last executing test programs: 1.466763728s ago: executing program 3 (id=472): r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7e}, 0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x40, 0x47, 0x5, 0x3, {{0xa, 0x4, 0x0, 0x5, 0x28, 0x64, 0x0, 0xc, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x80, [@broadcast, @multicast1]}, @generic={0x44, 0x9, "5ee5059cb74460"}]}}}}}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010600002f"]) 1.249459929s ago: executing program 1 (id=481): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xae343) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xae343) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048000) r4 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r4, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1, 0x8}, 0x1c, 0x0, 0x6}}], 0x1, 0x4048004) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a0000000000fd000000000014000500000000000000000000000058ebd7113e236e40db9b9af806b192322ae3a5cf7e447b5c15ef4973d51117359b349d7efe2b4becfd09f7648242240106cb28fc1b6720454f7d7d58febf2197ca2a09cde91453d3681e633414210e802374e59f782b"], 0x30}, 0x1, 0x11}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x10001}}, 0x10) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x1214891, 0x0) (async) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x1214891, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r1, r0}}, 0x18) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r1, r0}}, 0x18) 1.061574355s ago: executing program 1 (id=486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000d58000/0x3000)=nil, 0x2000, 0x3}) tee(r2, r3, 0x5, 0xa) (async) tee(r2, r3, 0x5, 0xa) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) 1.061195281s ago: executing program 2 (id=487): r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r0, &(0x7f0000000940)=ANY=[@ANYRESDEC=0x0], 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0), 0x8, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) 911.531018ms ago: executing program 1 (id=488): getrandom(&(0x7f0000000240)=""/278, 0x116, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000840060000b10800064000000fff0500050002"], 0x60}}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 909.349385ms ago: executing program 1 (id=489): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b02000000000200ff7f6b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 850.094023ms ago: executing program 1 (id=491): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a2000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) (async) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000000)) r10 = dup(r9) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r10}) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x5, 0x1000000, 0x0, {0xdfaa, 0x0, 0x6, 0x0, 0x0, 0xd03, 0x4, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b45c773ef77d1f000001009802000000deff0000fa018000000000000000fb00"}}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={r5, r6, r7, 0x0, 0x4}) 781.415392ms ago: executing program 1 (id=493): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(camellia-generic)\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000000000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0xff, 0x0, 0x20, 0x6, 0x6, 0x0, 0x2}, {0x4f, 0x0, 0x8, 0x5, 0x2, 0xfe, 0x0, 0xa6, 0x40}], 0xfffffffc}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) timer_create(0x3, &(0x7f0000000240)={0x0, 0x21, 0x4, @thr={0x0, 0x0}}, &(0x7f00000003c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x800fd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x8, &(0x7f0000000340)=[{0x6, 0x0, 0xfe, 0x7fff0006}, {0x1e8, 0x81, 0x5, 0x2}, {0x6, 0x7, 0x7c, 0x4}, {0x5, 0x9, 0x4, 0x1ff}, {0x3ff, 0x7, 0x3, 0xa7}, {0x4, 0x7, 0x5, 0x8}, {0x6c, 0x7f, 0xe, 0xd5}, {0x12, 0x3, 0x7, 0x6}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000380), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x2}) lseek(r8, 0x8, 0x2) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) exit(0x4) timer_settime(r5, 0x1, &(0x7f0000000140), 0x0) 581.489635ms ago: executing program 3 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) mount$bpf(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000300), 0x20004dc, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0xfcc1}}], [{@euid_lt={'euid<', r4}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x1, 0x15, 0x1, 0x6c34, 0x1000, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x5, 0x0, 0x6, 0x5, 0xfffffffffffffffe, 0x2], 0x0, 0x1019c4}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000002c0)={0xa}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write(r0, &(0x7f0000000240)='dummy_udc.0\n', 0xc) 411.744825ms ago: executing program 3 (id=498): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x402}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x60}}, 0x44080) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 411.286611ms ago: executing program 0 (id=499): r0 = gettid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108180200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280"], 0x24}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prlimit64(r0, 0x8, &(0x7f0000000040)={0x81, 0x3}, &(0x7f00000000c0)) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x45d41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='nicvf0\x00', 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000000a80000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) writev(r4, &(0x7f0000001600)=[{&(0x7f0000000000)="6047a707cc8209cca6cf4ff5f9eb4fca6e64f2eb9b15aef7be9a8dadb06700"/42, 