last executing test programs: 49.3800236s ago: executing program 2 (id=798): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000850) socket$inet(0xa, 0x801, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53b", 0x27, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000cc0)={'syz1\x00', {0x0, 0x0, 0x0, 0xffff}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x63c, 0x10, 0x8, 0x7f, 0x0, 0xfffffffd, 0x6, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x689b, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbffffffd, 0x400, 0xffffffff, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}, [@ldst={0x2, 0x2, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @ldst={0x3, 0x3, 0x3, 0x3, 0x8, 0x40, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r7}, 0x94) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) readv(r6, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000012c0)={&(0x7f0000000180), 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) 47.99676525s ago: executing program 2 (id=804): syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x1, [{0x8c, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x7fffffff, 0xffffff78}, {0x5, 0xfdfd}, {0xfffffffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x2, 0x6}}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080), 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 46.07591714s ago: executing program 2 (id=809): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 41.41163633s ago: executing program 2 (id=813): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000009"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 34.472268671s ago: executing program 2 (id=822): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 32.571871303s ago: executing program 2 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) 20.358850689s ago: executing program 3 (id=841): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x20000850) socket$inet(0xa, 0x801, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53b", 0x27, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000cc0)={'syz1\x00', {0x0, 0x0, 0x0, 0xffff}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x63c, 0x10, 0x8, 0x7f, 0x0, 0xfffffffd, 0x6, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x689b, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbffffffd, 0x400, 0xffffffff, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}, [@ldst={0x2, 0x2, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @ldst={0x3, 0x3, 0x3, 0x3, 0x8, 0x40, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r7}, 0x94) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) readv(r6, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000012c0)={&(0x7f0000000180), 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) 15.990988081s ago: executing program 32 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) 15.527381381s ago: executing program 3 (id=847): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581020002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 15.519414249s ago: executing program 0 (id=848): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ce04425ace3f623", "acba84f7a6731f234db1cc7f3f09873931d287310300", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, 0x0, 0x9, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 10.611245257s ago: executing program 3 (id=853): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) r6 = memfd_secret(0x80000) poll(&(0x7f0000000440)=[{r3, 0xa280}], 0x1, 0x8) ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000400)='discaS\xf7\x9d\x80\xebg\x85cd', &(0x7f0000000200)='\t', 0x1) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="93d9012d5ceb9eb46af7ab95cb79599d3add166a5def8f72d6d265c11f6ef138df2e60ef9fafe04a4fd673492fa5f02e8b234e4ccc3821eea8bff188fd6da61f8c4b597f0c634657b4a2f7e5a7c81b7dde0deac87011e6cd48586c17ba876e85e0007cca6de7952d6bc6f34472b8ac7faa2434d7c36971205f343bf33b72b064ec90b59b73b48ed3a0e7ef16d83be2b65e5d5a6b45d0d7fac6a881a3218621b07ddf1fffcbd3b0a746ac4cfaf1300997059f"], 0x48) r7 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x2, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x80007ffc, 0x2, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0x4, 0x2, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x9, 0x0, 0x0, 0xbb, 0x200000, 0xffffffff, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) 9.82050069s ago: executing program 1 (id=854): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 9.358470239s ago: executing program 0 (id=856): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x20000850) socket$inet(0xa, 0x801, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53b", 0x27, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000cc0)={'syz1\x00', {0x0, 0x0, 0x0, 0xffff}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x63c, 0x10, 0x8, 0x7f, 0x0, 0xfffffffd, 0x6, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x689b, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbffffffd, 0x400, 0xffffffff, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}, [@ldst={0x2, 0x2, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @ldst={0x3, 0x3, 0x3, 0x3, 0x8, 0x40, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r7}, 0x94) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) readv(r6, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000012c0)={&(0x7f0000000180), 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) 7.801774053s ago: executing program 3 (id=858): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x26, 0x0, &(0x7f00000005c0)="e300806700445fb102f8a74194eafde991470cd86baabe6b3846ad9f63178c71abef2e3b8853", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x4c) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fd000000000000000800040001000000", 0x24) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, 0x101) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80), 0x0, 0x10022, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) 6.442188173s ago: executing program 1 (id=859): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000429000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mlock(&(0x7f0000ea4000/0xf000)=nil, 0xf000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') mremap(&(0x7f00001b6000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) read$FUSE(r2, &(0x7f0000005200)={0x2020}, 0x2020) 3.830776419s ago: executing program 0 (id=860): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) 3.598592918s ago: executing program 0 (id=861): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x123a02, 0x0) pwritev(r0, 0x0, 0x0, 0x7, 0x1) unshare(0x8000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.363967177s ago: executing program 0 (id=862): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581020002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 3.105320615s ago: executing program 1 (id=863): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf2502ed00000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.668811824s ago: executing program 3 (id=864): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x100, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4cd}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x88}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xacc7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008000}, 0x8804) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2.594675415s ago: executing program 4 (id=865): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a010000000000000000000000000200"], 0x50}, 0x1, 0x7}, 0x24000000) 2.471934037s ago: executing program 4 (id=866): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmmsg$inet(r1, &(0x7f0000001600)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36be53b97c6eb951e4cd864a0d49c5251ea819d1fb396061defd1768694a459ea9b8e4c53f8b742f21f50ec2a79795f2e2f94bf0da0d30ad6eac955cedbf65b0838294e2bcea1cbd94f308f0774bd9f4b60e9d6a1cf16cf7e6f45924e9d285da684857411a5b3d53f20d6832d37683ab1b1f2a8221086025", 0x94}, {&(0x7f0000003d80)="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", 0x135}, {&(0x7f0000000400)="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", 0xeef}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed842933815a8f167dc01363284d8f27e69a83509fd9f1dd0cdeca61ffdb9524f408d698154fbb2ff5381369933e1815ed1703e58405478629df4311893798ead4acd67bc6ab48", 0xc7}, {&(0x7f0000002b80)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134d79106da4929ddf57f26696b8911da0e8126ca4c7a6f10192c1e08dd0191c8a10b6526df22206120b8767c1a1ec3be23fe90f3e3c0092aca4116e03096593f7964ac3c077036e624ff82f8348afba5254a11057a6c1116f43d31ed21e32bd22fbb5680dd1f8ad1fb086bfd5e8a7bd3ee958ad843d1dbd2da074470b6811b78e6a3a88ae2d227455a99d89ff6e096b87ea849c950e61dcba74d2d9bd03d274b78e822767606a6659138b60f06f3716073b43ea338fdb91b1a", 0xe0}, {&(0x7f0000002a00)="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", 0x13b}, {&(0x7f0000002980)="c61fc952e32af9d06ed135ef945ba121afc7dcbb95e00a15a1aebe2c9d63854ab7d8f30b55ce07", 0x27}, {&(0x7f0000001700)="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", 0xfe}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) close(r1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) write(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000016c0)={'xfrm0\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ff", 0xf}], 0x1) 1.990660142s ago: executing program 1 (id=867): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net\x00') bind$packet(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x40884}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x2, 0x40000004) 1.892448851s ago: executing program 1 (id=868): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 1.77940125s ago: executing program 4 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @val={0x25, 0x3, {0x1, 0xab, 0x3}}, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x88}}, 0x20000014) 1.659451921s ago: executing program 4 (id=870): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) 1.510851792s ago: executing program 3 (id=871): socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xa1300) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000740)={0x2, 0x4e24, @local}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 1.353004464s ago: executing program 4 (id=872): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000429000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mlock(&(0x7f0000ea4000/0xf000)=nil, 0xf000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') mremap(&(0x7f00001b6000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) read$FUSE(r2, &(0x7f0000005200)={0x2020}, 0x2020) 962.934415ms ago: executing program 1 (id=873): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x26, 0x0, &(0x7f00000005c0)="e300806700445fb102f8a74194eafde991470cd86baabe6b3846ad9f63178c71abef2e3b8853", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x4c) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fd000000000000000800040001000000", 0x24) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r1, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80), 0x0, 0x10022, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) 130.090137ms ago: executing program 4 (id=874): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x6, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000003540)={0x2020}, 0x2020) 0s ago: executing program 0 (id=875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000b6, 0x0, 0xfffffffffffffff7}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. [ 66.417347][ T29] audit: type=1400 audit(1774976405.678:62): avc: denied { mounton } for pid=5790 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.441305][ T29] audit: type=1400 audit(1774976405.698:63): avc: denied { mount } for pid=5790 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.444655][ T5790] cgroup: Unknown subsys name 'net' [ 66.470410][ T29] audit: type=1400 audit(1774976405.728:64): avc: denied { unmount } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.595705][ T5790] cgroup: Unknown subsys name 'cpuset' [ 66.604420][ T5790] cgroup: Unknown subsys name 'rlimit' [ 66.706912][ T29] audit: type=1400 audit(1774976405.968:65): avc: denied { setattr } for pid=5790 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.742994][ T29] audit: type=1400 audit(1774976405.968:66): avc: denied { create } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.763933][ T29] audit: type=1400 audit(1774976405.968:67): avc: denied { write } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.784744][ T29] audit: type=1400 audit(1774976405.968:68): avc: denied { read } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.812811][ T29] audit: type=1400 audit(1774976405.968:69): avc: denied { mounton } for pid=5790 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.844138][ T29] audit: type=1400 audit(1774976405.968:70): avc: denied { mount } for pid=5790 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 66.884267][ T5792] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.893531][ T29] audit: type=1400 audit(1774976406.158:71): avc: denied { relabelto } for pid=5792 