last executing test programs: 5.907858418s ago: executing program 1 (id=673): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x2}}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "57c2993374d19072f59b479fccbc16e6"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 5.78926607s ago: executing program 1 (id=675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101e3ffffffffffffff000200000004001700240001801400018008000100e000000108000200e00000010c000280050001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.721319431s ago: executing program 1 (id=676): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000000)={0x40, 0x17, 0x4, "00000092"}, 0x0, 0x0, 0x0, 0x0}) 5.662599534s ago: executing program 0 (id=677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.400460636s ago: executing program 0 (id=679): openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 5.324004857s ago: executing program 4 (id=681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 5.281081613s ago: executing program 0 (id=682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="c3d646601357d9f853118d4922d2cf46a73c92d3b8cb47920403a3194c8496", 0x1f}, {&(0x7f0000000880)="f6", 0x1}], 0x2, 0x0, 0x0, 0x40}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r3, 0x0, 0x4003) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x2}) 5.169090824s ago: executing program 2 (id=683): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) 5.008084964s ago: executing program 2 (id=684): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000200)=""/162, 0xa2, 0xae) 4.229013123s ago: executing program 0 (id=685): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfc5e) stat(0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x29, 0x10003, 0x204000, 0x0, 0x4, 0x8000080, 0x1}}, 0x50) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.875991482s ago: executing program 4 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0xc2, 0x0, 0x0, 0x1000, {[@window={0x3, 0x3, 0x6}, @generic={0x22, 0x5, "f0b234"}, @generic={0x13, 0x5, "5d0515"}, @generic={0x22, 0x10, "01000000004000003591dd06c3c8"}, @sack={0x5, 0xe, [0xfffe, 0x9, 0x17]}]}}}}}}}, 0x0) 3.63763429s ago: executing program 3 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f00000000c0)=0x0, &(0x7f0000001040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) r5 = eventfd(0x3ff) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000000000)=""/167, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000001240)=r5, 0x1) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3.487364076s ago: executing program 4 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.347950937s ago: executing program 1 (id=691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x3, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0x10, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @generic={0x22, 0x12, "d45c3ed8adc5d2758354774abfc23fbf"}, @fastopen={0x22, 0x3, "a3"}, @mss={0x2, 0x4, 0x1}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "3c979df9fe71260d6d4deaeae4f1cc77"}, @nop, @exp_fastopen={0xfe, 0x6, 0xf989, "c579"}, @timestamp={0x8, 0xa, 0xfe9, 0x6}]}}}}}}}, 0x0) 3.138388403s ago: executing program 1 (id=692): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0x57}], 0x1) 2.862493353s ago: executing program 4 (id=693): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 2.688076466s ago: executing program 3 (id=694): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) 2.687588619s ago: executing program 2 (id=695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="c3d646601357d9f853118d4922d2cf46a73c92d3b8cb47920403a3194c8496", 0x1f}, {&(0x7f0000000880)="f6", 0x1}], 0x2, 0x0, 0x0, 0x40}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r3, 0x0, 0x4003) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x2}) 2.673422117s ago: executing program 3 (id=696): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40103, 0x20820}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x44891}, 0x48000) 2.608260571s ago: executing program 3 (id=697): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x29) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) readahead(r3, 0x7, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(r5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) fcntl$setflags(r7, 0x2, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=0xee00, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="10000000"], 0x5c, 0x0) lgetxattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r0, 0x0, 0x20000023893) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.616008284s ago: executing program 2 (id=698): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x80100c0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r2, 0x8) 1.503214484s ago: executing program 4 (id=699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}}, 0x4004) 1.46351278s ago: executing program 3 (id=700): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, r0, 0x8000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file2\x00', &(0x7f0000000680)='./file2\x00'}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0xa, 0xffffffffffffffff, &(0x7f0000000040)=0xffa1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, 0x0, 0x0) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000200)={0x4, 0x81, "fcc257", 0x40, 0x5}) close(0xffffffffffffffff) dup2(r8, r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.380029076s ago: executing program 1 (id=701): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) rt_tgsigqueueinfo(0x0, 0x0, 0x18, &(0x7f0000000040)={0x24, 0x9, 0x81}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.37958452s ago: executing program 2 (id=702): pipe2$9p(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) 1.365861176s ago: executing program 0 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xc}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40420d0) 893.327467ms ago: executing program 4 (id=704): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[], 0x38}}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xaf4, 0x0) 159.968311ms ago: executing program 0 (id=705): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7d, 0x20000000, 0x0, 0x8000f}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x6}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008000}, 0x40054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000005c0)=0x2, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/msg\x00', 0x0, 0x0) 41.649177ms ago: executing program 2 (id=706): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000200)=""/162, 0xa2, 0xae) 0s ago: executing program 3 (id=707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x48000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 52.562625][ T30] audit: type=1400 audit(1744444424.453:88): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.566091][ T5809] cgroup: Unknown subsys name 'net' [ 52.585394][ T30] audit: type=1400 audit(1744444424.453:89): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.613244][ T30] audit: type=1400 audit(1744444424.483:90): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.774361][ T5809] cgroup: Unknown subsys name 'cpuset' [ 52.782239][ T5809] cgroup: Unknown subsys name 'rlimit' [ 52.945609][ T30] audit: type=1400 audit(1744444424.833:91): avc: denied { setattr } for pid=5809 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.976512][ T30] audit: type=1400 audit(1744444424.833:92): avc: denied { create } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.008388][ T30] audit: type=1400 audit(1744444424.833:93): avc: denied { write } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.029294][ T30] audit: type=1400 audit(1744444424.833:94): avc: denied { read } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.034536][ T5811] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 53.049722][ T30] audit: type=1400 audit(1744444424.843:95): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 53.083501][ T30] audit: type=1400 audit(1744444424.843:96): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 53.106743][ T30] audit: type=1400 audit(1744444424.883:97): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 53.979209][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.106608][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.114602][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.122489][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.130832][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.138608][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.147344][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.155164][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.158702][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.180195][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.181921][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.182985][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.201458][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.202673][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.212257][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.216064][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.225533][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.230149][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.236803][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.244345][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.259810][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.260581][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.267475][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.274663][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.301120][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.308700][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.614974][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 56.761438][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.768600][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.776638][ T5819] bridge_slave_0: entered allmulticast mode [ 56.785791][ T5819] bridge_slave_0: entered promiscuous mode [ 56.796042][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.803194][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.810271][ T5819] bridge_slave_1: entered allmulticast mode [ 56.817592][ T5819] bridge_slave_1: entered promiscuous mode [ 56.849473][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 56.861481][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 56.956986][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.972699][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.998682][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 57.036661][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 57.056203][ T5819] team0: Port device team_slave_0 added [ 57.111645][ T5819] team0: Port device team_slave_1 added [ 57.120970][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.128144][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.135766][ T5820] bridge_slave_0: entered allmulticast mode [ 57.142782][ T5820] bridge_slave_0: entered promiscuous mode [ 57.174830][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.182121][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.189189][ T5820] bridge_slave_1: entered allmulticast mode [ 57.195860][ T5820] bridge_slave_1: entered promiscuous mode [ 57.211809][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.219103][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.226539][ T5826] bridge_slave_0: entered allmulticast mode [ 57.233165][ T5826] bridge_slave_0: entered promiscuous mode [ 57.272575][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.279964][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.287693][ T5826] bridge_slave_1: entered allmulticast mode [ 57.295929][ T5826] bridge_slave_1: entered promiscuous mode [ 57.303222][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.310148][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.336209][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.350643][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.357799][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.365023][ T5821] bridge_slave_0: entered allmulticast mode [ 57.371567][ T5821] bridge_slave_0: entered promiscuous mode [ 