0x2a}, {&(0x7f0000000180)="4f985c0ab8caa43d59814f1a5fd4cc6038a284ad66d567cbc4ca293a45efe0d1d1da852e0b17c27f56504c305534ffc207485c716bd33a11e20e23e5dc1990f002d1053f4985891795e91d1385257f8b14a668d1ece24ed4a75bf9789ceaf0fbd2d316731b05b8b4d7db190d04548ab0c7f2b82e7875737b689c5537f58dcd30e82ea4c9a65158949417e2baaf38c643b481f3868049fec34884bd1108c154", 0xfffffe9c}, {&(0x7f0000001640)="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", 0xf37}], 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000d00a0000000000000000010000040000000000000000f8ffd33249fac64ead694f7dd2000000000000000000"], &(0x7f0000000100)=""/202, 0x3e, 0xca, 0x1}, 0x20) 361.878716ms ago: executing program 3 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000036007bc335bd7000f1cd0c5006"], 0x14}}, 0x4000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x78) close(r1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 361.404749ms ago: executing program 3 (id=501): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10001}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100692afd650ce4edf8566ac0e62e00030020d4bc000004000000000000b5d86fb714000200fc000000000000000000000000000001"], 0x5c}}, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="09d1", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0) write$binfmt_elf32(r0, 0x0, 0x4cd) 221.09162ms ago: executing program 3 (id=502): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000b80)={0x6, 0x118, 0xfa00, {{0x6f, 0x4, "fca993977b7fbfce6b88c62d1be61472deb111cb4ff38cb106ccd2af21865474db1eca704c05a2d4a704f57d730babf8a8aa10f2e85da553be93df0093675e4cddd5135c825dfeb3c2d2d04b5470a524b287abfb54f43da7fe36e355374136180a30f6160dd696a5c24c09355da79c6531acead5c9be83231c27c5c3d49a9bf9b5796b0cd3168a65acdea0ebd22eec2a8a8fb992dd5c265a221905a249dfb75cd4bbdd10e8865ba10394053d36ad8c0e2e626ca9242976dbe39b14e134cd03e40f1050abf3ed8ce36cb99c2eaf480d8fafcdbb445ef75d43516383522a2de09aea24d933dec2e2c623ecd300", 0x12, 0x9, 0x4, 0x1, 0x2, 0x40, 0x8, 0x1}, r2}}, 0x120) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@quota}]}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x100c00) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 220.912029ms ago: executing program 2 (id=503): socketpair(0x1d, 0x80000, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x1, 0xfffff016}, {0x6, 0x0, 0x2}]}, 0x10) 170.838986ms ago: executing program 0 (id=504): r0 = timerfd_create(0x8, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x277d3b99) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xf3bd, 0x3}, 0x10) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000140)={0x0, 0x0, 0x2, 0xa, 0x4}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x58000, 0x8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) fchown(r2, r3, r5) statx(r1, &(0x7f0000000380)='./file0\x00', 0x0, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000340)='./file0\x00', r4, r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000001}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r9, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r10, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x20000801) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r12, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x16, 0x3, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008841}, 0x880) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000a00)={0x0, 0x10, &(0x7f00000009c0)=[@in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000a40)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000000a80)={r14, 0x6}, 0x8) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40840) r15 = creat(&(0x7f0000000c00)='./file0/file0\x00', 0x98) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000c40)={'veth0_macvtap\x00'}) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0xa, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000d80)=0x2) 168.375212ms ago: executing program 0 (id=505): pipe(&(0x7f0000000440)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='fd', 0x0, r0) 117.760615ms ago: executing program 2 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x8081) 117.141412ms ago: executing program 0 (id=507): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) write(r1, 0x0, 0x72) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000012002df8001c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004051}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f00000000c0)={0x0, 0x201000, 0x8}) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000280)={0x0, 0x0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) 116.34766ms ago: executing program 2 (id=508): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @volatile={0x0, 0x0, 0x0, 0xa}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f0000000180)={0x14b4, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x147c, 0x3, 0x0, 0x1, [{0x1478, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfb, 0x1, "3f2a5def05a0cb494118c8f7d0bae6de1827ba0808be94d45265433812aa43a01b714ad116be8b41c55cbd887aa1f564a7616caeb4d1536fad5399b9d7c2c7be482bec80257b1b53441dd7b2a3dff1a2a150d9090640a2dee3b0262ad86f15d1cb84d6369b788874189547c3d323ea3072d8c6cc86d83987176fed89a8c2e3ebf7e5516bf98f0ae03e2f3fe5838c2f070a9bdc2eeb5560de0dd7bfc23cbaba5112d29f69e64927d76ca189606e96095f2efb1ef6699fed089356883f82a67c9f72261a496504231f3a1aa341dbbd10e34aea76679558f4a379d6b8ae5f0e2443d1b5121caa66110549226c11618d7e9a64cb9eee0d0695"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x60, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "559561b74a0e3662be9c66454272a58849592592801cef6695a7ef8846d4cc6e926ccd28caec6c5859d4c1669601ec23de09c4d14a4f21112caa3a71d09a0e7e22f73ab7172598f4f989931fe5f912bfb76e336617"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x12e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "8b49605d5b8ed9077059f9af8881d524aa000df55e0824ba869c1a49298c216db6187b3a2f347ac01500a06213d75154ff99302f3852a036a2548865f946e850130fa4cacc2219aa176ac104fb4122e55cca731efa7c49b363a126302fed569d0e0f8d28c5dd4ed4c21f5c171ce70c39e6a105d4ce8363763543fc0552b3ef202f81be23027cedf7202cd50fe0ed683d2dbf4c7b803aa5b6a4d454b9b2c62f49485ab514840b5c8ae9ab9f7c3cb2d4232ad8778c34ff9235a87d1ea68bfe4751793b386167aef96d7191494e78268b9c4998652786111534301e941142df46555855081d"}, @NFTA_DATA_VALUE={0xad, 