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.847601][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.757221][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.778710][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.787768][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.795801][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.796829][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.810430][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.813197][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.818155][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.834291][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.840458][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.842157][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.857083][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.857141][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.865074][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.873444][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.886127][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.887702][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.894486][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.901767][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.909611][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.922562][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.924478][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.936945][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.944233][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.959114][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.421761][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 70.499770][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 70.608645][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 70.630218][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 70.672941][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.680579][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.687850][ T5803] bridge_slave_0: entered allmulticast mode [ 70.694764][ T5803] bridge_slave_0: entered promiscuous mode [ 70.702900][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 70.743776][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.750904][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.758351][ T5803] bridge_slave_1: entered allmulticast mode [ 70.765571][ T5803] bridge_slave_1: entered promiscuous mode [ 70.847213][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.878457][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.892045][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.899285][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.906513][ T5808] bridge_slave_0: entered allmulticast mode [ 70.913629][ T5808] bridge_slave_0: entered promiscuous mode [ 70.948554][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.955748][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.963141][ T5808] bridge_slave_1: entered allmulticast mode [ 70.969968][ T5808] bridge_slave_1: entered promiscuous mode [ 71.024734][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.031850][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.039437][ T5809] bridge_slave_0: entered allmulticast mode [ 71.046444][ T5809] bridge_slave_0: entered promiscuous mode [ 71.055752][ T5803] team0: Port device team_slave_0 added [ 71.061456][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.068683][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.076109][ T5809] bridge_slave_1: entered allmulticast mode [ 71.083001][ T5809] bridge_slave_1: entered promiscuous mode [ 71.097491][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.104689][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.111833][ T5802] bridge_slave_0: entered allmulticast mode [ 71.118845][ T5802] bridge_slave_0: entered promiscuous mode [ 71.135767][ T5803] team0: Port device team_slave_1 added [ 71.143670][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.161407][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.169144][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.176601][ T5807] bridge_slave_0: entered allmulticast mode [ 71.183546][ T5807] bridge_slave_0: entered promiscuous mode [ 71.190513][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.198144][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.205340][ T5802] bridge_slave_1: entered allmulticast mode [ 71.212121][ T5802] bridge_slave_1: entered promiscuous mode [ 71.229514][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.244109][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.250524][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.272880][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.280151][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.287389][ T5807] bridge_slave_1: entered allmulticast mode [ 71.294260][ T5807] bridge_slave_1: entered promiscuous mode [ 71.317800][ T5808] team0: Port device team_slave_0 added [ 71.326262][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.352593][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.359605][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.385777][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.399940][ T5808] team0: Port device team_slave_1 added [ 71.407909][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.427495][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.440708][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.447810][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.473873][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.503000][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.514557][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.548501][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.581765][ T5802] team0: Port device team_slave_0 added [ 71.588618][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.595585][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.621731][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.634719][ T5809] team0: Port device team_slave_0 added [ 71.640885][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.648013][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.674040][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.695044][ T5802] team0: Port device team_slave_1 added [ 71.712176][ T5809] team0: Port device team_slave_1 added [ 71.764220][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.771178][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.797217][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.810036][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.817088][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.843047][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.855799][ T5807] team0: Port device team_slave_0 added [ 71.864289][ T5807] team0: Port device team_slave_1 added [ 71.880437][ T5803] hsr_slave_0: entered promiscuous mode [ 71.887357][ T5803] hsr_slave_1: entered promiscuous mode [ 71.928484][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.936054][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.962693][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.963303][ T5811] Bluetooth: hci1: command tx timeout [ 71.979374][ T5813] Bluetooth: hci0: command tx timeout [ 72.006158][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.013235][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.033321][ T5813] Bluetooth: hci4: command tx timeout [ 72.039358][ T5811] Bluetooth: hci3: command tx timeout [ 72.045227][ T5816] Bluetooth: hci2: command tx timeout [ 72.050535][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.067225][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.074239][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.100405][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.121946][ T5808] hsr_slave_0: entered promiscuous mode [ 72.128208][ T5808] hsr_slave_1: entered promiscuous mode [ 72.134499][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 72.140269][ T5808] Cannot create hsr debugfs directory [ 72.154067][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.161019][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.187381][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.224382][ T5809] hsr_slave_0: entered promiscuous mode [ 72.230974][ T5809] hsr_slave_1: entered promiscuous mode [ 72.237682][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 72.243628][ T5809] Cannot create hsr debugfs directory [ 72.340424][ T5802] hsr_slave_0: entered promiscuous mode [ 72.347276][ T5802] hsr_slave_1: entered promiscuous mode [ 72.354106][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 72.359834][ T5802] Cannot create hsr debugfs directory [ 72.411659][ T5807] hsr_slave_0: entered promiscuous mode [ 72.417913][ T5807] hsr_slave_1: entered promiscuous mode [ 72.424168][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 72.429896][ T5807] Cannot create hsr debugfs directory [ 72.800566][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.825021][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.841410][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.853676][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.895805][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.908442][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.922060][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.932329][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.026445][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.053283][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.065913][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.076952][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.148854][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.159556][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.169716][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.179929][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.204419][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.299189][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.310299][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.334069][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.346136][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.353444][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.378161][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.385325][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.400850][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.408833][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.419196][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.472015][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.518156][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.525312][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.551287][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.560030][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.567157][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.655863][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 73.655879][ T29] audit: type=1400 audit(1774976412.918:84): avc: denied { sys_module } for pid=5803 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.690119][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.747540][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.754723][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.765873][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.773042][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.796545][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.811682][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.880575][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.919433][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.926719][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.952099][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.976045][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.983201][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.997087][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.009327][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.016491][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.033441][ T5816] Bluetooth: hci1: command tx timeout [ 74.047091][ T5813] Bluetooth: hci0: command tx timeout [ 74.056840][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.063979][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.088960][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.123563][ T5813] Bluetooth: hci3: command tx timeout [ 74.128995][ T5813] Bluetooth: hci4: command tx timeout [ 74.134463][ T5813] Bluetooth: hci2: command tx timeout [ 74.151807][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.196661][ T5802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.341436][ T5803] veth0_vlan: entered promiscuous mode [ 74.367817][ T5808] veth0_vlan: entered promiscuous mode [ 74.398697][ T5808] veth1_vlan: entered promiscuous mode [ 74.410377][ T5803] veth1_vlan: entered promiscuous mode [ 74.469640][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.517475][ T5808] veth0_macvtap: entered promiscuous mode [ 74.535436][ T5803] veth0_macvtap: entered promiscuous mode [ 74.549856][ T5808] veth1_macvtap: entered promiscuous mode [ 74.559522][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.582680][ T5803] veth1_macvtap: entered promiscuous mode [ 74.607425][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.628209][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.665658][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.685194][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.709125][ T5809] veth0_vlan: entered promiscuous mode [ 74.734449][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.779061][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.795856][ T5807] veth0_vlan: entered promiscuous mode [ 74.803569][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822378][ T5809] veth1_vlan: entered promiscuous mode [ 74.856224][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.866126][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.880470][ T5807] veth1_vlan: entered promiscuous mode [ 74.900145][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.915314][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.939598][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.952331][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.991983][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.008091][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.044692][ T5809] veth0_macvtap: entered promiscuous mode [ 75.076258][ T5807] veth0_macvtap: entered promiscuous mode [ 75.091942][ T5809] veth1_macvtap: entered promiscuous mode [ 75.109521][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.117436][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.133923][ T5807] veth1_macvtap: entered promiscuous mode [ 75.141076][ T5802] veth0_vlan: entered promiscuous mode [ 75.170831][ T29] audit: type=1400 audit(1774976414.428:85): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.Ukq4n3/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.195840][ T29] audit: type=1400 audit(1774976414.428:86): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.196057][ T5802] veth1_vlan: entered promiscuous mode [ 75.224146][ T29] audit: type=1400 audit(1774976414.438:87): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.Ukq4n3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.252671][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.262673][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.270942][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.277850][ T29] audit: type=1400 audit(1774976414.438:88): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.308660][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.313663][ T29] audit: type=1400 audit(1774976414.438:89): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.Ukq4n3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.353841][ T29] audit: type=1400 audit(1774976414.438:90): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.Ukq4n3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.382809][ T29] audit: type=1400 audit(1774976414.448:91): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.390388][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.421416][ T29] audit: type=1400 audit(1774976414.488:92): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.424660][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.452632][ T29] audit: type=1400 audit(1774976414.488:93): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="gadgetfs" ino=6974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.457771][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.515288][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.533240][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.578836][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.588359][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.610849][ T5802] veth0_macvtap: entered promiscuous mode [ 75.618716][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.630858][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.655196][ T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.664073][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.694187][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.749736][ T5802] veth1_macvtap: entered promiscuous mode [ 75.790323][ T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.883768][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.905771][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.922043][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.016678][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.086564][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.100628][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.114628][ T5816] Bluetooth: hci0: command tx timeout [ 76.123794][ T5816] Bluetooth: hci1: command tx timeout [ 76.129534][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.143052][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.151852][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.165387][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.193049][ T5816] Bluetooth: hci2: command tx timeout [ 76.198486][ T5816] Bluetooth: hci4: command tx timeout [ 76.204364][ T5813] Bluetooth: hci3: command tx timeout [ 76.281849][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.295642][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.338708][ T5928] Zero length message leads to an empty skb [ 76.360507][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.397065][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.536342][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.584287][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.803736][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.852182][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.860207][ T5815] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 78.095912][ T5815] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.105584][ T5815] usb 4-1: config 0 has no interface number 0 [ 78.149360][ T5815] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 78.168799][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.209989][ T5815] usb 4-1: config 0 descriptor?? [ 78.229016][ T5815] usb 4-1: selecting invalid altsetting 1 [ 78.247291][ T5816] Bluetooth: hci1: command tx timeout [ 78.252728][ T5816] Bluetooth: hci0: command tx timeout [ 78.269743][ T5815] dvb_ttusb_budget: ttusb_init_controller: error [ 78.273590][ T5816] Bluetooth: hci4: command tx timeout [ 78.281483][ T5816] Bluetooth: hci3: command tx timeout [ 78.287622][ T5813] Bluetooth: hci2: command tx timeout [ 78.332519][ T5815] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 78.471365][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.524417][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.761672][ T5815] DVB: Unable to find symbol cx22700_attach() [ 78.770947][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 78.770958][ T29] audit: type=1400 audit(1774976418.028:146): avc: denied { create } for pid=5967 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.801835][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 78.817771][ T29] audit: type=1400 audit(1774976418.058:147): avc: denied { ioctl } for pid=5967 comm="syz.2.17" path="socket:[9322]" dev="sockfs" ino=9322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.897956][ T29] audit: type=1400 audit(1774976418.058:148): avc: denied { connect } for pid=5967 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.922102][ T5815] DVB: Unable to find symbol tda10046_attach() [ 78.928737][ T5815] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 78.952203][ T5815] usb 4-1: USB disconnect, device number 2 [ 78.959607][ T29] audit: type=1400 audit(1774976418.058:149): avc: denied { write } for pid=5967 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.054832][ T5973] fuse: Bad value for 'fd' [ 79.059322][ T29] audit: type=1400 audit(1774976418.308:150): avc: denied { allowed } for pid=5972 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.207640][ T29] audit: type=1400 audit(1774976418.468:151): avc: denied { write } for pid=5976 comm="syz.3.20" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.362263][ T29] audit: type=1400 audit(1774976418.618:152): avc: denied { open } for pid=5979 comm="syz.4.21" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 79.482822][ T29] audit: type=1400 audit(1774976418.698:153): avc: denied { create } for pid=5979 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.533260][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 79.539823][ T29] audit: type=1400 audit(1774976418.698:154): avc: denied { setopt } for pid=5979 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.610443][ T29] audit: type=1400 audit(1774976418.698:155): avc: denied { accept } for pid=5979 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.661245][ T5990] tipc: Started in network mode [ 79.667176][ T5990] tipc: Node identity 721257d009b5, cluster identity 4711 [ 79.683631][ T5990] tipc: Enabled bearer , priority 0 [ 79.691508][ T5990] syzkaller0: entered promiscuous mode [ 79.698018][ T5990] syzkaller0: entered allmulticast mode [ 79.793901][ T5993] tipc: Resetting bearer [ 79.816062][ T5990] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.26' sets config #1 [ 79.834914][ T5998] fuse: Bad value for 'fd' [ 79.841514][ T5989] tipc: Resetting bearer [ 79.909623][ T5989] tipc: Disabling bearer [ 80.182001][ T6014] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.039411][ T6028] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.37' sets config #0 [ 81.049281][ T6028] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.37' sets config #1 [ 81.417131][ T6036] vlan2: entered allmulticast mode [ 81.476640][ T6036] bond0: entered allmulticast mode [ 81.492563][ T47] cfg80211: failed to load regulatory.db [ 81.522702][ T6036] bond_slave_0: entered allmulticast mode [ 81.534040][ T6039] netlink: 14 bytes leftover after parsing attributes in process `syz.4.42'. [ 81.574952][ T6036] bond_slave_1: entered allmulticast mode [ 81.835652][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.911446][ T6039] bond_slave_0: left allmulticast mode [ 81.926405][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.940861][ T6039] bond_slave_1: left allmulticast mode [ 81.965741][ T6039] bond0 (unregistering): Released all slaves [ 84.444838][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 84.444855][ T29] audit: type=1400 audit(1774976423.708:192): avc: denied { append } for pid=6092 comm="syz.3.63" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.902532][ T29] audit: type=1400 audit(1774976423.708:193): avc: denied { write } for pid=6092 comm="syz.3.63" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.925664][ T29] audit: type=1400 audit(1774976424.168:194): avc: denied { ioctl } for pid=6092 comm="syz.3.63" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.223026][ T29] audit: type=1400 audit(1774976424.478:195): avc: denied { read } for pid=6106 comm="syz.2.69" name="mouse0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.300791][ T29] audit: type=1400 audit(1774976424.478:196): avc: denied { open } for pid=6106 comm="syz.2.69" path="/dev/input/mouse0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.332891][ T29] audit: type=1400 audit(1774976424.518:197): avc: denied { create } for pid=6108 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.353683][ T29] audit: type=1400 audit(1774976424.518:198): avc: denied { write } for pid=6108 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.813465][ T29] audit: type=1400 audit(1774976425.068:199): avc: denied { listen } for pid=6118 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.833867][ T29] audit: type=1400 audit(1774976425.098:200): avc: denied { read } for pid=6118 comm="syz.4.72" path="socket:[9850]" dev="sockfs" ino=9850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.551096][ T6138] syz.3.78 uses obsolete (PF_INET,SOCK_PACKET) [ 86.903946][ T5815] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.172843][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 87.188626][ T5815] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 87.199610][ T29] audit: type=1400 audit(1774976426.458:201): avc: denied { setopt } for pid=6150 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.219399][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.233585][ T5815] usb 5-1: Product: syz [ 87.252342][ T5815] usb 5-1: Manufacturer: syz [ 87.263307][ T5815] usb 5-1: SerialNumber: syz [ 87.287964][ T5815] usb 5-1: config 0 descriptor?? [ 87.348906][ T6157] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.357181][ T6157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.364644][ T6157] IPv6: NLM_F_CREATE should be set when creating new route [ 87.371985][ T6157] IPv6: NLM_F_CREATE should be set when creating new route [ 87.379235][ T6157] IPv6: NLM_F_CREATE should be set when creating new route [ 87.594015][ T6163] syzkaller0: entered promiscuous mode [ 87.599595][ T6163] syzkaller0: entered allmulticast mode [ 87.813022][ T5815] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 87.831503][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.865911][ T5815] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 87.888273][ T5815] usb 5-1: media controller created [ 87.939506][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.231642][ T5815] zl10353_read_register: readreg error (reg=127, ret==0) [ 88.247466][ T5815] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 88.261136][ T6178] netlink: 'syz.3.94': attribute type 2 has an invalid length. [ 88.272593][ T5815] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 88.289992][ T6178] netlink: 'syz.3.94': attribute type 5 has an invalid length. [ 