57.402407][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.409353][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.435709][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.455016][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.462281][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.469350][ T5821] bridge_slave_1: entered allmulticast mode [ 57.476604][ T5821] bridge_slave_1: entered promiscuous mode [ 57.493447][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.504957][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.515803][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.527768][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.588188][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.595444][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.603461][ T5822] bridge_slave_0: entered allmulticast mode [ 57.610064][ T5822] bridge_slave_0: entered promiscuous mode [ 57.618520][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.630860][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.649053][ T5826] team0: Port device team_slave_0 added [ 57.662179][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.669254][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.676423][ T5822] bridge_slave_1: entered allmulticast mode [ 57.683027][ T5822] bridge_slave_1: entered promiscuous mode [ 57.698855][ T5820] team0: Port device team_slave_0 added [ 57.705848][ T5826] team0: Port device team_slave_1 added [ 57.713174][ T5820] team0: Port device team_slave_1 added [ 57.732132][ T5819] hsr_slave_0: entered promiscuous mode [ 57.738126][ T5819] hsr_slave_1: entered promiscuous mode [ 57.792525][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.808152][ T5821] team0: Port device team_slave_0 added [ 57.837152][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.857769][ T5821] team0: Port device team_slave_1 added [ 57.864128][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.871049][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.897172][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.908666][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.915914][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.942102][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.972155][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.979089][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.005328][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.021078][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.028223][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.054359][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.070341][ T5822] team0: Port device team_slave_0 added [ 58.085313][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.092297][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.118852][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.139518][ T5822] team0: Port device team_slave_1 added [ 58.155288][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.162278][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.188384][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.201515][ T5825] Bluetooth: hci1: command tx timeout [ 58.242956][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.249898][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.276052][ T5825] Bluetooth: hci4: command tx timeout [ 58.278279][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.297557][ T5821] hsr_slave_0: entered promiscuous mode [ 58.303777][ T5821] hsr_slave_1: entered promiscuous mode [ 58.309608][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.317499][ T5821] Cannot create hsr debugfs directory [ 58.334785][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.341725][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.353418][ T5825] Bluetooth: hci0: command tx timeout [ 58.367817][ T5832] Bluetooth: hci3: command tx timeout [ 58.373216][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.378482][ T5836] Bluetooth: hci2: command tx timeout [ 58.417295][ T5820] hsr_slave_0: entered promiscuous mode [ 58.423819][ T5820] hsr_slave_1: entered promiscuous mode [ 58.429731][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.437557][ T5820] Cannot create hsr debugfs directory [ 58.451107][ T5826] hsr_slave_0: entered promiscuous mode [ 58.457328][ T5826] hsr_slave_1: entered promiscuous mode [ 58.463219][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.470746][ T5826] Cannot create hsr debugfs directory [ 58.593011][ T5822] hsr_slave_0: entered promiscuous mode [ 58.599007][ T5822] hsr_slave_1: entered promiscuous mode [ 58.605368][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.613113][ T5822] Cannot create hsr debugfs directory [ 58.798819][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.818418][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.847315][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.868834][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.915838][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.929622][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.940759][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.959085][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.023094][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.038698][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.047707][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.071024][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.125196][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.137352][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.168980][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.178446][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.207952][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.231387][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.259669][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.266876][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.293345][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.300421][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.316659][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.327414][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.336907][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.349308][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.360047][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.417368][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.433342][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.460827][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.467990][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.485022][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.492140][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.528594][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.555807][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.573606][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 59.575896][ T30] audit: type=1400 audit(1744444431.463:111): avc: denied { sys_module } for pid=5819 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.577877][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.610156][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.644888][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.652033][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.676279][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.698021][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.705105][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.725061][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.736201][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.815773][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.824576][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.831641][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.917143][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.946766][ T5819] veth0_vlan: entered promiscuous mode [ 59.970177][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.001537][ T5819] veth1_vlan: entered promiscuous mode [ 60.019212][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.026312][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.051554][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.084904][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.092039][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.140402][ T5819] veth0_macvtap: entered promiscuous mode [ 60.164906][ T5819] veth1_macvtap: entered promiscuous mode [ 60.176896][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.226472][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.256510][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.273946][ T5836] Bluetooth: hci1: command tx timeout [ 60.283183][ T5821] veth0_vlan: entered promiscuous mode [ 60.299916][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.311223][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.323510][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.339587][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.353342][ T5836] Bluetooth: hci4: command tx timeout [ 60.357799][ T5821] veth1_vlan: entered promiscuous mode [ 60.417492][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.437931][ T5836] Bluetooth: hci0: command tx timeout [ 60.438313][ T5832] Bluetooth: hci2: command tx timeout [ 60.443384][ T5836] Bluetooth: hci3: command tx timeout [ 60.540456][ T5821] veth0_macvtap: entered promiscuous mode [ 60.571049][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.588772][ T5820] veth0_vlan: entered promiscuous mode [ 60.607035][ T5821] veth1_macvtap: entered promiscuous mode [ 60.624855][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.632927][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.669687][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.673150][ T5826] veth0_vlan: entered promiscuous mode [ 60.678210][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.701270][ T5820] veth1_vlan: entered promiscuous mode [ 60.718925][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.730267][ T30] audit: type=1400 audit(1744444432.603:112): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.w8B3W2/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 60.737530][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.758280][ T30] audit: type=1400 audit(1744444432.603:113): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.768402][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.789086][ T30] audit: type=1400 audit(1744444432.603:114): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.w8B3W2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.814176][ T5822] veth0_vlan: entered promiscuous mode [ 60.828111][ T30] audit: type=1400 audit(1744444432.603:115): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.851640][ T30] audit: type=1400 audit(1744444432.623:116): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.w8B3W2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.880377][ T30] audit: type=1400 audit(1744444432.623:117): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.w8B3W2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.910123][ T5822] veth1_vlan: entered promiscuous mode [ 60.918236][ T30] audit: type=1400 audit(1744444432.623:118): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.926192][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.938507][ T30] audit: type=1400 audit(1744444432.683:119): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.975142][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.975710][ T30] audit: type=1400 audit(1744444432.683:120): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="gadgetfs" ino=5942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.986675][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.014617][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.022212][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.039143][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.047939][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.056844][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.068907][ T5826] veth1_vlan: entered promiscuous mode [ 61.161788][ T5820] veth0_macvtap: entered promiscuous mode [ 61.180773][ T5820] veth1_macvtap: entered promiscuous mode [ 61.199540][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.210173][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.221217][ T5822] veth0_macvtap: entered promiscuous mode [ 61.238678][ T5822] veth1_macvtap: entered promiscuous mode [ 61.253379][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.264820][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.275013][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.285736][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.296866][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.307131][ T5826] veth0_macvtap: entered promiscuous mode [ 61.329883][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.340485][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.350796][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.361588][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.372634][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.387656][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.388624][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.405272][ T5892] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.406023][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.423340][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.432611][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.441316][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.451610][ T5826] veth1_macvtap: entered promiscuous mode [ 61.475053][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.485638][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.496532][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.507091][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.517878][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.528365][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.540188][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.551665][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.567923][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.578649][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.589131][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.596882][ T5892] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 61.599021][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.610378][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.618220][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.632277][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.641150][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.651429][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.670203][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.684295][ T5892] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.693620][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.701446][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.722043][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.730751][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.734013][ T5892] usb 2-1: config 0 descriptor?? [ 61.754873][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.754994][ T5906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 61.775688][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.786789][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.799628][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.810140][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.823262][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.833928][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.843804][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.854266][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.865752][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.890603][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.901265][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.911303][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.922501][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.932734][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.943273][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.953429][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.963982][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.975117][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.008451][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.023399][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.032544][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.041237][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.192107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.221968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 62.268665][ T5892] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 62.320093][ T5892] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 62.352506][ T5832] Bluetooth: hci1: command tx timeout [ 62.388609][ T5892] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 62.460353][ T5832] Bluetooth: hci4: command tx timeout [ 62.512153][ T5825] Bluetooth: hci2: command tx timeout [ 62.517623][ T5825] Bluetooth: hci3: command tx timeout [ 62.537202][ T5836] Bluetooth: hci0: command tx timeout [ 63.244717][ T972] usb 2-1: USB disconnect, device number 2 [ 63.300902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.366292][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.374174][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.554676][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.593552][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.605988][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.615583][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.642665][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.671913][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.729136][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.753056][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.789603][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.833463][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.422350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.430624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.439643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.511897][ T5837] Bluetooth: hci1: command tx timeout [ 64.602619][ T5837] Bluetooth: hci4: command tx timeout [ 64.608112][ T5837] Bluetooth: hci0: command tx timeout [ 64.629554][ T5832] Bluetooth: hci3: command tx timeout [ 64.639250][ T5832] Bluetooth: hci2: command tx timeout [ 65.126966][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 65.126981][ T30] audit: type=1400 audit(1744444437.013:151): avc: denied { create } for pid=5935 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.191350][ T30] audit: type=1400 audit(1744444437.013:152): avc: denied { getopt } for pid=5935 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.349225][ T30] audit: type=1400 audit(1744444437.123:153): avc: denied { create } for pid=5939 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.402001][ T30] audit: type=1400 audit(1744444437.283:154): avc: denied { map_create } for pid=5939 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 65.440116][ T30] audit: type=1400 audit(1744444437.283:155): avc: denied { map_read map_write } for pid=5939 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 65.513118][ T5944] xt_nat: multiple ranges no longer supported [ 65.912430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 65.914752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 66.094884][ T30] audit: type=1400 audit(1744444437.833:156): avc: denied { ioctl } for pid=5941 comm="syz.0.11" path="socket:[9081]" dev="sockfs" ino=9081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.322242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 66.331222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.474683][ T30] audit: type=1400 audit(1744444438.113:157): avc: denied { read } for pid=5939 comm="syz.1.12" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.502840][ T5941] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 66.509790][ T5941] ALSA: mixer_oss: invalid OSS volume 'X#*N߈l͏Я u\Qa{k' [ 66.755830][ T30] audit: type=1400 audit(1744444438.113:158): avc: denied { open } for pid=5939 comm="syz.1.12" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.775918][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 66.841909][ T5955] netlink: 212400 bytes leftover after parsing attributes in process `syz.1.16'. [ 66.877145][ T30] audit: type=1400 audit(1744444438.113:159): avc: denied { map } for pid=5939 comm="syz.1.12" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.929325][ T30] audit: type=1400 audit(1744444438.603:160): avc: denied { bind } for pid=5948 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.045824][ T5964] netlink: 64 bytes leftover after parsing attributes in process `syz.4.20'. [ 67.952033][ T52] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.112605][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 68.127335][ T52] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 68.151110][ T52] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.180283][ T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.201205][ T52] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.210500][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.233806][ T52] usb 2-1: Product: syz [ 68.245614][ T52] usb 2-1: Manufacturer: syz [ 68.278692][ T52] usb 2-1: SerialNumber: syz [ 68.734224][ T52] usb 2-1: 0:2 : does not exist [ 68.815539][ T52] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 68.876349][ T52] usb 2-1: USB disconnect, device number 3 [ 68.926916][ T6004] netlink: 64 bytes leftover after parsing attributes in process `syz.3.32'. [ 69.273279][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.551275][ T6017] Zero length message leads to an empty skb [ 69.754046][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 69.856907][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.40'. [ 69.916991][ T6023] overlayfs: missing 'lowerdir' [ 70.325718][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 70.325733][ T30] audit: type=1400 audit(1744444442.213:186): avc: denied { write } for pid=6035 comm="syz.2.43" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.688984][ T6048] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.785523][ T6048] macvlan2: entered promiscuous mode [ 70.807515][ T6048] macvlan2: entered allmulticast mode [ 70.869142][ T6048] batadv0: entered promiscuous mode [ 70.875254][ T6048] batadv0: entered allmulticast mode [ 70.881819][ T6048] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 70.895890][ T6048] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 70.918050][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.925320][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.944363][ T30] audit: type=1400 audit(1744444442.813:187): avc: denied { bind } for pid=6049 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.998263][ T30] audit: type=1400 audit(1744444442.813:188): avc: denied { name_bind } for pid=6049 comm="syz.3.48" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 71.022292][ T30] audit: type=1400 audit(1744444442.813:189): avc: denied { node_bind } for pid=6049 comm="syz.3.48" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 71.251315][ T30] audit: type=1400 audit(1744444443.133:190): avc: denied { create } for pid=6061 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.276628][ T30] audit: type=1400 audit(1744444443.163:191): avc: denied { write } for pid=6061 comm="syz.1.53" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.363688][ T5914] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.763043][ T30] audit: type=1400 audit(1744444443.163:192): avc: denied { open } for pid=6061 comm="syz.1.53" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.828019][ T6065] overlayfs: missing 'lowerdir' [ 71.855379][ T30] audit: type=1400 audit(1744444443.683:193): avc: denied { ioctl } for pid=6061 comm="syz.1.53" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.975127][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 72.014754][ T5914] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 72.055186][ T5914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.074983][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 72.095592][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.55'. [ 72.111849][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.133515][ T30] audit: type=1400 audit(1744444444.013:194): avc: denied { execute } for pid=6072 