0x1, "7fe73f57e26fd90cc18164d9cbd82ae671763c25acf770e868525eebfaeea25a3d978726e0d9aae806e8d8fc833eafd1c5a7635ad444d1fe9ac7cd20cfe302b1889b6fa5a875b1d4ef2dde0f261c6265daaa68537a3038afbf5b07a8677201272abe0071cf5d69a857679ef00d491cef318e8bd47baafdccb8fcc7bc6035ab48f3912abef837dc3e4f73ac510d56df5efc8b027148eb47bd60c811893eb58908e266eb9bdbc78cd10a"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa, 0x1, "22491a104aad"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xaf, 0x1, "5dbaf6827011e6c49bf36c840371372a4d0ee574f4eca4d82a040d40c4e4f8ee92abb79378ce76db3d4375744ed340e2d039635a93c814d80fb173b5eebf96667918ee1b8fc75219da363af024abe694ab7cf10a3f2e2ff570e27679a2432da757576da246891ba912d81919839a86846800fbe7d2ccbfc6fa754c5a800f719f239dabc8e15aaab6cec65d55b211eb0f445cd0dea22d4b3de9db4438b148d404a08b1a7e8a5fd3e0fe602a"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x14b4}, 0x1, 0x0, 0x0, 0x40}, 0x4004) 61.551127ms ago: executing program 0 (id=509): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) lseek(r1, 0xae, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 60.015923ms ago: executing program 2 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040020, &(0x7f0000000000)=ANY=[@ANYBLOB="6d6f6461b7b9298f93af9ace71653d309b7b3030303030303030303030303030303030dd301b4df8e2cf18"]) 59.234253ms ago: executing program 2 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2041, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_SET_RAND_ADDR={{0x6}, 0x8}}}, 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') syz_usb_connect(0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x108242, 0x78e22799f4a46fa9) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1\x00', &(0x7f00000003c0)={0x90001, 0xa0, 0x10}, 0x18) r2 = fspick(r1, &(0x7f0000000400)='./config\x00', 0x1) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='file0', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r5 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r4, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r5, &(0x7f0000000540)=0xffffffffffffffff, 0x74) close(0x3) symlinkat(&(0x7f0000000080)='./file0/file1\x00', r0, &(0x7f0000000100)='./file1/file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000680)=0xe8) fstat(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000500)='./file1\x00', r6, r7, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x182000, &(0x7f0000000040)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_on}, {@nfs_export_on}]}) rmdir(&(0x7f0000000200)='./file0/file1\x00') 0s ago: executing program 0 (id=512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x5) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x2, 0x4, 0x4, 0xa, 0x500, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x500000000000000, 0x0, 0x4e}, &(0x7f0000000fc0)) r4 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x40402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000240)={0x1, 0x4, 0x8, &(0x7f0000000080)={0xe, "c955000000d5ac81e630a59afe000000000200"}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040000) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x34, r7, 0x1, 0x2, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002800), 0x60c00, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r8, 0x3b8b, &(0x7f00000028c0)={0x10, 0x1}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000410000012dbd7000fedbdf25047c0000"], 0x14}, 0x1, 0x0, 0x0, 0x4c090}, 0x40040) r9 = openat(r5, &(0x7f0000001f00)='./file0/file0\x00', 0x8000, 0x44) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001f40)={&(0x7f0000000d00)="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", &(0x7f0000001d00)=""/214, &(0x7f0000001e00)="397bdeee30cb9b8fe01942e4e60762ce593e91fc57630d70e1ef80f2f3d59aeb794fd01c83151d0d53b9f4238dd1ec57620ef1c778ddc88f1aa1f88a6d03c646c11b81f5feda1562a7b13484943c1ae27d5873ab7cb08edc2998e46dea3c71824dd57faa68dd422b77", &(0x7f0000001e80)="30707e9df289cd0d8acdb3f9b2f03ab1d2099eaec6068d65c8372d0bcfa6e6b5af405a25ce0e21438251e7d3b9e9dce2a1c1e8191e5cab24be34002dd3447c1c238b88ddfec22d459a46e797550003b51d4dfc973258", 0x8, r9, 0x4}, 0x38) ioctl$BLKPG(r5, 0x40084d05, &(0x7f0000000640)={0x1, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36220' (ED25519) to the list of known hosts. [ 38.780608][ T42] audit: type=1400 audit(1785731040.541:116): avc: denied { name_bind } for pid=5650 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.811494][ T42] audit: type=1400 audit(1785731040.571:117): avc: denied { execute } for pid=5651 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 38.818430][ T42] audit: type=1400 audit(1785731040.581:118): avc: denied { execute_no_trans } for pid=5651 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.602843][ T42] audit: type=1400 audit(1785731041.361:119): avc: denied { write } for pid=5652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.643006][ T42] audit: type=1400 audit(1785731041.401:120): avc: denied { write } for pid=5655 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.055074][ T42] audit: type=1400 audit(1785731041.821:121): avc: denied { write } for pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.096876][ T42] audit: type=1400 audit(1785731041.861:122): avc: denied { write } for pid=5661 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.211882][ T42] audit: type=1400 