88.308281][ T6178] netlink: 'syz.3.94': attribute type 2 has an invalid length. [ 88.328265][ T5815] usb 5-1: USB disconnect, device number 2 [ 88.338170][ T6178] netlink: 'syz.3.94': attribute type 5 has an invalid length. [ 88.415378][ T5815] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 90.065352][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 90.065370][ T29] audit: type=1400 audit(1774976429.328:220): avc: denied { append } for pid=6213 comm="syz.0.110" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.967136][ T6226] tipc: Started in network mode [ 91.016478][ T6226] tipc: Node identity aaaaaaaaaa4, cluster identity 4711 [ 91.059856][ T6226] tipc: Enabled bearer , priority 10 [ 91.206579][ T29] audit: type=1400 audit(1774976430.468:221): avc: denied { bind } for pid=6227 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.255603][ T29] audit: type=1400 audit(1774976430.468:222): avc: denied { setopt } for pid=6227 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.672846][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 91.710774][ T29] audit: type=1400 audit(1774976430.518:223): avc: denied { write } for pid=6227 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.757426][ T29] audit: type=1400 audit(1774976430.698:224): avc: denied { create } for pid=6229 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.875639][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 91.887108][ T9] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 91.925870][ T9] usb 4-1: Product: syz [ 91.946180][ T29] audit: type=1400 audit(1774976431.048:225): avc: denied { name_bind } for pid=6235 comm="syz.1.117" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 92.068676][ T9] usb 4-1: Manufacturer: syz [ 92.073800][ T47] tipc: Node number set to 15379114 [ 92.079827][ T9] usb 4-1: SerialNumber: syz [ 92.119293][ T9] usb 4-1: config 0 descriptor?? [ 92.129352][ T29] audit: type=1400 audit(1774976431.348:226): avc: denied { mounton } for pid=6239 comm="syz.1.118" path="/27/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.582645][ T5816] Bluetooth: Unexpected continuation frame (len 12) [ 93.629510][ T29] audit: type=1400 audit(1774976432.888:227): avc: denied { bind } for pid=6268 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.650416][ T29] audit: type=1400 audit(1774976432.888:228): avc: denied { listen } for pid=6268 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.823297][ T6275] lo: entered allmulticast mode [ 93.909621][ T29] audit: type=1400 audit(1774976433.068:229): avc: denied { create } for pid=6272 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.222836][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.294330][ T792] usb 4-1: USB disconnect, device number 3 [ 94.386295][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.396500][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.420102][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.471528][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.484630][ T6289] syzkaller0: entered promiscuous mode [ 94.562909][ T6289] syzkaller0: entered allmulticast mode [ 94.597160][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.617661][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.628239][ T10] usb 3-1: Product: syz [ 94.647024][ T10] usb 3-1: Manufacturer: syz [ 94.676291][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 94.681539][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 94.698190][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 94.705857][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 94.789250][ T6297] syz.4.137 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.968098][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 94.969004][ T47] usb 3-1: USB disconnect, device number 2 [ 94.974966][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 94.986718][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 95.093725][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 95.093737][ T29] audit: type=1400 audit(1774976434.358:238): avc: denied { setopt } for pid=6308 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.341266][ T29] audit: type=1400 audit(1774976434.598:239): avc: denied { write } for pid=6313 comm="syz.1.142" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.431382][ T29] audit: type=1400 audit(1774976434.628:240): avc: denied { open } for pid=6313 comm="syz.1.142" path="/dev/sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.499189][ T29] audit: type=1400 audit(1774976434.628:241): avc: denied { ioctl } for pid=6313 comm="syz.1.142" path="/dev/sg0" dev="devtmpfs" ino=815 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.526729][ T6312] syzkaller0: entered promiscuous mode [ 95.536357][ T6312] syzkaller0: entered allmulticast mode [ 95.715896][ T29] audit: type=1400 audit(1774976434.968:242): avc: denied { mount } for pid=6316 comm="syz.1.143" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 95.815179][ T29] audit: type=1400 audit(1774976435.068:243): avc: denied { mounton } for pid=6319 comm="syz.2.144" path="/26/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.943323][ T29] audit: type=1400 audit(1774976435.198:244): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 96.770331][ T29] audit: type=1400 audit(1774976436.028:245): avc: denied { read } for pid=6334 comm="syz.0.150" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 96.801455][ T29] audit: type=1400 audit(1774976436.028:246): avc: denied { open } for pid=6334 comm="syz.0.150" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 97.671245][ T29] audit: type=1400 audit(1774976436.538:247): avc: denied { create } for pid=6339 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 98.112059][ T6348] input: syz1 as /devices/virtual/input/input5 [ 98.152529][ T6351] fuse: Bad value for 'group_id' [ 98.167809][ T6351] fuse: Bad value for 'group_id' [ 98.464856][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 98.677674][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 99.518464][ T6387] fuse: Bad value for 'group_id' [ 99.523643][ T6387] fuse: Bad value for 'group_id' [ 100.109316][ T6392] input: syz1 as /devices/virtual/input/input6 [ 100.347937][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 100.347956][ T29] audit: type=1400 audit(1774976439.548:260): avc: denied { create } for pid=6390 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.576529][ T29] audit: type=1400 audit(1774976439.548:261): avc: denied { setopt } for pid=6390 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.712098][ T29] audit: type=1400 audit(1774976439.558:262): avc: denied { bind } for pid=6390 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.808515][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.172'. [ 101.243089][ T29] audit: type=1400 audit(1774976440.508:263): avc: denied { read write } for pid=6421 comm="syz.0.177" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 101.329862][ T29] audit: type=1400 audit(1774976440.538:264): avc: denied { open } for pid=6421 comm="syz.0.177" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 101.461973][ T6426] fuse: Bad value for 'group_id' [ 101.491976][ T6426] fuse: Bad value for 'group_id' [ 101.519380][ T6428] input: syz1 as /devices/virtual/input/input7 [ 101.658682][ T29] audit: type=1400 audit(1774976440.898:265): avc: denied { create } for pid=6423 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.688821][ T29] audit: type=1400 audit(1774976440.908:266): avc: denied { ioctl } for pid=6423 comm="syz.4.178" path="socket:[11535]" dev="sockfs" ino=11535 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.103110][ T29] audit: type=1400 audit(1774976442.348:267): avc: denied { create } for pid=6449 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.277344][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 103.323682][ T29] audit: type=1400 audit(1774976442.578:268): avc: denied { execute } for pid=6458 comm="syz.4.189" path="/30/cpuacct.usage_percpu" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.405885][ T29] audit: type=1400 audit(1774976442.638:269): avc: denied { map_read map_write } for pid=6461 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.578473][ T6469] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 103.785259][ T6472] input: syz1 as /devices/virtual/input/input8 [ 105.440677][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 105.440693][ T29] audit: type=1400 audit(1774976444.698:275): avc: denied { create } for pid=6506 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.585698][ T29] audit: type=1400 audit(1774976444.728:276): avc: denied { getopt } for pid=6506 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.923098][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 106.844108][ T6524] input: syz1 as /devices/virtual/input/input9 [ 106.959853][ T29] audit: type=1400 audit(1774976446.218:277): avc: denied { write } for pid=6530 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.288505][ T6540] capability: warning: `syz.0.213' uses deprecated v2 capabilities in a way that may be insecure [ 107.663366][ T29] audit: type=1400 audit(1774976446.928:278): avc: denied { setopt } for pid=6556 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.820520][ T29] audit: type=1400 audit(1774976447.078:279): avc: denied { connect } for pid=6558 comm="syz.0.221" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.892422][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 107.922693][ T29] audit: type=1400 audit(1774976447.078:280): avc: denied { write } for pid=6558 comm="syz.0.221" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.035125][ T29] audit: type=1400 audit(1774976447.288:281): avc: denied { read } for pid=6563 comm="syz.3.223" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.329017][ T29] audit: type=1400 audit(1774976447.558:282): avc: denied { name_connect } for pid=6570 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 108.383539][ T29] audit: type=1400 audit(1774976447.558:283): avc: denied { accept } for pid=6570 comm="syz.0.224" lport=48575 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.489500][ T29] audit: type=1400 audit(1774976447.558:284): avc: denied { read } for pid=6570 comm="syz.0.224" lport=48575 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 108.586966][ T6583] netlink: 'syz.1.228': attribute type 4 has an invalid length. [ 109.097322][ T6564] KVM: debugfs: duplicate directory 6564-10 [ 109.806491][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 110.616118][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 110.616135][ T29] audit: type=1400 audit(1774976449.868:290): avc: denied { write } for pid=6616 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.822684][ T6621] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 111.006044][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'. [ 111.018865][ T29] audit: type=1400 audit(1774976450.268:291): avc: denied { watch watch_reads } for pid=6622 comm="syz.3.240" path="/49" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.101151][ T6621] bond1: entered promiscuous mode [ 111.123415][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'. [ 111.313964][ T6621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.559433][ T6631] bond1: (slave bridge1): making interface the new active one [ 111.575113][ T6631] bridge1: entered promiscuous mode [ 111.582262][ T6631] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 111.798128][ T6641] hub 1-0:1.0: USB hub found [ 111.806856][ T6641] hub 1-0:1.0: 1 port detected [ 112.067920][ T6648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45824 sclass=netlink_route_socket pid=6648 comm=syz.1.247 [ 112.288230][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 112.598444][ T29] audit: type=1400 audit(1774976451.858:292): avc: denied { ioctl } for pid=6660 comm="syz.0.252" path="socket:[12158]" dev="sockfs" ino=12158 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.624280][ T29] audit: type=1400 audit(1774976451.858:293): avc: denied { write } for pid=6660 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.660612][ T29] audit: type=1400 audit(1774976451.918:294): avc: denied { create } for pid=6660 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.782792][ T29] audit: type=1400 audit(1774976452.008:295): avc: denied { create } for pid=6660 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.963983][ T29] audit: type=1400 audit(1774976452.008:296): avc: denied { write } for pid=6660 comm="syz.0.252" path="socket:[12163]" dev="sockfs" ino=12163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.719493][ T29] audit: type=1400 audit(1774976452.978:297): avc: denied { setopt } for pid=6676 comm="syz.4.257" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.436466][ T29] audit: type=1400 audit(1774976453.558:298): avc: denied { shutdown } for pid=6676 comm="syz.4.257" lport=49239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.614456][ T29] audit: type=1400 audit(1774976453.718:299): avc: denied { search } for pid=5472 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.900341][ T6716] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 116.309468][ T6726] fuse: Unknown parameter 'grou00000000000000000000' [ 116.467255][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 116.467274][ T29] audit: type=1400 audit(1774976455.618:309): avc: denied { ioctl } for pid=6721 comm="syz.2.268" path="socket:[11261]" dev="sockfs" ino=11261 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.907710][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 116.936257][ T6746] netlink: 'syz.4.272': attribute type 2 has an invalid length. [ 116.971440][ T29] audit: type=1400 audit(1774976456.228:310): avc: denied { add_name } for pid=6699 comm="dhcpcd-run-hook" name="resolv.conf.xfrm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.975962][ T6746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.272'. [ 117.076794][ T6748] FĴ [ 117.076794][ T6748] ffrhHӬ|LđOw?EO~&V2_ߞA:~k\ E7Ȃxx[>|\݈e^j?