comm="syz.2.56" path="/12/cpu.stat" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.300812][ T5914] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.310096][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.318460][ T5914] usb 5-1: Product: syz [ 72.329399][ T5914] usb 5-1: Manufacturer: syz [ 72.336412][ T5914] usb 5-1: SerialNumber: syz [ 72.355857][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 72.612047][ T91] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.615956][ T6090] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.64'. [ 72.767986][ T5914] usb 5-1: 0:2 : does not exist [ 72.775190][ T91] usb 3-1: too many configurations: 75, using maximum allowed: 8 [ 72.793537][ T5914] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 72.818132][ T91] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 72.832880][ T91] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.841214][ T91] usb 3-1: Product: syz [ 72.873721][ T5914] usb 5-1: USB disconnect, device number 2 [ 72.888285][ T91] usb 3-1: Manufacturer: syz [ 72.893104][ T91] usb 3-1: SerialNumber: syz [ 72.907658][ T6096] overlayfs: missing 'lowerdir' [ 72.929062][ T91] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 72.959908][ T30] audit: type=1400 audit(1744444444.843:195): avc: denied { firmware_load } for pid=52 comm="kworker/1:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 73.007693][ T52] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 73.126417][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.336676][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 73.364513][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 73.583798][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 73.693912][ T5873] usb 3-1: USB disconnect, device number 2 [ 74.040575][ T6123] overlayfs: missing 'lowerdir' [ 74.151186][ T6128] evm: overlay not supported [ 74.320236][ T52] usb 3-1: Service connection timeout for: 256 [ 74.326460][ T52] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 74.337244][ T52] ath9k_htc: Failed to initialize the device [ 74.354699][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 74.355572][ T5873] usb 3-1: ath9k_htc: USB layer deinitialized [ 74.406676][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 74.552109][ T972] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 74.712088][ T972] usb 2-1: Using ep0 maxpacket: 16 [ 74.732950][ T972] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 74.742830][ T972] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.771577][ T972] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.814024][ T972] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.830388][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.839493][ T972] usb 2-1: Product: syz [ 74.843833][ T972] usb 2-1: Manufacturer: syz [ 74.848864][ T972] usb 2-1: SerialNumber: syz [ 75.172270][ T6154] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.90'. [ 75.487750][ T972] usb 2-1: 0:2 : does not exist [ 75.502381][ T972] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 75.568227][ T972] usb 2-1: USB disconnect, device number 4 [ 75.609124][ T6159] overlayfs: missing 'lowerdir' [ 75.768088][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 75.768104][ T30] audit: type=1400 audit(1744444447.653:208): avc: denied { write } for pid=6165 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.768166][ T6166] trusted_key: syz.3.94 sent an empty control message without MSG_MORE. [ 75.783573][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.852355][ T30] audit: type=1400 audit(1744444447.723:209): avc: denied { read } for pid=6165 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.043493][ T9] cfg80211: failed to load regulatory.db [ 76.112159][ T972] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.732727][ T972] usb 3-1: too many configurations: 75, using maximum allowed: 8 [ 76.795061][ T972] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 76.807711][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.825213][ T972] usb 3-1: Product: syz [ 76.829439][ T972] usb 3-1: Manufacturer: syz [ 76.834456][ T972] usb 3-1: SerialNumber: syz [ 76.850752][ T972] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 76.867802][ T5874] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 76.941996][ T30] audit: type=1400 audit(1744444448.823:210): avc: denied { create } for pid=6188 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.062408][ T6193] overlayfs: missing 'lowerdir' [ 77.671795][ T6210] __nla_validate_parse: 2 callbacks suppressed [ 77.671813][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 77.679552][ T972] usb 3-1: USB disconnect, device number 3 [ 78.113426][ T5874] usb 3-1: Service connection timeout for: 256 [ 78.135758][ T5874] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 78.283414][ T5874] ath9k_htc: Failed to initialize the device [ 78.289778][ T972] usb 3-1: ath9k_htc: USB layer deinitialized [ 78.329953][ T6221] netlink: 'syz.4.114': attribute type 1 has an invalid length. [ 78.366339][ T30] audit: type=1400 audit(1744444450.253:211): avc: denied { create } for pid=6222 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.453734][ T30] audit: type=1400 audit(1744444450.283:212): avc: denied { write } for pid=6222 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.492320][ T5914] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.498635][ T30] audit: type=1400 audit(1744444450.283:213): avc: denied { nlmsg_write } for pid=6222 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.520190][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.551232][ T6228] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.116'. [ 78.581166][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 78.779233][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.797888][ T5914] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.927511][ T5914] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 78.999062][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.172522][ T5914] usb 4-1: config 0 descriptor?? [ 79.318730][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 79.474020][ T30] audit: type=1400 audit(1744444451.303:214): avc: denied { name_bind } for pid=6236 comm="syz.4.120" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 79.499304][ T30] audit: type=1400 audit(1744444451.303:215): avc: denied { node_bind } for pid=6236 comm="syz.4.120" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 79.700407][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 79.863733][ T30] audit: type=1400 audit(1744444451.743:216): avc: denied { name_bind } for pid=6248 comm="syz.4.125" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 79.970048][ T30] audit: type=1400 audit(1744444451.853:217): avc: denied { write } for pid=6255 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.094846][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 81.103908][ T6281] tipc: Started in network mode [ 81.108874][ T6281] tipc: Node identity ff000007, cluster identity 4711 [ 81.179087][ T6281] tipc: Node number set to 4278190087 [ 81.224677][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 81.224695][ T30] audit: type=1400 audit(1744444453.113:220): avc: denied { create } for pid=6277 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 81.633153][ T30] audit: type=1400 audit(1744444453.513:221): avc: denied { write } for pid=6276 comm="syz.1.134" name="ip_tables_targets" dev="proc" ino=4026533298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.883995][ T52] usb 4-1: USB disconnect, device number 2 [ 82.236051][ T6296] fuse: Bad value for 'fd' [ 82.334493][ T30] audit: type=1400 audit(1744444454.113:222): avc: denied { mounton } for pid=6286 comm="syz.3.138" path="/25/file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.356842][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.629360][ T6305] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.143'. [ 83.502980][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'. [ 83.692607][ T6321] fuse: Unknown parameter 'group_i00000000000000000000' [ 83.795191][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 84.072861][ T30] audit: type=1400 audit(1744444455.963:223): avc: denied { execute } for pid=6332 comm="syz.1.153" path="/30/cpu.stat" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.541991][ T972] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 85.684692][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 86.043605][ T972] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 86.051634][ T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.072245][ T972] usb 2-1: config 0 has no interface number 0 [ 86.078368][ T972] usb 2-1: config 0 interface 2 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.091864][ T972] usb 2-1: config 0 interface 2 has no altsetting 0 [ 86.119702][ T972] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 86.140736][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.167757][ T972] usb 2-1: config 0 descriptor?? [ 86.205107][ T972] usbhid 2-1:0.2: couldn't find an input interrupt endpoint [ 86.462109][ T52] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.725413][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 86.876504][ T52] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 86.930131][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.941276][ T52] usb 1-1: Product: syz [ 86.953669][ T52] usb 1-1: Manufacturer: syz [ 86.962178][ T52] usb 1-1: SerialNumber: syz [ 86.971609][ T52] usb 1-1: config 0 descriptor?? [ 87.054284][ T30] audit: type=1400 audit(1744444458.923:224): avc: denied { read write } for pid=6391 comm="syz.3.172" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.167127][ T30] audit: type=1400 audit(1744444458.923:225): avc: denied { open } for pid=6391 comm="syz.3.172" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.190052][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.423105][ T52] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 87.605156][ T52] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 87.612549][ T30] audit: type=1400 audit(1744444458.923:226): avc: denied { create } for pid=6391 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.638500][ T30] audit: type=1400 audit(1744444458.923:227): avc: denied { setopt } for pid=6391 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.668610][ T30] audit: type=1400 audit(1744444458.923:228): avc: denied { write } for pid=6391 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.687967][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.740076][ T5873] usb 2-1: USB disconnect, device number 5 [ 87.767145][ T6406] overlayfs: missing 'workdir' [ 87.776674][ T52] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -32 [ 87.823013][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.180'. [ 87.828103][ T52] usb 1-1: USB disconnect, device number 2 [ 88.098948][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 88.597989][ T30] audit: type=1400 audit(1744444460.473:229): avc: denied { create } for pid=6433 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.668563][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 88.812134][ T5874] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 89.389501][ T5874] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 89.397735][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.423448][ T5874] usb 3-1: config 0 has no interface number 0 [ 89.429561][ T5874] usb 3-1: config 0 interface 2 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.466938][ T5874] usb 3-1: config 0 interface 2 has no altsetting 0 [ 89.477973][ T5874] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 89.497309][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.545936][ T5874] usb 3-1: config 0 descriptor?? [ 89.586189][ T5874] usbhid 3-1:0.2: couldn't find an input interrupt endpoint [ 89.774211][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 89.861031][ T30] audit: type=1400 audit(1744444461.743:230): avc: denied { write } for pid=6454 comm="syz.0.197" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.105444][ T30] audit: type=1400 audit(1744444461.933:231): avc: denied { execute } for pid=6454 comm="syz.0.197" path="/dev/dsp" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 90.724364][ T6469] netlink: 212400 bytes leftover after parsing