audit(1785731041.971:123): avc: denied { write } for pid=5664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.265903][ T42] audit: type=1400 audit(1785731042.031:124): avc: denied { write } for pid=5667 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.415179][ T42] audit: type=1400 audit(1785731042.181:125): avc: denied { write } for pid=5670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.039204][ T5651] cgroup: Unknown subsys name 'net' [ 41.187571][ T5651] cgroup: Unknown subsys name 'cpuset' [ 41.192122][ T5651] cgroup: Unknown subsys name 'rlimit' [ 41.404243][ T5708] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.098291][ T5651] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.492196][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 45.492208][ T42] audit: type=1400 audit(1785731047.251:161): avc: denied { execmem } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.723961][ T42] audit: type=1400 audit(1785731047.481:162): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.730680][ T42] audit: type=1400 audit(1785731047.481:163): avc: denied { read write } for pid=5737 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.738353][ T42] audit: type=1400 audit(1785731047.481:164): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.746048][ T42] audit: type=1400 audit(1785731047.491:165): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[2601]" dev="sockfs" ino=2601 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.759234][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.763123][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.766935][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.770988][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.774445][ T5752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.775401][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.777418][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.777673][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.779146][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.779236][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.781123][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.783074][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.783210][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.787066][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.788972][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.793051][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.793135][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.794591][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.794608][ T42] audit: type=1400 audit(1785731047.551:166): avc: denied { read } for pid=5737 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.794680][ T42] audit: type=1400 audit(1785731047.551:167): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.795783][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.796082][ T42] audit: type=1400 audit(1785731047.561:168): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.799722][ T42] audit: type=1400 audit(1785731047.561:169): avc: denied { module_request } for pid=5737 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.802668][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.827633][ T42] audit: type=1400 audit(1785731047.591:170): avc: denied { sys_module } for pid=5737 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.386304][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.389193][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.391553][ T5737] bridge_slave_0: entered allmulticast mode [ 46.394280][ T5737] bridge_slave_0: entered promiscuous mode [ 46.417850][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.420275][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.422672][ T5738] bridge_slave_0: entered allmulticast mode [ 46.425420][ T5738] bridge_slave_0: entered promiscuous mode [ 46.429158][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.431958][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.434265][ T5737] bridge_slave_1: entered allmulticast mode [ 46.440081][ T5737] bridge_slave_1: entered promiscuous mode [ 46.454907][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.457676][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.460346][ T5738] bridge_slave_1: entered allmulticast mode [ 46.462962][ T5738] bridge_slave_1: entered promiscuous mode [ 46.520747][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.544317][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.550320][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.579821][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.583112][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.586438][ T5747] bridge_slave_0: entered allmulticast mode [ 46.590234][ T5747] bridge_slave_0: entered promiscuous mode [ 46.595987][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.610837][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.613302][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.616425][ T5739] bridge_slave_0: entered allmulticast mode [ 46.619210][ T5739] bridge_slave_0: entered promiscuous mode [ 46.622395][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.625663][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.628738][ T5747] bridge_slave_1: entered allmulticast mode [ 46.632722][ T5747] bridge_slave_1: entered promiscuous mode [ 46.652430][ T5738] team0: Port device team_slave_0 added [ 46.656563][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.659420][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.662472][ T5739] bridge_slave_1: entered allmulticast mode [ 46.666694][ T5739] bridge_slave_1: entered promiscuous mode [ 46.683609][ T5737] team0: Port device team_slave_0 added [ 46.686821][ T5737] team0: Port device team_slave_1 added [ 46.689442][ T5738] team0: Port device team_slave_1 added [ 46.724576][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.743055][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.754630][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.758987][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.761268][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.769175][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.774910][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.778193][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.780815][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.790245][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.805585][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.807846][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.815888][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.825864][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.828105][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.836395][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.851501][ T5747] team0: Port device team_slave_0 added [ 46.863910][ T5739] team0: Port device team_slave_0 added [ 46.867162][ T5739] team0: Port device team_slave_1 added [ 46.876466][ T5747] team0: Port device team_slave_1 added [ 46.906556][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.908676][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.916366][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.930302][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.932831][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.941429][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.951922][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.954185][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.963157][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.981410][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.983766][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.992035][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.009219][ T5737] hsr_slave_0: entered promiscuous mode [ 47.012993][ T5737] hsr_slave_1: entered promiscuous mode [ 47.019824][ T5738] hsr_slave_0: entered promiscuous mode [ 47.022524][ T5738] hsr_slave_1: entered promiscuous mode [ 47.025295][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 47.028176][ T5738] Cannot create hsr debugfs directory [ 47.051140][ T5739] hsr_slave_0: entered promiscuous mode [ 47.053394][ T5739] hsr_slave_1: entered promiscuous mode [ 47.055475][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 47.057255][ T5739] Cannot create hsr debugfs directory [ 47.085020][ T5747] hsr_slave_0: entered promiscuous mode [ 47.087180][ T5747] hsr_slave_1: entered promiscuous mode [ 47.089251][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 47.091100][ T5747] Cannot create hsr debugfs directory [ 47.382358][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.390067][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.392847][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.397156][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.402071][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.406545][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.409082][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.412719][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.462253][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.468336][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.471006][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.475633][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.479034][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.484409][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.487050][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.491145][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.539734][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.543610][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.546525][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.550262][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.553708][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.557512][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.560227][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.565307][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.627660][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.631991][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.639243][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.643432][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.646769][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.651084][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.654024][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.659044][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.672587][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.717982][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.733747][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.736420][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.742712][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.744939][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.770431][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.798710][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.810835][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.822202][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.824497][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.835620][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.836067][ T5741] Bluetooth: hci3: command tx timeout [ 47.836110][ T5752] Bluetooth: hci0: command tx timeout [ 47.843923][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.846978][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.850143][ T5741] Bluetooth: hci1: command tx timeout [ 47.862768][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.866655][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.869696][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.884295][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.887295][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.910598][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.924960][ T5741] Bluetooth: hci2: command tx timeout [ 47.928721][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.931800][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.942773][ T5738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.965908][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.968174][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.132314][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.162626][ T5737] veth0_vlan: entered promiscuous mode [ 48.171106][ T5737] veth1_vlan: entered promiscuous mode [ 48.198897][ T5737] veth0_macvtap: entered promiscuous mode [ 48.208289][ T5737] veth1_macvtap: entered promiscuous mode [ 48.223732][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.234617][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.239708][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.244863][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.264271][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.295979][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.328564][ T5738] veth0_vlan: entered promiscuous mode [ 48.360390][ T5739] veth0_vlan: entered promiscuous mode [ 48.363681][ T5747] veth0_vlan: entered promiscuous mode [ 48.369759][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.372129][ T5738] veth1_vlan: entered promiscuous mode [ 48.373226][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.381793][ T5739] veth1_vlan: entered promiscuous mode [ 48.392259][ T5747] veth1_vlan: entered promiscuous mode [ 48.402926][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.406080][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.430023][ T5747] veth0_macvtap: entered promiscuous mode [ 48.435918][ T5747] veth1_macvtap: entered promiscuous mode [ 48.454208][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.455873][ T5738] veth0_macvtap: entered promiscuous mode [ 48.468232][ T5739] veth0_macvtap: entered promiscuous mode [ 48.478242][ T5738] veth1_macvtap: entered promiscuous mode [ 48.482628][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.489189][ T5739] veth1_macvtap: entered promiscuous mode [ 48.499470][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.523151][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.527364][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.537815][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.548171][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.554748][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.572708][ T5891] kAFS: unable to lookup cell '1' [ 48.595804][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.599064][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.614749][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.617459][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.661576][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.664254][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.670693][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.673298][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.675073][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.678514][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.711184][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.715434][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.717183][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.720648][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.720671][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.747873][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.750774][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.774938][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.777711][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.782609][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.785938][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.826606][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.833303][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.838384][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.858732][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.862214][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.974830][ T5918] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 49.366681][ T5888] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.402148][ T5934] Need at least one configuration in g1. [ 49.404512][ T5934] udc dummy_udc.0: failed to start g1: -22 [ 49.407083][ T5934] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 49.412920][ T5934] UDC core: g1: couldn't find an available UDC or it's busy [ 49.515927][ T5888] usb 8-1: device descriptor read/64, error -71 [ 49.623187][ T5938] netlink: 'syz.0.17': attribute type 34 has an invalid length. [ 49.626590][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 49.646149][ T5938] bond1: option lacp_strict: invalid value (46) [ 49.652946][ T5938] bond1 (unregistering): Released all slaves [ 49.756993][ T5888] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 49.895763][ T5888] usb 8-1: device descriptor read/64, error -71 [ 49.916557][ T5741] Bluetooth: hci1: command tx timeout [ 49.919420][ T5752] Bluetooth: hci3: command tx