/)r|k%`cw!ԟi0B&z[P}uO.SW8A'z [ 117.132854][ T29] audit: type=1400 audit(1774976456.228:311): avc: denied { create } for pid=6699 comm="dhcpcd-run-hook" name="resolv.conf.xfrm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.283281][ T29] audit: type=1400 audit(1774976456.228:312): avc: denied { write } for pid=6699 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.xfrm0.link" dev="tmpfs" ino=2953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.295636][ T6753] geneve2: entered promiscuous mode [ 117.350101][ T29] audit: type=1400 audit(1774976456.228:313): avc: denied { append } for pid=6699 comm="dhcpcd-run-hook" name="resolv.conf.xfrm0.link" dev="tmpfs" ino=2953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.402855][ T29] audit: type=1400 audit(1774976456.588:314): avc: denied { remove_name } for pid=6756 comm="rm" name="resolv.conf.xfrm0.link" dev="tmpfs" ino=2953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.507404][ T6759] tipc: Started in network mode [ 117.561443][ T29] audit: type=1400 audit(1774976456.588:315): avc: denied { unlink } for pid=6756 comm="rm" name="resolv.conf.xfrm0.link" dev="tmpfs" ino=2953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.602060][ T6759] tipc: Node identity 4, cluster identity 4711 [ 117.619642][ T6759] tipc: Node number set to 4 [ 118.203188][ T29] audit: type=1400 audit(1774976457.458:316): avc: denied { create } for pid=6767 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.496509][ T29] audit: type=1400 audit(1774976457.748:317): avc: denied { map } for pid=6767 comm="syz.0.278" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.496555][ T29] audit: type=1400 audit(1774976457.748:318): avc: denied { write } for pid=6767 comm="syz.0.278" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.503468][ T6776] fuse: Unknown parameter 'grou00000000000000000000' [ 118.669853][ T6777] ceph: No mds server is up or the cluster is laggy [ 119.057472][ T47] libceph: connect (1)[c::]:6789 error -101 [ 119.108950][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 120.303748][ T6801] FĴ [ 120.303748][ T6801] ffrhHӬ|LđOw?EO~&V2_ߞA:~k\ E7Ȃxx[>| [ 121.539646][ T6819] fuse: Unknown parameter 'grou00000000000000000000' [ 121.859909][ T6833] FĴ [ 121.859909][ T6833] ffrhHӬ|LđOw?EO~&V2_ߞA:~k\ E7Ȃxx[>| [ 121.883123][ T29] audit: type=1400 audit(1774976461.138:319): avc: denied { sqpoll } for pid=6828 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 122.401604][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 123.551424][ T6869] fuse: Unknown parameter 'group_i00000000000000000000' [ 123.582982][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 123.731363][ T10] usb 2-1: device descriptor read/64, error -71 [ 123.976173][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 124.069388][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.162890][ T10] usb 2-1: device descriptor read/64, error -71 [ 124.195644][ T6882] bond0: (slave veth3): Enslaving as an active interface with an up link [ 124.288615][ T10] usb usb2-port1: attempt power cycle [ 124.329262][ T6879] vlan2: entered allmulticast mode [ 124.367504][ T6879] veth0_to_bond: entered allmulticast mode [ 124.376942][ T6879] veth0_to_bond: entered promiscuous mode [ 124.385963][ T6879] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 124.400614][ T6887] FĴ [ 124.400614][ T6887] ffrhHӬ|LđOw?EO~&V2_ߞA:~k\ E7Ȃxx[>| [ 124.692923][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 124.698324][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 124.814401][ T10] usb 2-1: device descriptor read/8, error -71 [ 124.873964][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 125.060995][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.105028][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 125.136843][ T10] usb 2-1: device descriptor read/8, error -71 [ 125.144238][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.210060][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 125.226282][ T6914] fuse: Unknown parameter 'group_i00000000000000000000' [ 125.261380][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.283856][ T10] usb usb2-port1: unable to enumerate USB device [ 125.419453][ T9] usb 1-1: config 0 descriptor?? [ 125.944416][ T9] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 125.964653][ T9] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 125.989683][ T9] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 126.028628][ T9] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 126.057493][ T9] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 126.166546][ T9] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 126.218648][ T9] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 126.298540][ T9] usb 1-1: USB disconnect, device number 2 [ 126.481344][ T6931] fido_id[6931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 126.805412][ T5472] veth0_macvtap: left promiscuous mode [ 127.491762][ T6950] input: syz1 as /devices/virtual/input/input10 [ 127.510312][ T29] audit: type=1400 audit(1774976466.768:320): avc: denied { bind } for pid=6954 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.065757][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 128.187291][ T29] audit: type=1400 audit(1774976467.448:321): avc: denied { write } for pid=6970 comm="syz.3.335" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.281135][ T29] audit: type=1400 audit(1774976467.448:322): avc: denied { open } for pid=6970 comm="syz.3.335" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.605931][ T29] audit: type=1400 audit(1774976467.448:323): avc: denied { ioctl } for pid=6970 comm="syz.3.335" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.726866][ T29] audit: type=1400 audit(1774976467.678:324): avc: denied { bind } for pid=6975 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 129.019466][ T6982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.085846][ T29] audit: type=1400 audit(1774976468.348:325): avc: denied { create } for pid=6989 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 129.260578][ T29] audit: type=1400 audit(1774976468.508:326): avc: denied { mount } for pid=6995 comm="syz.4.341" name="/" dev="autofs" ino=13883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 129.918382][ T29] audit: type=1400 audit(1774976469.178:327): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 130.042847][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.117164][ T7014] fuse: Unknown parameter 'group_i00000000000000000000' [ 130.243721][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 130.356800][ T10] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 130.367618][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 130.381823][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 130.405945][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.468851][ T10] usb 4-1: config 0 descriptor?? [ 130.494457][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 130.815358][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.824022][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.858891][ T10] usb 4-1: USB disconnect, device number 4 [ 130.972423][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 132.006438][ T7056] input: syz1 as /devices/virtual/input/input11 [ 132.244475][ T7063] fuse: Unknown parameter 'group_id00000000000000000000' [ 132.696116][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.702550][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.777528][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 134.109524][ T10] IPVS: starting estimator thread 0... [ 134.385950][ T7106] IPVS: using max 43 ests per chain, 103200 per kthread [ 134.454088][ T7113] fuse: Unknown parameter 'group_id00000000000000000000' [ 134.563060][ T5854] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.753173][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 134.786088][ T5854] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 134.812955][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 134.855862][ T5854] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 135.066909][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.220090][ T5854] usb 3-1: config 0 descriptor?? [ 135.438918][ T5854] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 135.643693][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.652336][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.663877][ T9] usb 3-1: USB disconnect, device number 3 [ 136.027017][ T7123] scsi_nl_rcv_msg: discarding partial skb [ 136.052902][ T29] audit: type=1400 audit(1774976475.288:328): avc: denied { create } for pid=7122 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 136.219981][ T29] audit: type=1400 audit(1774976475.288:329): avc: denied { write } for pid=7122 comm="syz.1.371" path="socket:[16253]" dev="sockfs" ino=16253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 136.580953][ T7157] fuse: Unknown parameter 'group_id00000000000000000000' [ 136.753285][ T7160] ceph: No mds server is up or the cluster is laggy [ 136.770194][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 137.068013][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 137.141064][ T7165] input: syz1 as /devices/virtual/input/input12 [ 139.192639][ T7204] fuse: Bad value for 'user_id' [ 139.215456][ T7204] fuse: Bad value for 'user_id' [ 140.250674][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 140.546841][ T7235] nbd: must specify at least one socket [ 140.618842][ T7235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.717627][ T29] audit: type=1400 audit(1774976479.978:330): avc: denied { create } for pid=7236 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 140.789641][ T29] audit: type=1400 audit(1774976479.998:331): avc: denied { bind } for pid=7236 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 140.843370][ T7244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.862039][ T29] audit: type=1400 audit(1774976480.008:332): avc: denied { setopt } for pid=7236 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 140.920982][ T10] libceph: connect (1)[c::]:6789 error -101 [ 140.927372][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 140.937424][ T29] audit: type=1400 audit(1774976480.078:333): avc: denied { ioctl } for pid=7236 comm="syz.0.407" path="socket:[14250]" dev="sockfs" ino=14250 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.983975][ T7245] ceph: No mds server is up or the cluster is laggy [ 141.244518][ T10] libceph: connect (1)[c::]:6789 error -101 [ 141.250642][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 141.940074][ T7246] scsi_nl_rcv_msg: discarding partial skb [ 142.370679][ T29] audit: type=1400 audit(1774976481.628:334): avc: denied { bind } for pid=7264 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.669373][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 142.975147][ T29] audit: type=1400 audit(1774976482.238:335): avc: denied { bind } for pid=7283 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.017526][ T7288] nbd: must specify at least one socket [ 143.116927][ T7288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.004402][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 144.874085][ T7326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.363437][ T5854] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.622942][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 145.641908][ T5854] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 145.662134][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.728574][ T5854] usb 2-1: config 0 descriptor?? [ 145.972200][ T5854] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 146.031810][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.069519][ T5854] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 146.092256][ T5854] usb 2-1: media controller created [ 146.171075][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.382024][ T5854] DVB: Unable to find symbol dib7000p_attach() [ 146.413575][ T5854] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 146.496494][ T7367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.622870][ T5854] rc_core: IR keymap rc-dib0700-rc5 not found [ 146.640877][ T5854] Registered IR keymap rc-empty [ 146.678991][ T5854] dvb-usb: could not initialize remote control. [ 146.707295][ T5854] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 147.401686][ T5854] usb 2-1: USB disconnect, device number 6 [ 147.510044][ T5854] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 148.049469][ T7403] usb usb8: usbfs: process 7403 (syz.1.463) did not claim interface 0 before use [ 148.163815][ T5881] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.357060][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 