: 64 [ 221.865865][ T793] usb usb3-port1: attempt power cycle [ 222.391948][ T793] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 222.709646][ T793] usb 3-1: Invalid ep0 maxpacket: 64 [ 222.840071][ T793] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 222.860486][ T793] usb 3-1: Invalid ep0 maxpacket: 64 [ 222.865922][ T793] usb usb3-port1: unable to enumerate USB device [ 222.910026][ T5928] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 222.943234][ T7881] batman_adv: batadv0: Adding interface: geneve2 [ 222.949656][ T7881] batman_adv: batadv0: Interface activated: geneve2 [ 222.980036][ T5853] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 223.073752][ T5928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 223.085627][ T5928] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.103435][ T5928] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 223.112965][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 223.121754][ T5928] usb 4-1: Product: syz [ 223.126512][ T5928] usb 4-1: Manufacturer: syz [ 223.131242][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 223.136919][ T5928] usb 4-1: SerialNumber: syz [ 223.143734][ T5853] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 223.153090][ T5853] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 223.167884][ T5928] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13 [ 223.178320][ T5853] usb 5-1: config 0 has no interface number 0 [ 223.185247][ T5853] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 223.206016][ T5853] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 223.217111][ T5853] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 223.225446][ T5853] usb 5-1: Product: syz [ 223.229658][ T5853] usb 5-1: Manufacturer: syz [ 223.241532][ T5853] usb 5-1: config 0 descriptor?? [ 223.713349][ T5928] usb 4-1: USB disconnect, device number 23 [ 223.723361][ T7886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.523'. [ 223.762201][ T5926] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input14 [ 223.810567][ T5853] usb 5-1: USB disconnect, device number 12 [ 223.841774][ T5928] appletouch 4-1:1.0: input: appletouch disconnected [ 223.849638][ T5162] bcm5974 1-1:1.0: could not read from device [ 223.874366][ T5162] bcm5974 1-1:1.0: could not read from device [ 223.886105][ T5162] bcm5974 1-1:1.0: could not read from device [ 223.895922][ T30] audit: type=1400 audit(1771138357.725:502): avc: denied { module_request } for pid=7894 comm="syz.0.525" kmod="netdev-hsr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 223.897153][ T5926] usb 1-1: USB disconnect, device number 13 [ 223.944214][ T5162] bcm5974 1-1:1.0: could not read from device [ 223.969435][ T6119] bcm5974 1-1:1.0: could not read from device [ 224.294385][ T7910] netlink: 48 bytes leftover after parsing attributes in process `syz.1.532'. [ 224.978898][ T7915] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 225.002843][ T30] audit: type=1400 audit(1771138358.825:503): avc: denied { read write } for pid=7911 comm="syz.0.530" dev="sockfs" ino=17034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 225.094837][ T51] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 225.098737][ T30] audit: type=1326 audit(1771138358.855:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 225.161230][ T30] audit: type=1326 audit(1771138358.865:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 225.206072][ T30] audit: type=1326 audit(1771138358.865:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 225.232813][ T30] audit: type=1326 audit(1771138358.875:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 225.260261][ T30] audit: type=1326 audit(1771138358.875:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 225.320279][ T30] audit: type=1326 audit(1771138358.875:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 225.361241][ T30] audit: type=1326 audit(1771138358.875:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcbb9bf79 code=0x7ffc0000 [ 226.460610][ T5926] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 226.533177][ T7942] FAULT_INJECTION: forcing a failure. [ 226.533177][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.546655][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: syz.3.537 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.546681][ T7942] Tainted: [L]=SOFTLOCKUP [ 226.546686][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.546696][ T7942] Call Trace: [ 226.546702][ T7942] [ 226.546709][ T7942] dump_stack_lvl+0x100/0x190 [ 226.546739][ T7942] should_fail_ex.cold+0x5/0xa [ 226.546761][ T7942] _copy_from_iter+0x1f4/0x1690 [ 226.546783][ T7942] ? __asan_memset+0x23/0x50 [ 226.546804][ T7942] ? __pfx__copy_from_iter+0x10/0x10 [ 226.546822][ T7942] ? __pfx___alloc_skb+0x10/0x10 [ 226.546850][ T7942] netlink_sendmsg+0x808/0xda0 [ 226.546878][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.546898][ T7942] ? __might_fault+0x20/0x140 [ 226.546927][ T7942] ____sys_sendmsg+0xa54/0xc30 [ 226.546954][ T7942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.546989][ T7942] ___sys_sendmsg+0x190/0x1e0 [ 226.547015][ T7942] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.547075][ T7942] __sys_sendmsg+0x170/0x220 [ 226.547095][ T7942] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.547130][ T7942] do_syscall_64+0x106/0xf80 [ 226.547150][ T7942] ? clear_bhb_loop+0x40/0x90 [ 226.547172][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.547189][ T7942] RIP: 0033:0x7f0fcbb9bf79 [ 226.547205][ T7942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.547221][ T7942] RSP: 002b:00007f0fcca55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.547238][ T7942] RAX: ffffffffffffffda RBX: 00007f0fcbe16090 RCX: 00007f0fcbb9bf79 [ 226.547250][ T7942] RDX: 00000000000000c4 RSI: 0000200000000200 RDI: 0000000000000003 [ 226.547259][ T7942] RBP: 00007f0fcca55090 R08: 0000000000000000 R09: 0000000000000000 [ 226.547269][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.547279][ T7942] R13: 00007f0fcbe16128 R14: 00007f0fcbe16090 R15: 00007ffcbc286468 [ 226.547303][ T7942] [ 226.550275][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 226.550286][ T30] audit: type=1400 audit(1771138360.365:551): avc: denied { bind } for pid=7937 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.662002][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 226.905148][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 226.916820][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.965383][ T5926] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 226.974898][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.984080][ T5926] usb 2-1: Product: syz [ 227.002105][ T5926] usb 2-1: Manufacturer: syz [ 227.013229][ T5926] usb 2-1: SerialNumber: syz [ 227.032354][ T5926] usb 2-1: config 0 descriptor?? [ 227.045652][ T5926] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.064663][ T5926] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 227.181611][ T30] audit: type=1400 audit(1771138361.015:552): avc: denied { watch watch_reads } for pid=7952 comm="syz.3.543" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 227.237059][ T7955] syzkaller0: entered promiscuous mode [ 227.253124][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.264449][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.273579][ T7955] syzkaller0: entered allmulticast mode [ 227.304134][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.306672][ T7960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.544'. [ 227.343058][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.525063][ T5810] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 227.761562][ T5926] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 227.860503][ T5926] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 228.088310][ T7973] FAULT_INJECTION: forcing a failure. [ 228.088310][ T7973] name failslab, interval 1, probability 0, space 0, times 0 [ 228.107387][ T7973] CPU: 1 UID: 0 PID: 7973 Comm: syz.0.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.107416][ T7973] Tainted: [L]=SOFTLOCKUP [ 228.107421][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.107430][ T7973] Call Trace: [ 228.107435][ T7973] [ 228.107441][ T7973] dump_stack_lvl+0x100/0x190 [ 228.107471][ T7973] should_fail_ex.cold+0x5/0xa [ 228.107493][ T7973] should_failslab+0xc2/0x120 [ 228.107519][ T7973] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 228.107539][ T7973] ? security_file_alloc+0x34/0x2c0 [ 228.107564][ T7973] ? trace_kmem_cache_alloc+0xf3/0x120 [ 228.107591][ T7973] security_file_alloc+0x34/0x2c0 [ 228.107615][ T7973] init_file+0x95/0x480 [ 228.107632][ T7973] alloc_empty_file+0x73/0x1c0 [ 228.107649][ T7973] alloc_file_pseudo+0x13a/0x230 [ 228.107666][ T7973] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 228.107682][ T7973] ? inode_init_always_gfp+0xd0e/0x1040 [ 228.107712][ T7973] sock_alloc_file+0x50/0x210 [ 228.107733][ T7973] do_accept+0x242/0x530 [ 228.107747][ T7973] ? do_raw_spin_lock+0x128/0x260 [ 228.107766][ T7973] ? __pfx_do_accept+0x10/0x10 [ 228.107795][ T7973] __sys_accept4+0x108/0x200 [ 228.107811][ T7973] ? __pfx___sys_accept4+0x10/0x10 [ 228.107826][ T7973] ? __pfx_ksys_write+0x10/0x10 [ 228.107851][ T7973] __x64_sys_accept4+0x96/0x100 [ 228.107868][ T7973] ? lockdep_hardirqs_on+0x78/0x100 [ 228.107888][ T7973] do_syscall_64+0x106/0xf80 [ 228.107908][ T7973] ? clear_bhb_loop+0x40/0x90 [ 228.107929][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.107946][ T7973] RIP: 0033:0x7f3c62b9bf79 [ 228.107960][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.107977][ T7973] RSP: 002b:00007f3c63a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 228.107993][ T7973] RAX: ffffffffffffffda RBX: 00007f3c62e15fa0 RCX: 00007f3c62b9bf79 [ 228.108004][ T7973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 228.108013][ T7973] RBP: 00007f3c63a65090 R08: 0000000000000000 R09: 0000000000000000 [ 228.108023][ T7973] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 228.108032][ T7973] R13: 00007f3c62e16038 R14: 00007f3c62e15fa0 R15: 00007ffcfe78ea48 [ 228.108056][ T7973] [ 228.435192][ T7976] FAULT_INJECTION: forcing a failure. [ 228.435192][ T7976] name failslab, interval 1, probability 0, space 0, times 0 [ 228.447970][ T7976] CPU: 1 UID: 0 PID: 7976 Comm: syz.2.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.447996][ T7976] Tainted: [L]=SOFTLOCKUP [ 228.448002][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.448012][ T7976] Call Trace: [ 228.448017][ T7976] [ 228.448024][ T7976] dump_stack_lvl+0x100/0x190 [ 228.448054][ T7976] should_fail_ex.cold+0x5/0xa [ 228.448077][ T7976] should_failslab+0xc2/0x120 [ 228.448107][ T7976] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 228.448129][ T7976] ? skb_clone+0x190/0x400 [ 228.448154][ T7976] skb_clone+0x190/0x400 [ 228.448174][ T7976] netlink_deliver_tap+0xaed/0xcc0 [ 228.448200][ T7976] netlink_unicast+0x650/0x870 [ 228.448226][ T7976] ? __pfx_netlink_unicast+0x10/0x10 [ 228.448258][ T7976] netlink_sendmsg+0x8b0/0xda0 [ 228.448283][ T7976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.448303][ T7976] ? __might_fault+0x20/0x140 [ 228.448330][ T7976] ____sys_sendmsg+0xa54/0xc30 [ 228.448356][ T7976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.448391][ T7976] ___sys_sendmsg+0x190/0x1e0 [ 228.448417][ T7976] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.448469][ T7976] __sys_sendmsg+0x170/0x220 [ 228.448490][ T7976] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.448525][ T7976] do_syscall_64+0x106/0xf80 [ 228.448546][ T7976] ? clear_bhb_loop+0x40/0x90 [ 228.448567][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.448585][ T7976] RIP: 0033:0x7ff12779bf79 [ 228.448600][ T7976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.448616][ T7976] RSP: 002b:00007ff1286df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.448633][ T7976] RAX: ffffffffffffffda RBX: 00007ff127a15fa0 RCX: 00007ff12779bf79 [ 228.448645][ T7976] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 228.448655][ T7976] RBP: 00007ff1286df090 R08: 0000000000000000 R09: 0000000000000000 [ 228.448664][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.448674][ T7976] R13: 00007ff127a16038 R14: 00007ff127a15fa0 R15: 00007fffb4f03118 [ 228.448697][ T7976] [ 228.677194][ T7977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.696873][ T5926] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 229.425805][ T5926] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 229.432533][ T5926] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 229.439101][ T5926] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 229.446926][ T5926] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 229.497329][ T5926] usb 2-1: USB disconnect, device number 19 [ 229.525312][ T7985] nvme_fabrics: missing parameter 'transport=%s' [ 229.531810][ T7985] nvme_fabrics: missing parameter 'nqn=%s' [ 229.605173][ T7993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7993 comm=syz.3.555 [ 229.702877][ T5810] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 229.801140][ T7999] loop8: detected capacity change from 0 to 7 [ 229.834792][ T7999] Dev loop8: unable to read RDB block 7 [ 229.848164][ T7999] loop8: unable to read partition table [ 229.854449][ T7999] loop8: partition table beyond EOD, truncated [ 229.864547][ T7999] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 229.867775][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 229.888176][ T30] audit: type=1400 audit(1771138363.715:553): avc: denied { watch watch_reads } for pid=8001 comm="syz.4.556" path="pipe:[4582]" dev="pipefs" ino=4582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 229.888654][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 230.034655][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 