attributes in process `syz.1.203'. [ 91.679140][ T5873] usb 3-1: USB disconnect, device number 4 [ 92.863044][ T30] audit: type=1400 audit(1744444464.443:232): avc: denied { ioctl } for pid=6494 comm="syz.1.213" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13669 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.067434][ T30] audit: type=1400 audit(1744444464.813:233): avc: denied { append } for pid=6503 comm="syz.4.215" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.073211][ T6509] netlink: 212400 bytes leftover after parsing attributes in process `syz.1.216'. [ 93.588840][ T30] audit: type=1400 audit(1744444465.153:234): avc: denied { create } for pid=6503 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.698949][ T30] audit: type=1400 audit(1744444465.153:235): avc: denied { ioctl } for pid=6503 comm="syz.4.215" path="socket:[13195]" dev="sockfs" ino=13195 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.723640][ T30] audit: type=1400 audit(1744444465.153:236): avc: denied { connect } for pid=6503 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.743158][ T30] audit: type=1400 audit(1744444465.153:237): avc: denied { write } for pid=6503 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.081785][ T6508] syz.0.217 (6508): drop_caches: 2 [ 94.252145][ T52] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.678147][ T52] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.743886][ T52] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 94.851698][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.018014][ T52] usb 2-1: config 0 descriptor?? [ 95.211063][ T30] audit: type=1400 audit(1744444467.083:238): avc: denied { connect } for pid=6534 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.260717][ T30] audit: type=1400 audit(1744444467.083:239): avc: denied { name_connect } for pid=6534 comm="syz.0.224" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 95.324580][ T30] audit: type=1400 audit(1744444467.213:240): avc: denied { bind } for pid=6537 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 95.332990][ T6537] dccp_close: ABORT with 48 bytes unread [ 95.352314][ T30] audit: type=1400 audit(1744444467.213:241): avc: denied { name_bind } for pid=6537 comm="syz.3.225" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 95.449231][ T6542] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.228'. [ 97.143614][ T6573] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 97.150796][ T6573] ALSA: mixer_oss: invalid OSS volume 'X#*N߈l͏Я u\Qa{k' [ 97.219586][ T52] usb 2-1: USB disconnect, device number 6 [ 98.204822][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 98.204836][ T30] audit: type=1400 audit(1744444470.093:251): avc: denied { setattr } for pid=6586 comm="syz.2.241" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.390644][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 99.107174][ T52] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.352225][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 99.449403][ T52] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 99.621809][ T52] usb 3-1: config 0 has no interface number 1 [ 99.638812][ T6613] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 99.645218][ T6613] ALSA: mixer_oss: invalid OSS volume 'X#*N߈l͏Я u\Qa{k' [ 99.821707][ T52] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 99.890824][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.929966][ T52] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.058032][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.323410][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.146502][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 102.149083][ T30] audit: type=1400 audit(1744444474.033:252): avc: denied { search } for pid=6630 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.288607][ T30] audit: type=1400 audit(1744444474.073:253): avc: denied { read } for pid=6631 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.348476][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.377623][ T52] usb 3-1: string descriptor 0 read error: -71 [ 102.383915][ T52] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 102.446015][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.460090][ T24] usb 1-1: config 0 descriptor?? [ 102.473505][ T30] audit: type=1400 audit(1744444474.073:254): avc: denied { open } for pid=6631 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.476123][ T52] usb 3-1: config 0 descriptor?? [ 102.504384][ T6635] netlink: 'syz.1.256': attribute type 33 has an invalid length. [ 102.536243][ T30] audit: type=1400 audit(1744444474.073:255): avc: denied { getattr } for pid=6631 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.546557][ T6635] netlink: 152 bytes leftover after parsing attributes in process `syz.1.256'. [ 102.604466][ T52] usb 3-1: can't set config #0, error -71 [ 102.665966][ T52] usb 3-1: USB disconnect, device number 5 [ 102.684641][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 102.695719][ T30] audit: type=1400 audit(1744444474.083:256): avc: denied { getattr } for pid=6631 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.721901][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.818635][ T30] audit: type=1400 audit(1744444474.283:257): avc: denied { read } for pid=6633 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.889004][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 102.905977][ T30] audit: type=1400 audit(1744444474.283:258): avc: denied { open } for pid=6633 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.953653][ T30] audit: type=1400 audit(1744444474.843:259): avc: denied { write } for pid=6630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.026567][ T30] audit: type=1400 audit(1744444474.843:260): avc: denied { add_name } for pid=6630 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.208406][ T6658] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 103.214835][ T6658] ALSA: mixer_oss: invalid OSS volume 'X#*N߈l͏Я u\Qa{k' [ 103.352160][ T52] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.595049][ T52] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 103.611768][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 103.611781][ T30] audit: type=1400 audit(1744444475.493:264): avc: denied { remove_name } for pid=6654 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2669 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.614180][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.645948][ T30] audit: type=1400 audit(1744444475.513:265): avc: denied { unlink } for pid=6654 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2669 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.672243][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.724671][ T52] usb 5-1: Product: syz [ 103.734281][ T6667] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.265'. [ 103.747177][ T52] usb 5-1: Manufacturer: syz [ 103.751784][ T52] usb 5-1: SerialNumber: syz [ 103.782435][ T52] usb 5-1: config 0 descriptor?? [ 103.832830][ T5914] usb 1-1: USB disconnect, device number 3 [ 103.878319][ T52] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 104.463050][ T52] sonixb 5-1:0.0: Error reading register 00: -110 [ 104.998421][ T30] audit: type=1400 audit(1744444476.853:266): avc: denied { create } for pid=6681 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.109948][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 106.696106][ T5874] usb 5-1: USB disconnect, device number 3 [ 106.838947][ T30] audit: type=1400 audit(1744444478.693:267): avc: denied { bind } for pid=6709 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.724428][ T30] audit: type=1400 audit(1744444478.703:268): avc: denied { name_bind } for pid=6709 comm="syz.3.274" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 108.036343][ T30] audit: type=1400 audit(1744444478.703:269): avc: denied { node_bind } for pid=6709 comm="syz.3.274" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 108.395399][ T5874] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.632021][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 108.643572][ T5874] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 108.692689][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.711143][ T5874] usb 5-1: Product: syz [ 108.737992][ T5874] usb 5-1: Manufacturer: syz [ 108.743928][ T5874] usb 5-1: SerialNumber: syz [ 108.758932][ T5874] usb 5-1: config 0 descriptor?? [ 109.191365][ T30] audit: type=1400 audit(1744444481.073:270): avc: denied { write } for pid=6752 comm="syz.0.280" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.246929][ T5874] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 109.278676][ T5874] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 109.298098][ T30] audit: type=1400 audit(1744444481.073:271): avc: denied { open } for pid=6752 comm="syz.0.280" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.321396][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.328625][ T30] audit: type=1400 audit(1744444481.153:272): avc: denied { create } for pid=6754 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 109.427269][ T30] audit: type=1400 audit(1744444481.153:273): avc: denied { write } for pid=6754 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 109.471528][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 109.506573][ T5874] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -32 [ 109.542193][ T5874] usb 5-1: USB disconnect, device number 4 [ 109.819448][ T30] audit: type=1400 audit(1744444481.703:274): avc: denied { create } for pid=6767 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.156061][ T30] audit: type=1400 audit(1744444481.933:275): avc: denied { write } for pid=6767 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.675537][ T6792] Bluetooth: MGMT ver 1.23 [ 110.723096][ T6789] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 110.795080][ T5874] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.804480][ T30] audit: type=1400 audit(1744444482.693:276): avc: denied { create } for pid=6797 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.862714][ T30] audit: type=1400 audit(1744444482.713:277): avc: denied { create } for pid=6797 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 110.987287][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.007273][ T5874] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 111.037450][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.071318][ T5874] usb 3-1: config 0 descriptor?? [ 111.091293][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 111.100108][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 111.977639][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 112.014618][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 112.151259][ T5874] pwc: recv_control_msg error -32 req 02 val 2c00 [ 112.182089][ T5874] pwc: recv_control_msg error -32 req 04 val 1000 [ 112.202045][ T5874] pwc: recv_control_msg error -32 req 04 val 1300 [ 112.222306][ T5874] pwc: recv_control_msg error -32 req 04 val 1400 [ 112.239443][ T5874] pwc: recv_control_msg error -32 req 02 val 2000 [ 112.263322][ T5874] pwc: recv_control_msg error -32 req 02 val 2100 [ 112.294554][ T5874] pwc: recv_control_msg error -32 req 04 val 1500 [ 112.511912][ T5874] pwc: recv_control_msg error -71 req 02 val 2400 [ 112.542008][ T5874] pwc: recv_control_msg error -71 req 02 val 2600 [ 112.565262][ T5874] pwc: recv_control_msg error -71 req 02 val 2900 [ 112.598236][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 112.605662][ T5832] Bluetooth: hci0: command 0x0401 tx timeout [ 112.612739][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 113.188721][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 113.209923][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 113.313716][ T5874] pwc: Registered as video103. [ 113.349749][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 113.405452][ T5874] usb 3-1: USB disconnect, device number 6 [ 113.408346][ T30] audit: type=1400 audit(1744444485.283:278): avc: denied { read } for pid=5182 comm="acpid" name="event4" dev="devtmpfs" ino=2773 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.539031][ T30] audit: type=1400 audit(1744444485.283:279): avc: denied { open } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2773 