148.374052][ T5881] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 148.452629][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 148.494404][ T5881] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 148.509010][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'. [ 148.550227][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.604283][ T5881] usb 3-1: config 0 descriptor?? [ 148.622047][ T5881] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 148.858976][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.867684][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.891746][ T5881] usb 3-1: USB disconnect, device number 4 [ 148.912586][ T7426] wireguard0: entered allmulticast mode [ 150.359937][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 150.895072][ T7476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.942081][ T10] IPVS: starting estimator thread 0... [ 151.033468][ T7481] IPVS: using max 42 ests per chain, 100800 per kthread [ 151.183000][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.401975][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 151.434051][ T10] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 151.473620][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 151.574122][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 151.613362][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.218419][ T29] audit: type=1400 audit(1774976490.908:336): avc: denied { read } for pid=7491 comm="syz.2.487" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.281201][ T10] usb 2-1: config 0 descriptor?? [ 152.315123][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 152.357926][ T29] audit: type=1400 audit(1774976490.908:337): avc: denied { open } for pid=7491 comm="syz.2.487" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.471420][ T29] audit: type=1400 audit(1774976490.918:338): avc: denied { ioctl } for pid=7491 comm="syz.2.487" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.528877][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.537547][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.547575][ T5854] usb 2-1: USB disconnect, device number 7 [ 152.609067][ T7500] kvm: MONITOR instruction emulated as NOP! [ 152.628131][ T29] audit: type=1400 audit(1774976491.858:339): avc: denied { view } for pid=7499 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 153.139420][ T7514] netlink: 76 bytes leftover after parsing attributes in process `syz.4.492'. [ 153.647769][ T7533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.742354][ T7536] lo: left allmulticast mode [ 153.793591][ T7536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.119589][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 155.033484][ T7584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.091958][ T7586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.750244][ T7607] ceph: No mds server is up or the cluster is laggy [ 155.760015][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 155.776752][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 155.845339][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 156.074573][ T7619] ptrace attach of "./syz-executor exec"[5803] was attempted by "./syz-executor exec"[7619] [ 156.363654][ T7628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.387067][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 157.386992][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 157.876856][ T792] libceph: connect (1)[c::]:6789 error -101 [ 157.900390][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 157.925210][ T7680] ceph: No mds server is up or the cluster is laggy [ 158.143204][ T7690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.952245][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 159.956626][ T7725] ptrace attach of ""[7724] was attempted by "./syz-executor exec"[7725] [ 160.813061][ T7737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.773015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 162.313685][ T7759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.560527][ T7785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.325083][ T7811] ceph: No mds server is up or the cluster is laggy [ 165.334624][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 165.342215][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 165.600014][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 165.705555][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 165.731369][ T7823] wireguard1: entered allmulticast mode [ 165.951567][ T7828] fuse: Invalid rootmode [ 167.413043][ T7851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.670467][ T7864] fuse: Invalid rootmode [ 167.697445][ T7859] FĴ [ 167.697445][ T7859] ffrhHӬ|LđOw?EO~&V2_ߞA:~k\ E7Ȃxx[>|\݈e^j?/)r|k%`cw! [ 167.842017][ T29] audit: type=1400 audit(1774976507.098:340): avc: denied { write } for pid=7870 comm="syz.1.599" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 168.199950][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.598'. [ 169.911293][ T29] audit: type=1400 audit(1774976509.088:341): avc: denied { mount } for pid=7902 comm="syz.0.609" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 170.225785][ T29] audit: type=1400 audit(1774976509.098:342): avc: denied { append } for pid=7902 comm="syz.0.609" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.235442][ T7912] fuse: Invalid rootmode [ 170.688403][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 170.753029][ T5875] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 170.773928][ T7927] ptrace attach of "./syz-executor exec"[7928] was attempted by "./syz-executor exec"[7927] [ 170.933162][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 170.972721][ T5875] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 171.015793][ T5875] usb 3-1: config 0 has no interface number 0 [ 171.043630][ T5875] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 171.090075][ T5875] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 171.132733][ T5875] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 171.142849][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.158468][ T5875] usb 3-1: Product: syz [ 171.166153][ T5875] usb 3-1: Manufacturer: syz [ 171.174074][ T5875] usb 3-1: SerialNumber: syz [ 171.188015][ T5875] usb 3-1: config 0 descriptor?? [ 171.203603][ T5875] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.359041][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'. [ 171.410567][ T5875] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 171.417939][ T5875] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 171.598074][ T5875] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 171.634859][ T47] usb 3-1: USB disconnect, device number 5 [ 171.669101][ T5875] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 171.679118][ T7940] netlink: 84 bytes leftover after parsing attributes in process `syz.0.620'. [ 172.232877][ T7952] fuse: Bad value for 'rootmode' [ 173.396729][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.627'. [ 173.555338][ T7936] program syz.4.618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.407614][ T7984] fuse: Bad value for 'rootmode' [ 174.734591][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 174.906514][ T7999] fuse: Bad value for 'fd' [ 174.942855][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 174.951033][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 174.992839][ T9] usb 1-1: config 0 has no interface number 0 [ 174.999050][ T9] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.104023][ T7996] ptrace attach of "./syz-executor exec"[8000] was attempted by "./syz-executor exec"[7996] [ 175.128825][ T9] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 175.173382][ T29] audit: type=1400 audit(1774976514.428:343): avc: denied { append } for pid=8003 comm="syz.3.645" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 175.198277][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 175.229547][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.271118][ T9] usb 1-1: Product: syz [ 175.290833][ T9] usb 1-1: Manufacturer: syz [ 175.298348][ T8008] netlink: 84 bytes leftover after parsing attributes in process `syz.2.646'. [ 175.318078][ T9] usb 1-1: SerialNumber: syz [ 175.363543][ T9] usb 1-1: config 0 descriptor?? [ 175.965020][ T29] audit: type=1400 audit(1774976515.228:344): avc: denied { unlink } for pid=5807 comm="syz-executor" name="file0" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 176.009241][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 176.230369][ T9] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 176.247291][ T9] quatech2 1-1:0.51: probe with driver quatech2 failed with error -90 [ 176.261291][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 176.343662][ T8020] fuse: Bad value for 'rootmode' [ 176.384830][ T29] audit: type=1400 audit(1774976515.648:345): avc: denied { read } for pid=8017 comm="syz.1.649" dev="sockfs" ino=20258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.410588][ T8019] process 'syz.1.649' launched '/dev/fd/7' with NULL argv: empty string added [ 176.444451][ T5854] usb 1-1: USB disconnect, device number 3 [ 176.469135][ T29] audit: type=1400 audit(1774976515.718:346): avc: denied { execute_no_trans } for pid=8017 comm="syz.1.649" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 176.723579][ T5815] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.087192][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.098240][ T5815] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 177.107668][ T5815] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 177.131583][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.156208][ T5815] usb 2-1: config 0 descriptor?? [ 177.287114][ T8036] fuse: Bad value for 'fd' [ 177.389655][ T8019] mmap: syz.1.649 (8019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 177.402405][ T29] audit: type=1400 audit(1774976516.648:347): avc: denied { append } for pid=8017 comm="syz.1.649" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 177.434265][ T8042] binder: BINDER_SET_CONTEXT_MGR already set [ 177.449466][ T8042] binder: 8041:8042 ioctl 4018620d 200000004a80 returned -16 [ 177.509196][ T5815] usb 2-1: USB disconnect, device number 8 [ 178.093958][ T8049] ptrace attach of "./syz-executor exec"[8052] was attempted by "./syz-executor exec"[8049] [ 178.354044][ T8054] fuse: Unknown parameter 'use00000000000000000000' [ 178.582490][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 178.729438][ T8066] program syz.3.668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.943243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.082855][ T5881] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.229841][ T8081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.275687][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 179.311065][ T5881] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 179.320896][ T8082] binder: BINDER_SET_CONTEXT_MGR already set [ 179.334416][ T8082] binder: 8080:8082 ioctl 4018620d 200000004a80 returned -16 [ 179.357711][ T8082] binder: 8080:8082 ioctl c0306201 0 returned -14 [ 179.379535][ T5881] usb 5-1: config 0 has no interface number 0 [ 179.432908][ T5881] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.537262][ T5881] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.649213][ T5881] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 179.839147][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.872021][ T5881] usb 5-1: Product: syz [ 179.894355][ T5881] usb 5-1: Manufacturer: syz [ 179.911158][ T5881] usb 5-1: SerialNumber: syz [ 179.938349][ T5881] usb 5-1: config 0 descriptor?? [ 179.960171][ T5881] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 179.974646][ T8089] fuse: Unknown parameter 'use00000000000000000000' [ 180.180659][ T5881] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 180.201585][ T5881] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 181.253049][ T8093] ptrace attach of "./syz-executor exec"[8095] was attempted by "./syz-executor exec"[8093] [ 181.447636][ T5815] usb 5-1: USB disconnect, device number 3 [ 181.465602][ T8092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.773252][ T8104] program syz.3.680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.813727][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 182.114363][ T8117] fuse: Unknown parameter 'use00000000000000000000' [ 182.124570][ T8115] binder: 8114:8115 ioctl c0306201 0 returned -14 [ 182.193525][ T8112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.133048][ T8120] ptrace attach of "./syz-executor exec"[8123] was attempted by "./syz-executor exec"[8120] [ 184.121851][ T8134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.643710][ T8144] fuse: Unknown parameter 'user_i00000000000000000000' [ 185.004188][ T8153] binder: BINDER_SET_CONTEXT_MGR already set [ 185.009633][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 185.069114][ T8153] binder: 8150:8153 ioctl 4018620d 200000004a80 returned -16 [ 185.953046][ T8158] ptrace attach of "./syz-executor exec"[8160] was attempted by "./syz-executor exec"[8158] [ 186.143072][ T8156] binder: 8150:8156 ioctl c0306201 0 returned -14 [ 186.625442][ T47] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.693993][ T47] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.672976][ T5881] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 187.832909][ T5881] usb 4-1: device descriptor read/64, error -71 [ 187.919646][ T8182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.072878][ T5881] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 188.279106][ T5881] usb 4-1: device descriptor read/64, error -71 [ 188.454647][ T5881] usb usb4-port1: attempt power cycle [ 188.676566][ T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 188.972871][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 188.982089][ T47] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 188.996064][ T5881] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.002835][ T47] usb 2-1: config 0 has no interface number 0 [ 189.009652][ T47] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.050685][ T47] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 189.055805][ T5881] usb 4-1: device descriptor read/8, error -71 [ 189.143122][ T47] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 189.172592][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.201176][ T47] usb 2-1: Product: syz [ 189.205956][ T47] usb 2-1: Manufacturer: syz [ 189.210585][ T47] usb 2-1: SerialNumber: syz [ 189.225165][ T8201] binder: BINDER_SET_CONTEXT_MGR already set [ 189.236428][ T8201] binder: 8198:8201 ioctl 4018620d 200000004a80 returned -16 [ 189.831383][ T5881] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 189.843869][ T8196] ptrace attach of ""[8204] was attempted by "./syz-executor exec"[8196] [ 189.854987][ T5881] usb 4-1: device descriptor read/8, error -71 [ 189.894331][ T47] usb 2-1: config 0 descriptor?? [ 189.914423][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'. [ 189.933231][ T47] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 189.984174][ T5881] usb usb4-port1: unable to enumerate USB device [ 190.123001][ T47] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 190.142964][ T47] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 190.324191][ T47] usb 2-1: USB disconnect, device number 9 [ 190.817223][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 191.226625][ T8224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.392027][ T8241] input: syz1 as /devices/virtual/input/input14 [ 192.482406][ T5875] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 193.183231][ T5875] usb 4-1: device descriptor read/64, error -71 [ 193.193404][ T8235] ptrace attach of ""[8248] was attempted by "./syz-executor exec"[8235] [ 193.210184][ T8241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8241 comm=syz.1.725 [ 193.547209][ T5875] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.976818][ T5875] usb 4-1: device descriptor read/64, error -71 [ 194.266923][ T5875] usb usb4-port1: attempt power cycle [ 194.371771][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.399830][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.254753][ T5875] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 195.482905][ T5875] usb 4-1: device not accepting address 11, error -71 [ 195.624296][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 195.762907][ T8269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.843086][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 195.864788][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 195.873053][ T5875] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 195.881398][ T5875] usb 4-1: config 0 has no interface number 0 [ 195.893630][ T5875] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.917770][ T5875] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 195.944705][ T5875] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 195.954486][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.962472][ T5875] usb 4-1: Product: syz [ 195.969379][ T5875] usb 4-1: Manufacturer: syz [ 195.986993][ T5875] usb 4-1: SerialNumber: syz [ 196.007993][ T5875] usb 4-1: config 0 descriptor?? [ 196.019142][ T5875] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 196.112980][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 196.322780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 196.849129][ T8279] ptrace attach of ""[8281] was attempted by "./syz-executor exec"[8279] [ 196.866444][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 196.866522][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 196.873677][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.878558][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 196.884819][ T5875] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 196.891706][ T5128] Bluetooth: hci4: command 0x0406 tx timeout [ 196.909251][ T5875] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 196.927863][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.938097][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 196.947214][ T9] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 196.956493][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.967308][ T9] usb 5-1: config 0 descriptor?? [ 197.154034][ T8285] input: syz1 as /devices/virtual/input/input15 [ 197.276831][ T5875] usb 4-1: USB disconnect, device number 12 [ 197.500012][ T9] usb 5-1: USB disconnect, device number 4 [ 197.815581][ T8292] input: syz1 as /devices/virtual/input/input16 [ 197.933138][ T8293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8293 comm=syz.2.742 [ 199.575324][ T8295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.836172][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 199.970411][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 199.988545][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.141123][ T8314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.200717][ T8331] input: syz1 as /devices/virtual/input/input17 [ 201.814106][ T8349] input: syz1 as /devices/virtual/input/input18 [ 201.948793][ T8349] warning: `syz.4.756' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 201.964863][ T8349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8349 comm=syz.4.756 [ 202.656926][ T8355] binder: BINDER_SET_CONTEXT_MGR already set [ 202.677386][ T8355] binder: 8354:8355 ioctl 4018620d 200000004a80 returned -16 [ 203.066995][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'. [ 204.384158][ T5875] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 204.435505][ T8379] input: syz1 as /devices/virtual/input/input19 [ 204.477815][ T5875] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 204.542273][ T8387] input: syz1 as /devices/virtual/input/input20 [ 204.567594][ T8380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.779702][ T8387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8387 comm=syz.3.770 [ 205.618005][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'. [ 205.648333][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 207.216547][ T8430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.310896][ T8434] input: syz1 as /devices/virtual/input/input21 [ 207.410385][ T8435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8435 comm=syz.3.784 [ 207.619881][ T5854] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 207.653538][ T792] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 208.147720][ T792] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.194909][ T792] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 208.215339][ T792] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.296281][ T792] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.312793][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.331127][ T792] usb 1-1: Product: syz [ 208.338895][ T792] usb 1-1: Manufacturer: syz [ 208.342877][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 208.344010][ T792] usb 1-1: SerialNumber: syz [ 208.356143][ T5854] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.371130][ T5854] usb 3-1: config 0 has no interface number 0 [ 208.386364][ T8442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.405151][ T792] cdc_ncm 1-1:1.0: skipping garbage [ 208.422519][ T792] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 208.424320][ T5854] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.447037][ T792] cdc_ncm 1-1:1.0: bind() failure [ 208.462847][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.489712][ T5854] usb 3-1: Product: syz [ 208.499022][ T5854] usb 3-1: Manufacturer: syz [ 208.513477][ T5854] usb 3-1: SerialNumber: syz [ 208.536022][ T5854] usb 3-1: config 0 descriptor?? [ 208.545645][ T5854] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 208.610418][ T5813] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 208.765938][ T5854] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 208.788055][ T5854] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 209.340147][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.367379][ T5889] usb 3-1: USB disconnect, device number 6 [ 209.483761][ T5889] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 209.656446][ T5889] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 209.701002][ T5889] quatech2 3-1:0.51: device disconnected [ 209.895592][ T8470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.132016][ T8482] input: syz1 as /devices/virtual/input/input22 [ 210.256655][ T8482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8482 comm=syz.2.798 [ 211.075320][ T5854] usb 1-1: USB disconnect, device number 4 [ 211.143766][ T8479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.499543][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 213.124980][ T5813] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 214.439351][ T5889] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 215.123056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 215.533033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 217.683062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 218.093552][ T5889] usb 3-1: device not accepting address 7, error -71 [ 218.329622][ T8521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.402917][ T5889] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 219.648342][ T5889] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.822965][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.475266][ T5889] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.935040][ T5889] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.944517][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.952519][ T5889] usb 3-1: Product: syz [ 220.957077][ T5889] usb 3-1: Manufacturer: syz [ 220.963733][ T5889] usb 3-1: SerialNumber: syz [ 220.980636][ T5889] cdc_ncm 3-1:1.0: skipping garbage [ 220.988739][ T5889] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 221.054886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 221.084421][ T5889] cdc_ncm 3-1:1.0: bind() failure [ 224.701014][ T5815] usb 3-1: USB disconnect, device number 8 [ 225.705366][ T5813] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 226.054003][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45824 sclass=netlink_route_socket pid=8562 comm=syz.0.824 [ 226.132818][ T5815] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 226.311791][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 226.481670][ T5815] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 226.500707][ T5815] usb 4-1: config 0 has no interface number 0 [ 226.518026][ T5815] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 226.527532][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.547509][ T5815] usb 4-1: Product: syz [ 226.645056][ T5815] usb 4-1: Manufacturer: syz [ 226.650881][ T8571] block nbd0: NBD_DISCONNECT [ 226.740132][ T5815] usb 4-1: SerialNumber: syz [ 226.795441][ T5815] usb 4-1: config 0 descriptor?? [ 226.801766][ T8571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.983207][ T5815] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 227.274058][ T5815] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 227.576592][ T5815] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 227.815363][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 227.827027][ T5815] usb 4-1: USB disconnect, device number 13 [ 228.354939][ T5815] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 234.218259][ T5815] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 234.462588][ T5815] quatech2 4-1:0.51: device disconnected [ 238.393577][ T5815] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 238.665561][ T8603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45824 sclass=netlink_route_socket pid=8603 comm=syz.1.836 [ 238.955335][ T5813] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 241.129426][ T8620] input: syz1 as /devices/virtual/input/input23 [ 241.693417][ T8618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8618 comm=syz.3.841 [ 244.430387][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.441181][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.449112][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.457143][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.465270][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.442393][ T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 245.598518][ T8637] chnl_net:caif_netlink_parms(): no params data found [ 245.644953][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.825123][ T47] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.251109][ T8655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45824 sclass=netlink_route_socket