230.370646][ T30] audit: type=1400 audit(1771138364.205:554): avc: denied { read } for pid=8016 comm="syz.3.563" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 230.400287][ T5928] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 230.420055][ T5853] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 230.496756][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 230.510668][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 230.550793][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 230.557256][ T5928] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 230.573692][ T5853] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 230.587278][ T5853] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.600008][ T5928] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.613544][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 230.621779][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.631669][ T5853] usb 5-1: SerialNumber: syz [ 230.639615][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.650591][ T5928] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.668412][ T5928] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.693936][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.868820][ T5853] usb 5-1: USB disconnect, device number 13 [ 230.923561][ T5928] usb 1-1: usb_control_msg returned -32 [ 230.929281][ T5928] usbtmc 1-1:16.0: can't read capabilities [ 231.123605][ T8021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.133153][ T8021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.139438][ T8021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 231.149901][ T8021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 231.157387][ T8021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.163836][ T8021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 231.171402][ T8021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.178093][ T8021] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 231.185687][ T8021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.192701][ T8021] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 231.215998][ T8021] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 231.228042][ T8021] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 231.236422][ T8021] CPU: 1 UID: 0 PID: 8021 Comm: syz.3.563 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.247150][ T8021] Tainted: [L]=SOFTLOCKUP [ 231.251443][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.261468][ T8021] RIP: 0010:klist_put+0x4d/0x1d0 [ 231.266384][ T8021] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 09 0d [ 231.285968][ T8021] RSP: 0018:ffffc900033c7280 EFLAGS: 00010202 [ 231.292014][ T8021] RAX: dffffc0000000000 RBX: ffff88805768d060 RCX: ffffc9000ec71000 [ 231.299966][ T8021] RDX: 000000000000000b RSI: ffffffff8b841295 RDI: 0000000000000058 [ 231.307922][ T8021] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2178724 [ 231.315873][ T8021] R10: ffffffff90bc3923 R11: 0000000000000001 R12: 0000000000000000 [ 231.323820][ T8021] R13: 0000000000000001 R14: ffffffff90bc38e0 R15: dffffc0000000000 [ 231.331768][ T8021] FS: 00007f0fcca556c0(0000) GS:ffff888124452000(0000) knlGS:0000000000000000 [ 231.340679][ T8021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.347240][ T8021] CR2: 00005633459b4db0 CR3: 000000002daee000 CR4: 00000000003526f0 [ 231.355190][ T8021] Call Trace: [ 231.358447][ T8021] [ 231.361356][ T8021] klist_remove+0x14c/0x2e0 [ 231.365847][ T8021] ? __pfx_klist_remove+0x10/0x10 [ 231.370853][ T8021] ? __pfx_kobject_move+0x10/0x10 [ 231.375856][ T8021] ? kobject_put+0xb9/0x640 [ 231.380342][ T8021] device_move+0x12d/0x1140 [ 231.384825][ T8021] hci_conn_del_sysfs+0x86/0x1a0 [ 231.389740][ T8021] hci_conn_del+0x506/0x1180 [ 231.394313][ T8021] hci_abort_conn_sync+0x7d9/0xb20 [ 231.399406][ T8021] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 231.405022][ T8021] ? find_held_lock+0x2b/0x80 [ 231.409677][ T8021] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 231.416856][ T8021] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 231.424036][ T8021] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 231.431217][ T8021] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 231.438306][ T8021] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 231.445918][ T8021] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 231.451535][ T8021] hci_suspend_sync+0x8b7/0xa70 [ 231.456370][ T8021] ? __pfx_hci_suspend_sync+0x10/0x10 [ 231.461725][ T8021] ? mgmt_pending_find+0x13e/0x1a0 [ 231.466816][ T8021] hci_suspend_dev+0x31d/0x540 [ 231.471555][ T8021] ? __pfx_hci_suspend_dev+0x10/0x10 [ 231.476816][ T8021] ? kobject_get+0xbb/0x150 [ 231.481297][ T8021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.487170][ T8021] hci_suspend_notifier+0x21e/0x330 [ 231.492347][ T8021] notifier_call_chain+0x99/0x420 [ 231.497358][ T8021] blocking_notifier_call_chain_robust+0xc8/0x160 [ 231.503758][ T8021] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 231.510766][ T8021] pm_notifier_call_chain_robust+0x27/0x60 [ 231.516557][ T8021] snapshot_open+0x189/0x2a0 [ 231.521130][ T8021] ? __pfx_snapshot_open+0x10/0x10 [ 231.526224][ T8021] misc_open+0x26d/0x450 [ 231.530444][ T8021] ? __pfx_misc_open+0x10/0x10 [ 231.535183][ T8021] chrdev_open+0x234/0x6a0 [ 231.539581][ T8021] ? __pfx_chrdev_open+0x10/0x10 [ 231.544501][ T8021] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 231.550815][ T8021] do_dentry_open+0x6d8/0x1660 [ 231.555559][ T8021] ? __pfx_chrdev_open+0x10/0x10 [ 231.560478][ T8021] vfs_open+0x82/0x3f0 [ 231.564525][ T8021] path_openat+0x208c/0x31a0 [ 231.569099][ T8021] ? __pfx_path_openat+0x10/0x10 [ 231.574023][ T8021] do_file_open+0x20e/0x430 [ 231.578511][ T8021] ? __pfx_do_file_open+0x10/0x10 [ 231.583523][ T8021] ? alloc_fd+0x476/0x790 [ 231.587837][ T8021] ? do_getname+0x191/0x390 [ 231.592318][ T8021] do_sys_openat2+0x10d/0x1e0 [ 231.596969][ T8021] ? __pfx_do_sys_openat2+0x10/0x10 [ 231.602145][ T8021] ? do_raw_spin_lock+0x128/0x260 [ 231.607146][ T8021] ? kcov_ioctl+0x16a/0x720 [ 231.611628][ T8021] __x64_sys_openat+0x12d/0x210 [ 231.616456][ T8021] ? __pfx___x64_sys_openat+0x10/0x10 [ 231.621803][ T8021] ? kcov_ioctl+0x16a/0x720 [ 231.626285][ T8021] do_syscall_64+0x106/0xf80 [ 231.630853][ T8021] ? clear_bhb_loop+0x40/0x90 [ 231.635505][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.641372][ T8021] RIP: 0033:0x7f0fcbb9bf79 [ 231.645763][ T8021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.665345][ T8021] RSP: 002b:00007f0fcca55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 231.673733][ T8021] RAX: ffffffffffffffda RBX: 00007f0fcbe16090 RCX: 00007f0fcbb9bf79 [ 231.681685][ T8021] RDX: 0000000000100000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 231.689631][ T8021] RBP: 00007f0fcbc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 231.697575][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.705521][ T8021] R13: 00007f0fcbe16128 R14: 00007f0fcbe16090 R15: 00007ffcbc286468 [ 231.713474][ T8021] [ 231.716468][ T8021] Modules linked in: [ 231.720907][ T8021] ---[ end trace 0000000000000000 ]--- [ 231.732017][ T8032] usbtmc 1-1:16.0: usb_bulk_msg returned -71 [ 231.749445][ T30] audit: type=1400 audit(1771138365.575:555): avc: denied { read } for pid=5159 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 231.809921][ T8021] RIP: 0010:klist_put+0x4d/0x1d0 [ 231.856214][ T8021] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 09 0d [ 231.876425][ T30] audit: type=1400 audit(1771138365.575:556): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.900207][ T8021] RSP: 0018:ffffc900033c7280 EFLAGS: 00010202 [ 231.906315][ T30] audit: type=1400 audit(1771138365.575:557): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.931885][ T8021] RAX: dffffc0000000000 RBX: ffff88805768d060 RCX: ffffc9000ec71000 [ 231.939903][ T8021] RDX: 000000000000000b RSI: ffffffff8b841295 RDI: 0000000000000058 [ 231.950063][ T8021] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2178724 [ 231.959152][ T30] audit: type=1400 audit(1771138365.575:558): avc: denied { add_name } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.987316][ T8021] R10: ffffffff90bc3923 R11: 0000000000000001 R12: 0000000000000000 [ 231.996266][ T8021] R13: 0000000000000001 R14: ffffffff90bc38e0 R15: dffffc0000000000 [ 232.000068][ T30] audit: type=1400 audit(1771138365.575:559): avc: denied { create } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 232.004525][ T8021] FS: 00007f0fcca556c0(0000) GS:ffff888124452000(0000) knlGS:0000000000000000 [ 232.025454][ T30] audit: type=1400 audit(1771138365.575:560): avc: denied { append open } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 232.035127][ T8021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.057229][ T30] audit: type=1400 audit(1771138365.575:561): avc: denied { getattr } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 232.087208][ T8021] CR2: 000055555b6cba28 CR3: 000000002daee000 CR4: 00000000003526f0 [ 232.096281][ T8021] Kernel panic - not syncing: Fatal exception [ 232.102594][ T8021] Kernel Offset: disabled [ 232.106890][ T8021] Rebooting in 86400 seconds..