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.562449][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.566793][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.305264][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 114.344184][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.397833][ T9] usb 1-1: Product: syz [ 114.416420][ T9] usb 1-1: Manufacturer: syz [ 114.445080][ T9] usb 1-1: SerialNumber: syz [ 114.512803][ T9] usb 1-1: config 0 descriptor?? [ 114.604049][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 114.672222][ T5836] Bluetooth: hci0: command 0x0401 tx timeout [ 114.783022][ T9] usb-storage 1-1:0.0: USB Mass Storage device detected [ 115.226548][ T9] usb 1-1: USB disconnect, device number 4 [ 115.951980][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 115.951997][ T30] audit: type=1400 audit(1744444487.833:282): avc: denied { read write } for pid=6907 comm="syz.0.316" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.062095][ T30] audit: type=1400 audit(1744444487.833:283): avc: denied { open } for pid=6907 comm="syz.0.316" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.129020][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 116.446521][ T9] libceph: connect (1)[c::]:6789 error -101 [ 116.470741][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 116.506988][ T6912] ceph: No mds server is up or the cluster is laggy [ 116.738986][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 116.745812][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 117.250341][ T30] audit: type=1400 audit(1744444488.773:284): avc: denied { execute } for pid=6930 comm="syz.1.322" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 117.277020][ T30] audit: type=1400 audit(1744444488.933:285): avc: denied { append } for pid=6930 comm="syz.1.322" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.074833][ T6948] netlink: 'syz.4.327': attribute type 2 has an invalid length. [ 118.421321][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 119.052086][ T5917] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 119.477256][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 119.485139][ T6982] overlayfs: failed to resolve './file1': -2 [ 119.687264][ T5917] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 119.766565][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.777315][ T5917] usb 4-1: config 0 descriptor?? [ 119.784034][ T6969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.817368][ T30] audit: type=1400 audit(1744444491.703:286): avc: denied { rename } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.879359][ T30] audit: type=1400 audit(1744444491.703:287): avc: denied { unlink } for pid=5179 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.911264][ T30] audit: type=1400 audit(1744444491.703:288): avc: denied { create } for pid=5179 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.960759][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 120.058147][ T30] audit: type=1400 audit(1744444491.943:289): avc: denied { bind } for pid=6993 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.084990][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.346'. [ 120.098305][ T30] audit: type=1400 audit(1744444491.943:290): avc: denied { connect } for pid=6993 comm="syz.0.346" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.140887][ T6998] tipc: Can't bind to reserved service type 2 [ 120.170386][ T30] audit: type=1400 audit(1744444492.023:291): avc: denied { getopt } for pid=6993 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.218125][ T5917] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 120.426243][ T7014] overlayfs: failed to resolve './file1': -2 [ 120.479023][ T9] usb 4-1: USB disconnect, device number 3 [ 120.715401][ T6990] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 121.058811][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 121.058824][ T30] audit: type=1400 audit(1744444492.943:296): avc: denied { connect } for pid=7015 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.138880][ T30] audit: type=1400 audit(1744444492.973:297): avc: denied { write } for pid=7015 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.556505][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 121.641244][ T7034] autofs: Unknown parameter './file1' [ 121.993724][ T5836] Bluetooth: hci0: command 0x0401 tx timeout [ 123.028477][ T30] audit: type=1400 audit(1744444494.913:298): avc: denied { setopt } for pid=7041 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.141559][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 123.375723][ T7054] overlayfs: failed to get inode (-116) [ 123.381753][ T7054] overlayfs: failed to get inode (-116) [ 123.393178][ T30] audit: type=1400 audit(1744444495.273:299): avc: denied { create } for pid=7055 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 123.458875][ T30] audit: type=1400 audit(1744444495.313:300): avc: denied { sys_admin } for pid=7055 comm="syz.2.365" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 123.518220][ T30] audit: type=1400 audit(1744444495.333:301): avc: denied { unmount } for pid=7055 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.545502][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 123.879335][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 124.150520][ T30] audit: type=1400 audit(1744444495.903:302): avc: denied { read } for pid=7064 comm="syz.1.368" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.232621][ T30] audit: type=1400 audit(1744444495.903:303): avc: denied { open } for pid=7064 comm="syz.1.368" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.363325][ T30] audit: type=1400 audit(1744444495.903:304): avc: denied { ioctl } for pid=7064 comm="syz.1.368" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.391837][ T30] audit: type=1400 audit(1744444496.283:305): avc: denied { write } for pid=7074 comm="syz.3.372" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.492156][ T7078] autofs: Unknown parameter './file1' [ 124.792058][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.957584][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.972956][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.993984][ T9] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.050292][ T9] usb 4-1: config 1 interface 0 has no altsetting 1 [ 125.074315][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 125.084762][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.180328][ T9] usb 4-1: Product: syz [ 125.185559][ T9] usb 4-1: Manufacturer: syz [ 125.190259][ T9] usb 4-1: SerialNumber: syz [ 125.200422][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 125.218417][ T7092] fuse: Bad value for 'rootmode' [ 125.412839][ T9] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 125.536514][ T9] smsusb 4-1:1.0: probe with driver smsusb failed with error -71 [ 125.575098][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 125.788411][ T9] usb 4-1: USB disconnect, device number 4 [ 125.819896][ T7111] netlink: 'syz.4.384': attribute type 2 has an invalid length. [ 126.224737][ T30] audit: type=1400 audit(1744444498.113:306): avc: denied { sys_module } for pid=7112 comm="syz.2.385" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 126.547262][ T7126] overlayfs: failed to resolve './file1': -2 [ 126.596591][ T7098] syz.0.380 (7098): drop_caches: 2 [ 126.641861][ T30] audit: type=1400 audit(1744444498.523:307): avc: denied { watch } for pid=7128 comm="syz.3.390" path="/80/file0" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 126.766441][ T7133] fuse: Bad value for 'rootmode' [ 127.272011][ T5874] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.306400][ T7151] overlayfs: failed to resolve './file1': -2 [ 127.772891][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 127.784689][ T5874] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 127.801975][ T5874] usb 1-1: config 0 has no interface number 0 [ 127.808093][ T5874] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.819833][ T5874] usb 1-1: config 0 interface 85 has no altsetting 0 [ 127.834146][ T5874] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 127.851963][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.859961][ T5874] usb 1-1: Product: syz [ 127.875077][ T5874] usb 1-1: Manufacturer: syz [ 127.879683][ T5874] usb 1-1: SerialNumber: syz [ 127.888632][ T5874] usb 1-1: config 0 descriptor?? [ 128.393221][ T7184] netlink: 'syz.4.411': attribute type 2 has an invalid length. [ 128.511842][ T5874] appletouch 1-1:0.85: Geyser mode initialized. [ 128.521766][ T5874] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input7 [ 129.131796][ T5874] usb 1-1: USB disconnect, device number 5 [ 129.238095][ T5874] appletouch 1-1:0.85: input: appletouch disconnected [ 129.359118][ T7194] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 131.024107][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 131.311988][ T5825] Bluetooth: hci0: command 0x0401 tx timeout [ 131.319018][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 131.848939][ T7229] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 132.358789][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730613][ T30] audit: type=1400 audit(1744444504.343:308): avc: denied { mount } for pid=7245 comm="syz.2.437" name="/" dev="pstore" ino=2852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 132.755819][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.762860][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.798164][ T7243] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 132.820901][ T30] audit: type=1400 audit(1744444504.353:309): avc: denied { mount } for pid=7245 comm="syz.2.437" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.106550][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.441'. [ 133.422031][ T5825] Bluetooth: hci0: command 0x0401 tx timeout [ 133.432623][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 133.936013][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.572098][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 134.578932][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 134.598881][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.627996][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.649665][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.667691][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.687714][ T9] usb 1-1: Product: syz [ 134.933870][ T7290] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.452'. [ 135.092104][ T9] usb 1-1: Manufacturer: syz [ 135.096733][ T9] usb 1-1: SerialNumber: syz [ 135.293236][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 135.313224][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 135.384628][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 135.466644][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 135.473201][ T5825] Bluetooth: hci0: command 0x0401 tx timeout [ 135.547347][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 135.570228][ T9] usb 1-1: 0:2 : does not exist [ 136.417806][ T7293] ceph: No mds server is up or the cluster is laggy [ 136.429419][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 136.452373][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 137.592829][ T5825] Bluetooth: hci0: command 0x0401 tx timeout [ 137.645239][ T5917] usb 1-1: USB disconnect, device number 6 [ 138.788165][ T30] audit: type=1400 audit(1744444510.673:310): avc: denied { mount } for pid=7330 comm="syz.3.466" name="/" dev="autofs" ino=16057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 139.292220][ T30] audit: type=1400 audit(1744444511.173:311): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 139.632186][ T5825] Bluetooth: hci0: command 0x0401 tx timeout [ 141.189301][ T7355] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 141.223824][ T7375] fuse: Bad value for 'fd' [ 142.197767][ T5825] Bluetooth: hci0: command 0x0401 tx timeout [ 143.682537][ T7418] fuse: Unknown parameter 'user_id00000000000000000000' [ 143.969662][ T30] audit: type=1400 audit(1744444515.833:312): avc: denied { create } for pid=7424 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 145.342829][ T7447] fuse: Unknown parameter 'user_id00000000000000000000' [ 145.755422][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.555091][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.615184][ T7462] syz.4.514 (7462): drop_caches: 2 [ 146.636817][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 146.673804][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.698333][ T9] usb 4-1: config 0 descriptor?? [ 146.814253][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 146.861553][ T7476] 9pnet_fd: Insufficient options for proto=fd [ 147.337790][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 147.359009][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 147.374616][ T7485] fuse: Unknown parameter 'user_id00000000000000000000' [ 147.402850][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 147.427653][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 147.461476][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 147.485581][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 147.504783][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 147.523614][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 147.974497][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 148.102162][ T5876] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 148.384853][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 148.401005][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 148.413882][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 148.428171][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 148.450726][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 148.456152][ T5876] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.467961][ T5876] usb 5-1: config 0 has no interface number 0 [ 148.475294][ T5876] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.477239][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 148.486657][ T5876] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.502844][ T5876] usb 5-1: config 0 interface 2 has no altsetting 0 [ 148.509475][ T5876] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 148.518820][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.529558][ T5876] usb 5-1: config 0 descriptor?? [ 148.539881][ T9] pwc: Registered as video103. [ 148.565812][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 148.698274][ T9] usb 4-1: USB disconnect, device number 5 [ 149.166523][ T5876] usbhid 5-1:0.2: can't add hid device: -71 [ 149.190494][ T5876] usbhid 5-1:0.2: probe with driver usbhid failed with error -71 [ 149.522043][ T5876] usb 5-1: USB disconnect, device number 5 [ 149.797116][ T7522] 9pnet_fd: Insufficient options for proto=fd [ 150.022116][ T972] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.101781][ T972] usb 4-1: Using ep0 maxpacket: 16 [ 151.226983][ T972] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 151.244557][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.952477][ T972] usb 4-1: Product: syz [ 151.956711][ T972] usb 4-1: Manufacturer: syz [ 151.961341][ T972] usb 4-1: SerialNumber: syz [ 152.097538][ T972] usb 4-1: config 0 descriptor?? [ 152.117987][ T972] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 152.532659][ T972] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 152.664625][ T5873] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 153.634457][ T5873] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.642561][ T5873] usb 2-1: config 0 has no interface number 0 [ 153.712096][ T5873] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.767937][ T5873] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.779405][ T5873] usb 2-1: config 0 interface 2 has no altsetting 0 [ 153.787313][ T5873] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 153.797952][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.712439][ T5873] usb 2-1: config 0 descriptor?? [ 154.721860][ T7567] 9pnet_fd: Insufficient options for proto=fd [ 154.768294][ T5876] usb 4-1: USB disconnect, device number 6 [ 155.192504][ T5873] usbhid 2-1:0.2: can't add hid device: -71 [ 155.290299][ T5873] usbhid 2-1:0.2: probe with driver usbhid failed with error -71 [ 155.382561][ T5873] usb 2-1: USB disconnect, device number 7 [ 155.430740][ T7577] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 155.437214][ T7577] ALSA: mixer_oss: invalid OSS volume 'X#*N߈l͏Я u\Qa{k' [ 155.641276][ T7579] fuse: Bad value for 'fd' [ 155.658351][ T30] audit: type=1400 audit(1744444527.543:313): avc: denied { read write } for pid=7578 comm="syz.4.554" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.679288][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.391196][ T30] audit: type=1400 audit(1744444527.543:314): avc: denied { open } for pid=7578 comm="syz.4.554" path="/113/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 156.413703][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.432730][ T30] audit: type=1400 audit(1744444527.843:315): avc: denied { create } for pid=7580 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 156.456463][ T30] audit: type=1400 audit(1744444528.343:316): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.203382][ T30] audit: type=1400 audit(1744444529.093:317): avc: denied { write } for pid=7596 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.935909][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 157.945550][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 158.077094][ T7610] ceph: No mds server is up or the cluster is laggy [ 159.942100][ T30] audit: type=1400 audit(1744444530.953:318): avc: denied { write } for pid=7625 comm="syz.4.567" path="socket:[17618]" dev="sockfs" ino=17618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.965125][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.078817][ T30] audit: type=1400 audit(1744444532.963:319): avc: denied { listen } for pid=7638 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.153962][ T30] audit: type=1400 audit(1744444532.963:320): avc: denied { accept } for pid=7638 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.187631][ T7649] fuse: Bad value for 'fd' [ 161.574976][ T7662] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 161.581557][ T7662] ALSA: mixer_oss: invalid OSS volume 'X#*N߈l͏Я u\Qa{k' [ 161.698522][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 161.704622][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 161.846291][ T7670] ceph: No mds server is up or the cluster is laggy [ 163.011600][ T30] audit: type=1400 audit(1744444534.893:321): avc: denied { create } for pid=7694 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.026314][ T7711] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.596'. [ 163.061018][ T30] audit: type=1400 audit(1744444534.893:322): avc: denied { write } for pid=7694 comm="syz.0.590" path="socket:[17783]" dev="sockfs" ino=17783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.697562][ T7717] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 163.772545][ T7726] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 163.778940][ T7726] ALSA: mixer_oss: invalid OSS volume 'X#*N߈l͏Я u\Qa{k' [ 165.792110][ T5825] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 165.798456][ T5825] Bluetooth: hci0: command 0x0401 tx timeout [ 167.272582][ T30] audit: type=1400 audit(1744444539.063:323): avc: denied { watch } for pid=7748 comm="syz.1.610" path="/120/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 167.294837][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.722064][ T5876] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.744048][ T30] audit: type=1400 audit(1744444539.633:324): avc: denied { write } for pid=7763 comm="syz.0.617" name="usbmon8" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.896243][ T5832] Bluetooth: hci0: command 0x0401 tx timeout [ 168.333082][ T5876] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 168.412472][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.434859][ T7767] nftables ruleset with unbound chain [ 168.494289][ T5876] usb 4-1: Product: syz [ 168.529591][ T5876] usb 4-1: Manufacturer: syz [ 168.568887][ T5876] usb 4-1: SerialNumber: syz [ 168.673064][ T5876] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 168.730656][ T52] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.978829][ T7758] random: crng reseeded on system resumption [ 168.996280][ T30] audit: type=1400 audit(1744444540.863:325): avc: denied { read write } for pid=7757 comm="syz.3.614" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 169.079316][ T30] audit: type=1400 audit(1744444540.863:326): avc: denied { ioctl open } for pid=7757 comm="syz.3.614" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 169.162418][ T30] audit: type=1400 audit(1744444541.033:327): avc: denied { setopt } for pid=7779 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.439356][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 169.535053][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 169.586445][ T7788] ceph: No mds server is up or the cluster is laggy [ 169.791078][ T5873] usb 4-1: USB disconnect, device number 7 [ 169.873698][ T52] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 169.891094][ T52] ath9k_htc: Failed to initialize the device [ 169.953959][ T5873] usb 4-1: ath9k_htc: USB layer deinitialized [ 170.759131][ T30] audit: type=1400 audit(1744444542.643:328): avc: denied { ioctl } for pid=7814 comm="syz.4.634" path="socket:[17938]" dev="sockfs" ino=17938 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.796555][ T30] audit: type=1400 audit(1744444542.673:329): avc: denied { create } for pid=7816 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 170.798336][ T7819] befs: (nbd0): No write support. Marking filesystem read-only [ 170.824535][ T30] audit: type=1400 audit(1744444542.683:330): avc: denied { mounton } for pid=7818 comm="syz.0.636" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 170.832197][ T52] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 170.852230][ T7819] syz.0.636: attempt to access beyond end of device [ 170.852230][ T7819] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 170.870236][ T7819] befs: (nbd0): unable to read superblock [ 171.634392][ T52] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 171.912032][ T52] usb 4-1: config 0 has no interface number 0 [ 171.918159][ T52] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.991378][ T52] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.037885][ T52] usb 4-1: config 0 interface 2 has no altsetting 0 [ 172.053263][ T52] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 172.064214][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.087520][ T52] usb 4-1: config 0 descriptor?? [ 172.493125][ T91] libceph: connect (1)[c::]:6789 error -101 [ 172.578229][ T91] libceph: mon0 (1)[c::]:6789 connect error [ 172.631393][ T7846] ceph: No mds server is up or the cluster is laggy [ 173.036922][ T52] usbhid 4-1:0.2: can't add hid device: -71 [ 173.062102][ T52] usbhid 4-1:0.2: probe with driver usbhid failed with error -71 [ 173.103561][ T52] usb 4-1: USB disconnect, device number 8 [ 173.132667][ T7861] overlayfs: failed to clone upperpath [ 174.990289][ T7897] netlink: 60 bytes leftover after parsing attributes in process `syz.2.661'. [ 175.127305][ T7897] unsupported nlmsg_type 40 [ 175.760032][ T30] audit: type=1400 audit(1744444547.643:331): avc: denied { ioctl } for pid=7909 comm="syz.1.665" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 175.851972][ T91] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 176.086243][ T91] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 176.199765][ T91] usb 4-1: config 0 has no interface number 0 [ 176.235055][ T91] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.268943][ T91] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.294722][ T91] usb 4-1: config 0 interface 2 has no altsetting 0 [ 176.323035][ T91] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 176.349959][ T91] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.371039][ T91] usb 4-1: config 0 descriptor?? [ 176.490758][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 176.791992][ T5873] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.925497][ T7946] pimreg: entered allmulticast mode [ 176.941984][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 176.970133][ T5873] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 176.997640][ T5873] usb 2-1: config 0 has no interface number 0 [ 177.020380][ T5873] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 177.029714][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.043463][ T5873] usb 2-1: Product: syz [ 177.048145][ T5873] usb 2-1: Manufacturer: syz [ 177.053056][ T5873] usb 2-1: SerialNumber: syz [ 177.072691][ T5873] usb 2-1: config 0 descriptor?? [ 177.091871][ T5873] smsc95xx v2.0.0 [ 177.316822][ T91] usbhid 4-1:0.2: can't add hid device: -71 [ 177.380451][ T91] usbhid 4-1:0.2: probe with driver usbhid failed with error -71 [ 177.974922][ T91] usb 4-1: USB disconnect, device number 9 [ 178.284521][ T7966] openvswitch: netlink: Missing key (keys=40, expected=80) [ 178.293418][ T7950] syz.4.681 (7950): drop_caches: 2 [ 178.309486][ T5873] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 178.335300][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 178.352878][ T5873] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 178.394483][ T5873] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 178.591695][ T7974] 9pnet_fd: Insufficient options for proto=fd [ 178.597146][ T5873] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 178.874078][ T5873] usb 2-1: USB disconnect, device number 8 [ 179.310884][ T30] audit: type=1400 audit(1744444551.193:332): avc: denied { read write } for pid=7985 comm="syz.1.692" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 179.334775][ T30] audit: type=1400 audit(1744444551.193:333): avc: denied { open } for pid=7985 comm="syz.1.692" path="/dev/sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 179.457603][ T7989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.693'. [ 179.472070][ T7989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.693'. [ 179.530889][ T7989] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 179.920336][ T8000] process 'syz.3.697' launched './file2' with NULL argv: empty string added [ 179.931675][ T30] audit: type=1400 audit(1744444551.813:334): avc: denied { execute_no_trans } for pid=7997 comm="syz.3.697" path="/136/file2" dev="tmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.714233][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 180.720348][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 180.721205][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 180.728573][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 180.738424][ T5837] Bluetooth: hci0: command 0x0401 tx timeout [ 182.344401][ T8027] lo speed is unknown, defaulting to 1000 [ 182.350540][ T8027] lo speed is unknown, defaulting to 1000 [ 182.361449][ T8027] lo speed is unknown, defaulting to 1000 [ 182.386597][ T8027] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.396033][ T8027] [ 182.398357][ T8027] ====================================================== [ 182.405357][ T8027] WARNING: possible circular locking dependency detected [ 182.412358][ T8027] 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 Not tainted [ 182.419447][ T8027] ------------------------------------------------------ [ 182.426446][ T8027] syz.0.705/8027 is trying to acquire lock: [ 182.432320][ T8027] ffff88805fcbb558 (sk_lock-AF_INET){+.+.}-{0:0}, at: sock_set_reuseaddr+0x17/0x60 [ 182.441634][ T8027] [ 182.441634][ T8027] but task is already holding lock: [ 182.448981][ T8027] ffffffff8fd91ee8 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x67a/0xdd0 [ 182.457079][ T8027] [ 182.457079][ T8027] which lock already depends on the new lock. [ 182.457079][ T8027] [ 182.467463][ T8027] [ 182.467463][ T8027] the existing dependency chain (in reverse order) is: [ 182.476463][ T8027] [ 182.476463][ T8027] -> #3 (lock#7){+.+.}-{4:4}: [ 182.483324][ T8027] __mutex_lock+0x199/0xb90 [ 182.488336][ T8027] cma_init+0x1d/0x150 [ 182.492908][ T8027] do_one_initcall+0x120/0x6e0 [ 182.498188][ T8027] kernel_init_freeable+0x5c2/0x900 [ 182.503893][ T8027] kernel_init+0x1c/0x2b0 [ 182.508722][ T8027] ret_from_fork+0x45/0x80 [ 182.513638][ T8027] ret_from_fork_asm+0x1a/0x30 [ 182.518906][ T8027] [ 182.518906][ T8027] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 182.526092][ T8027] __mutex_lock+0x199/0xb90 [ 182.531098][ T8027] do_ip_setsockopt+0xf6/0x3240 [ 182.536458][ T8027] ip_setsockopt+0x59/0xf0 [ 182.541372][ T8027] tcp_setsockopt+0xa4/0x100 [ 182.546463][ T8027] smc_setsockopt+0x1b3/0xa00 [ 182.551639][ T8027] do_sock_setsockopt+0x221/0x470 [ 182.557174][ T8027] __sys_setsockopt+0x1a0/0x230 [ 182.562528][ T8027] __x64_sys_setsockopt+0xbd/0x160 [ 182.568140][ T8027] do_syscall_64+0xcd/0x260 [ 182.573166][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.579559][ T8027] [ 182.579559][ T8027] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 182.588136][ T8027] __mutex_lock+0x199/0xb90 [ 182.593148][ T8027] smc_switch_to_fallback+0x2d/0x9f0 [ 182.598935][ T8027] smc_sendmsg+0x13d/0x520 [ 182.603849][ T8027] __sys_sendto+0x495/0x510 [ 182.608851][ T8027] __x64_sys_sendto+0xe0/0x1c0 [ 182.614113][ T8027] do_syscall_64+0xcd/0x260 [ 182.619119][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.625512][ T8027] [ 182.625512][ T8027] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 182.633133][ T8027] __lock_acquire+0x1173/0x1ba0 [ 182.638484][ T8027] lock_acquire+0x179/0x350 [ 182.643486][ T8027] lock_sock_nested+0x41/0xf0 [ 182.648665][ T8027] sock_set_reuseaddr+0x17/0x60 [ 182.654017][ T8027] siw_create_listen+0x9ea/0x1320 [ 182.659544][ T8027] iw_cm_listen+0x16f/0x1f0 [ 182.664551][ T8027] rdma_listen+0x7ef/0xe30 [ 182.669470][ T8027] cma_listen_on_dev+0x4dc/0x810 [ 182.674912][ T8027] cma_add_one+0x790/0xdd0 [ 182.679834][ T8027] add_client_context+0x3db/0x590 [ 182.685358][ T8027] enable_device_and_get+0x1d4/0x3f0 [ 182.691142][ T8027] ib_register_device+0x87f/0xe00 [ 182.696671][ T8027] siw_newlink+0xb60/0xd70 [ 182.701585][ T8027] nldev_newlink+0x3a3/0x680 [ 182.706682][ T8027] rdma_nl_rcv_msg+0x387/0x6e0 [ 182.711950][ T8027] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 182.718870][ T8027] netlink_unicast+0x53a/0x7f0 [ 182.724140][ T8027] netlink_sendmsg+0x8d1/0xdd0 [ 182.729412][ T8027] ____sys_sendmsg+0xa95/0xc70 [ 182.734679][ T8027] ___sys_sendmsg+0x134/0x1d0 [ 182.739862][ T8027] __sys_sendmsg+0x16d/0x220 [ 182.744963][ T8027] do_syscall_64+0xcd/0x260 [ 182.749968][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.756359][ T8027] [ 182.756359][ T8027] other info that might help us debug this: [ 182.756359][ T8027] [ 182.766573][ T8027] Chain exists of: [ 182.766573][ T8027] sk_lock-AF_INET --> rtnl_mutex --> lock#7 [ 182.766573][ T8027] [ 182.778372][ T8027] Possible unsafe locking scenario: [ 182.778372][ T8027] [ 182.785796][ T8027] CPU0 CPU1 [ 182.791136][ T8027] ---- ---- [ 182.796475][ T8027] lock(lock#7); [ 182.800096][ T8027] lock(rtnl_mutex); [ 182.806585][ T8027] lock(lock#7); [ 182.812722][ T8027] lock(sk_lock-AF_INET); [ 182.817118][ T8027] [ 182.817118][ T8027] *** DEADLOCK *** [ 182.817118][ T8027] [ 182.825248][ T8027] 6 locks held by syz.0.705/8027: [ 182.830245][ T8027] #0: ffffffff9aeb1dd8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 182.840578][ T8027] #1: ffffffff8fd797f0 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x2e6/0x680 [ 182.849957][ T8027] #2: ffffffff8fd657b0 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x103/0x3f0 [ 182.859936][ T8027] #3: ffffffff8fd65670 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x162/0x3f0 [ 182.869913][ T8027] #4: ffff88802b9785f0 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x3a7/0x590 [ 182.880762][ T8027] #5: ffffffff8fd91ee8 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x67a/0xdd0 [ 182.889274][ T8027] [ 182.889274][ T8027] stack backtrace: [ 182.895144][ T8027] CPU: 1 UID: 0 PID: 8027 Comm: syz.0.705 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 182.895166][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.895175][ T8027] Call Trace: [ 182.895180][ T8027] [ 182.895185][ T8027] dump_stack_lvl+0x116/0x1f0 [ 182.895203][ T8027] print_circular_bug+0x275/0x350 [ 182.895224][ T8027] check_noncircular+0x14c/0x170 [ 182.895246][ T8027] __lock_acquire+0x1173/0x1ba0 [ 182.895260][ T8027] lock_acquire+0x179/0x350 [ 182.895272][ T8027] ? sock_set_reuseaddr+0x17/0x60 [ 182.895290][ T8027] lock_sock_nested+0x41/0xf0 [ 182.895305][ T8027] ? sock_set_reuseaddr+0x17/0x60 [ 182.895321][ T8027] sock_set_reuseaddr+0x17/0x60 [ 182.895336][ T8027] siw_create_listen+0x9ea/0x1320 [ 182.895352][ T8027] ? preempt_schedule_common+0x44/0xc0 [ 182.895369][ T8027] ? __pfx_siw_create_listen+0x10/0x10 [ 182.895385][ T8027] iw_cm_listen+0x16f/0x1f0 [ 182.895403][ T8027] rdma_listen+0x7ef/0xe30 [ 182.895422][ T8027] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.895441][ T8027] ? __pfx_rdma_listen+0x10/0x10 [ 182.895462][ T8027] cma_listen_on_dev+0x4dc/0x810 [ 182.895482][ T8027] cma_add_one+0x790/0xdd0 [ 182.895501][ T8027] ? __pfx_cma_add_one+0x10/0x10 [ 182.895521][ T8027] ? __pfx_cma_add_one+0x10/0x10 [ 182.895540][ T8027] add_client_context+0x3db/0x590 [ 182.895553][ T8027] ? __pfx_add_client_context+0x10/0x10 [ 182.895566][ T8027] ? preempt_schedule_thunk+0x16/0x30 [ 182.895581][ T8027] enable_device_and_get+0x1d4/0x3f0 [ 182.895595][ T8027] ? __pfx_enable_device_and_get+0x10/0x10 [ 182.895609][ T8027] ? rdma_counter_init+0x1f8/0x3f0 [ 182.895626][ T8027] ib_register_device+0x87f/0xe00 [ 182.895640][ T8027] ? __pfx_ib_register_device+0x10/0x10 [ 182.895654][ T8027] ? ib_device_set_netdev+0x7e/0x860 [ 182.895667][ T8027] ? lockdep_init_map_type+0x5c/0x280 [ 182.895680][ T8027] siw_newlink+0xb60/0xd70 [ 182.895695][ T8027] nldev_newlink+0x3a3/0x680 [ 182.895713][ T8027] ? __pfx_nldev_newlink+0x10/0x10 [ 182.895731][ T8027] ? trace_sched_exit_tp+0xde/0x130 [ 182.895768][ T8027] ? cred_has_capability.isra.0+0x193/0x2f0 [ 182.895788][ T8027] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 182.895810][ T8027] ? security_capable+0x7e/0x260 [ 182.895825][ T8027] ? ns_capable+0xd7/0x110 [ 182.895841][ T8027] ? __pfx_nldev_newlink+0x10/0x10 [ 182.895860][ T8027] rdma_nl_rcv_msg+0x387/0x6e0 [ 182.895879][ T8027] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 182.895897][ T8027] ? __lock_acquire+0xaa4/0x1ba0 [ 182.895910][ T8027] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 182.895932][ T8027] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 182.895952][ T8027] ? find_held_lock+0x2b/0x80 [ 182.895973][ T8027] netlink_unicast+0x53a/0x7f0 [ 182.895992][ T8027] ? __pfx_netlink_unicast+0x10/0x10 [ 182.896011][ T8027] netlink_sendmsg+0x8d1/0xdd0 [ 182.896030][ T8027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.896050][ T8027] ____sys_sendmsg+0xa95/0xc70 [ 182.896070][ T8027] ? copy_msghdr_from_user+0x10a/0x160 [ 182.896085][ T8027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.896107][ T8027] ___sys_sendmsg+0x134/0x1d0 [ 182.896123][ T8027] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.896146][ T8027] __sys_sendmsg+0x16d/0x220 [ 182.896166][ T8027] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.896181][ T8027] ? __x64_sys_futex+0x1e0/0x4c0 [ 182.896203][ T8027] ? rcu_is_watching+0x12/0xc0 [ 182.896221][ T8027] do_syscall_64+0xcd/0x260 [ 182.896239][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.896253][ T8027] RIP: 0033:0x7fbf7458d169 [ 182.896265][ T8027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.896278][ T8027] RSP: 002b:00007fbf7538f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.896291][ T8027] RAX: ffffffffffffffda RBX: 00007fbf747a6160 RCX: 00007fbf7458d169 [ 182.896300][ T8027] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 182.896308][ T8027] RBP: 00007fbf7460e990 R08: 0000000000000000 R09: 0000000000000000 [ 182.896316][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.896324][ T8027] R13: 0000000000000000 R14: 00007fbf747a6160 R15: 00007ffedbe0d878 [ 182.896336][ T8027] [ 182.901950][ T30] audit: type=1400 audit(1744444554.223:335): avc: denied { write } for pid=8022 comm="syz.0.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 182.910794][ T8027] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 183.382645][ T30] audit: type=1400 audit(1744444555.253:336): avc: denied { connect } for pid=8022 comm="syz.0.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 183.422653][ T8027] lo speed is unknown, defaulting to 1000 [ 183.429033][ T8027] lo speed is unknown, defaulting to 1000 [ 183.435487][ T8027] lo speed is unknown, defaulting to 1000 [ 183.442035][ T8027] lo speed is unknown, defaulting to 1000 [ 183.448330][ T8027] lo speed is unknown, defaulting to 1000