pid=8655 comm=syz.4.851 [ 246.332608][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.403624][ T47] usb 4-1: Product: syz [ 246.412500][ T47] usb 4-1: Manufacturer: syz [ 246.512872][ T5811] Bluetooth: hci5: command tx timeout [ 246.621157][ T47] usb 4-1: SerialNumber: syz [ 248.594918][ T5811] Bluetooth: hci5: command tx timeout [ 248.629499][ T47] usb 4-1: can't set config #1, error -71 [ 248.671982][ T47] usb 4-1: USB disconnect, device number 14 [ 250.204650][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.672988][ T5811] Bluetooth: hci5: command tx timeout [ 250.773896][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.781477][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.793881][ T8637] bridge_slave_0: entered allmulticast mode [ 250.805675][ T8637] bridge_slave_0: entered promiscuous mode [ 251.123719][ T8676] input: syz1 as /devices/virtual/input/input24 [ 251.567312][ T8682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8682 comm=syz.0.856 [ 252.752846][ T5811] Bluetooth: hci5: command tx timeout [ 253.523052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 255.309913][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.337719][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.348444][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.360097][ T8637] bridge_slave_1: entered allmulticast mode [ 255.371660][ T8637] bridge_slave_1: entered promiscuous mode [ 255.405316][ T792] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 255.483095][ T792] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.502897][ T5815] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 255.560255][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.566832][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.672627][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.686282][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 255.733809][ T5815] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 255.754314][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.789352][ T8637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.832085][ T5815] usb 5-1: config 0 descriptor?? [ 255.887431][ T8637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.983968][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.088414][ T5815] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 256.240083][ T29] audit: type=1400 audit(1774976595.488:348): avc: denied { firmware_load } for pid=5815 comm="kworker/1:3" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 256.266939][ T5815] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 256.292994][ T5815] dib0700: firmware download failed at 7 with -22 [ 256.314965][ T5815] usb 5-1: USB disconnect, device number 6 [ 256.353019][ T8689] program syz.3.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.370664][ T8637] team0: Port device team_slave_0 added [ 256.387621][ T8637] team0: Port device team_slave_1 added [ 256.435598][ T8701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.663857][ T5815] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 256.828322][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.850361][ T5815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.881309][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.928075][ T5815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.952262][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.975901][ T5815] usb 1-1: Product: syz [ 256.982389][ T5815] usb 1-1: Manufacturer: syz [ 256.991696][ T8637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.010717][ T5815] usb 1-1: SerialNumber: syz [ 257.064661][ T5815] usb 1-1: selecting invalid altsetting 1 [ 257.177958][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.185170][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.215401][ T8637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.470005][ T5815] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 257.480729][ T5815] cdc_ncm 1-1:1.0: bind() failure [ 257.801671][ T49] bridge_slave_1: left allmulticast mode [ 257.819992][ T49] bridge_slave_1: left promiscuous mode [ 257.855128][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.906253][ T49] bridge_slave_0: left allmulticast mode [ 257.921726][ T49] bridge_slave_0: left promiscuous mode [ 257.956761][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.844415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 258.861080][ T5854] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 258.938526][ T5854] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.137587][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.221569][ T5854] usb 1-1: USB disconnect, device number 5 [ 259.644652][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.919113][ C0] sched: DL replenish lagged too much [ 266.815560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 317.352721][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.370845][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 365.742783][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 365.749754][ C0] rcu: (detected by 0, t=10502 jiffies, g=26929, q=1026753 ncpus=2) [ 365.757827][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 3127 (4294973707-4294970580), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 365.771110][ C0] rcu: rcu_preempt kthread starved for 3127 jiffies! g26929 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 365.782221][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 365.792191][ C0] rcu: RCU grace-period kthread stack dump: [ 365.798075][ C0] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 365.811619][ C0] Call Trace: [ 365.814919][ C0] [ 365.817846][ C0] __schedule+0xfee/0x6120 [ 365.822253][ C0] ? __lock_acquire+0x4a5/0x2630 [ 365.827203][ C0] ? __pfx___schedule+0x10/0x10 [ 365.832063][ C0] ? find_held_lock+0x2b/0x80 [ 365.836747][ C0] ? schedule+0x2bf/0x390 [ 365.841088][ C0] schedule+0xdd/0x390 [ 365.845164][ C0] schedule_timeout+0x127/0x280 [ 365.850024][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 365.855381][ C0] ? __pfx_process_timeout+0x10/0x10 [ 365.860676][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 365.866486][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 365.871923][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 365.876673][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 365.881982][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 365.886934][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 365.892141][ C0] ? rcu_is_watching+0x12/0xc0 [ 365.896911][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 365.902728][ C0] rcu_gp_kthread+0x179/0x230 [ 365.907404][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 365.912639][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 365.918469][ C0] ? __kthread_parkme+0x18c/0x230 [ 365.923506][ C0] ? kthread+0x13a/0x450 [ 365.927748][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 365.932953][ C0] kthread+0x370/0x450 [ 365.937019][ C0] ? __pfx_kthread+0x10/0x10 [ 365.941609][ C0] ret_from_fork+0x754/0xd80 [ 365.946208][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 365.951324][ C0] ? __switch_to+0x7b4/0x1120 [ 365.955990][ C0] ? __pfx_kthread+0x10/0x10 [ 365.960587][ C0] ret_from_fork_asm+0x1a/0x30 [ 365.965370][ C0] [ 365.968396][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 365.974717][ C0] Sending NMI from CPU 0 to CPUs 1: [ 365.979931][ C1] NMI backtrace for cpu 1 [ 365.979958][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.979986][ C1] Tainted: [L]=SOFTLOCKUP [ 365.979995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 365.980007][ C1] RIP: 0010:__lock_acquire+0x1e0/0x2630 [ 365.980032][ C1] Code: 09 d0 8b 53 20 81 e2 ff 1f 00 00 09 d0 89 43 20 8b 84 24 c0 00 00 00 89 43 24 4c 89 e8 25 ff 1f 00 00 48 0f a3 05 c0 32 30 14 <0f> 83 c1 05 00 00 48 8d 04 80 48 8d 04 80 48 8d 04 c5 a0 1b 15 96 [ 365.980051][ C1] RSP: 0018:ffffc90000a080d8 EFLAGS: 00000003 [ 365.980069][ C1] RAX: 0000000000000007 RBX: ffff88801e2d3068 RCX: 0000000000000002 [ 365.980081][ C1] RDX: 0000000000000007 RSI: 0000000000000001 RDI: ffffffff8e7e7920 [ 365.980093][ C1] RBP: ffff88801e2d24c0 R08: 0000000000000000 R09: 0000000000000000 [ 365.980105][ C1] R10: ffffffff8e7e7920 R11: 0000000000000000 R12: 0000000000000000 [ 365.980117][ C1] R13: 0000000000000007 R14: 0000000000020000 R15: 0000000000000000 [ 365.980129][ C1] FS: 0000000000000000(0000) GS:ffff88812443c000(0000) knlGS:0000000000000000 [ 365.980147][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.980160][ C1] CR2: 00007f9bebe218e7 CR3: 0000000037318000 CR4: 00000000003526f0 [ 365.980178][ C1] Call Trace: [ 365.980184][ C1] [ 365.980192][ C1] ? fib_table_lookup+0x727/0x22d0 [ 365.980222][ C1] lock_acquire+0x1cf/0x380 [ 365.980239][ C1] ? ip_route_output_key_hash+0xd6/0x2b0 [ 365.980266][ C1] ip_route_output_key_hash+0xe7/0x2b0 [ 365.980288][ C1] ? ip_route_output_key_hash+0xd6/0x2b0 [ 365.980310][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 365.980334][ C1] ? lock_acquire+0x1cf/0x380 [ 365.980352][ C1] ? find_held_lock+0x2b/0x80 [ 365.980377][ C1] ip_route_output_flow+0x27/0x150 [ 365.980400][ C1] ip_route_me_harder+0x562/0x1260 [ 365.980429][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 365.980454][ C1] ? rcu_is_watching+0x12/0xc0 [ 365.980479][ C1] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 365.980508][ C1] ? kmalloc_reserve+0x148/0x350 [ 365.980527][ C1] ? __kasan_slab_alloc+0x80/0x90 [ 365.980547][ C1] ? __pfx_cookie_hash+0x10/0x10 [ 365.980569][ C1] synproxy_send_tcp.isra.0+0x341/0x680 [ 365.980600][ C1] synproxy_send_client_synack+0x6ea/0x970 [ 365.980632][ C1] ? find_held_lock+0x2b/0x80 [ 365.980655][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 365.980685][ C1] ? net_generic+0xea/0x2a0 [ 365.980706][ C1] nft_synproxy_do_eval+0xa73/0xd50 [ 365.980727][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 365.980753][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 365.980773][ C1] nft_do_chain+0x2e8/0x1930 [ 365.980796][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 365.980814][ C1] ? ipt_do_table+0xd4f/0x1b00 [ 365.980832][ C1] ? rcu_is_watching+0x12/0xc0 [ 365.980854][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 365.980881][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 365.980904][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 365.980940][ C1] nft_do_chain_inet+0xee/0x340 [ 365.980957][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 365.980976][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 365.980995][ C1] ? nf_nat_ipv4_local_in+0x181/0x730 [ 365.981021][ C1] nf_hook_slow+0xbf/0x220 [ 365.981048][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 365.981070][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 365.981095][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 365.981118][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 365.981143][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 365.981169][ C1] ? ip_rcv_finish_core+0x80a/0x2220 [ 365.981199][ C1] ip_local_deliver+0x163/0x1f0 [ 365.981222][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 365.981246][ C1] ip_rcv+0x33a/0x3c0 [ 365.981269][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 365.981291][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 365.981314][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 365.981338][ C1] ? lock_acquire+0x1cf/0x380 [ 365.981356][ C1] ? process_backlog+0x32a/0x1580 [ 365.981377][ C1] ? process_backlog+0x32a/0x1580 [ 365.981425][ C1] __netif_receive_skb+0x1f/0x120 [ 365.981453][ C1] process_backlog+0x37a/0x1580 [ 365.981477][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 365.981500][ C1] net_rx_action+0xa40/0xf20 [ 365.981525][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 365.981556][ C1] ? rcu_is_watching+0x12/0xc0 [ 365.981579][ C1] handle_softirqs+0x1eb/0x9e0 [ 365.981604][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 365.981630][ C1] __irq_exit_rcu+0xef/0x150 [ 365.981652][ C1] irq_exit_rcu+0x9/0x30 [ 365.981675][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 365.981701][ C1] [ 365.981707][ C1] [ 365.981713][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 365.981734][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 365.981762][ C1] Code: d8 81 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 91 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 365.981780][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 365.981794][ C1] RAX: 0000000000fedea1 RBX: ffff88801e2d24c0 RCX: ffffffff8b90fc75 [ 365.981807][ C1] RDX: 0000000000000000 RSI: ffffffff8de79d93 RDI: ffffffff8c1b1a20 [ 365.981819][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a679d [ 365.981831][ C1] R10: ffff8880b8533ceb R11: 0000000000000000 R12: 0000000000000001 [ 365.981842][ C1] R13: ffffed1003c5a498 R14: 0000000000000001 R15: ffffffff90d9c610 [ 365.981858][ C1] ? ct_kernel_exit+0x125/0x180 [ 365.981888][ C1] default_idle+0x9/0x10 [ 365.981905][ C1] default_idle_call+0x6c/0xb0 [ 365.981924][ C1] do_idle+0x464/0x590 [ 365.981948][ C1] ? __pfx_do_idle+0x10/0x10 [ 365.981974][ C1] cpu_startup_entry+0x4f/0x60 [ 365.981998][ C1] start_secondary+0x21d/0x2d0 [ 365.982026][ C1] ? __pfx_start_secondary+0x10/0x10 [ 365.982057][ C1] common_startup_64+0x13e/0x148 [ 365.982085][ C1] [ 371.567784][ T5813] Bluetooth: hci5: command 0x0406 tx timeout