timeout [ 49.931868][ T5955] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 49.943685][ T5955] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 49.949743][ T5955] CIFS: VFS: Error connecting to socket. Aborting operation. [ 49.952112][ T5955] CIFS: VFS: cifs_mount failed w/return code = -111 [ 49.996343][ T5957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.22'. [ 50.006715][ T5741] Bluetooth: hci2: command tx timeout [ 50.007787][ T5888] usb usb8-port1: attempt power cycle [ 50.345089][ T5888] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 50.365192][ T5888] usb 8-1: device descriptor read/8, error -71 [ 50.614835][ T5888] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 50.619350][ T42] kauditd_printk_skb: 123 callbacks suppressed [ 50.619367][ T42] audit: type=1400 audit(1785731052.381:294): avc: denied { create } for pid=5977 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.627649][ T42] audit: type=1400 audit(1785731052.381:295): avc: denied { sys_module } for pid=5973 comm="syz.1.26" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.627674][ T42] audit: type=1400 audit(1785731052.381:296): avc: denied { ioctl } for pid=5977 comm="syz.0.27" path="socket:[9526]" dev="sockfs" ino=9526 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.627695][ T42] audit: type=1400 audit(1785731052.381:297): avc: denied { write } for pid=5977 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.652592][ T5888] usb 8-1: device descriptor read/8, error -71 [ 50.678930][ T42] audit: type=1400 audit(1785731052.441:298): avc: denied { create } for pid=5977 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.753930][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 50.761154][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 50.764984][ T5985] netlink: 'syz.1.29': attribute type 11 has an invalid length. [ 50.775386][ T5888] usb usb8-port1: unable to enumerate USB device [ 50.783141][ T42] audit: type=1400 audit(1785731052.541:299): avc: denied { write } for pid=5986 comm="syz.0.30" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.794811][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.800590][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.803541][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.807034][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.822466][ T5989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31'. [ 50.826136][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 50.836561][ T42] audit: type=1400 audit(1785731052.601:300): avc: denied { unlink } for pid=5990 comm="syz.0.32" name="#1" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.843763][ T42] audit: type=1400 audit(1785731052.601:301): avc: denied { mount } for pid=5990 comm="syz.0.32" name="/" dev="overlay" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.941691][ T42] audit: type=1400 audit(1785731052.701:302): avc: denied { append } for pid=5996 comm="syz.0.34" name="v4l-subdev2" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.944153][ T5997] netlink: 56 bytes leftover after parsing attributes in process `syz.0.34'. [ 50.955997][ T5997] netlink: 56 bytes leftover after parsing attributes in process `syz.0.34'. [ 51.002982][ T42] audit: type=1800 audit(1785731052.761:303): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.34" name="/newroot/9/bus/#82//deleted" dev="tmpfs" ino=82 res=0 errno=0 [ 51.136820][ T5850] IPVS: starting estimator thread 0... [ 51.149309][ T6011] netlink: 104 bytes leftover after parsing attributes in process `syz.2.39'. [ 51.158779][ T6011] loop5: detected capacity change from 0 to 7 [ 51.166938][ T6011] loop5: p3 p4 [ 51.168596][ T6011] loop5: partition table partially beyond EOD, truncated [ 51.216702][ T6014] netlink: 'syz.0.40': attribute type 8 has an invalid length. [ 51.218373][ T5748] udevd[5748]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 51.218454][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 51.226366][ T6008] IPVS: using max 45 ests per chain, 108000 per kthread [ 51.254297][ T6017] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 51.436218][ T5741] Bluetooth: hci0: command tx timeout [ 51.654771][ T5888] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.693683][ T6028] misc userio: Can't change port extra on an already running userio instance [ 51.770800][ T6034] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 51.809064][ T5888] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 51.814003][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 51.819816][ T5888] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 51.822740][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 51.825596][ T5888] usb 5-1: Product: syz [ 51.826814][ T5888] usb 5-1: Manufacturer: syz [ 51.828202][ T5888] usb 5-1: SerialNumber: syz [ 51.840242][ T5888] usb 5-1: config 0 descriptor?? [ 51.849303][ T5888] usb 5-1: selecting invalid altsetting 0 [ 51.872714][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 52.005015][ T5741] Bluetooth: hci3: command tx timeout [ 52.005128][ T5752] Bluetooth: hci1: command tx timeout [ 52.048708][ T5845] usb 5-1: USB disconnect, device number 2 [ 52.083288][ T6048] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 52.134786][ T1047] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.140719][ T6055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=6055 comm=syz.1.52 [ 52.191039][ T6060] binder_alloc: 6049: binder_alloc_buf size -16 failed, no address space [ 52.194162][ T6060] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 52.197548][ T6051] binder_alloc: 6049: binder_alloc_buf size -16 failed, no address space [ 52.201596][ T6051] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 52.206591][ T6051] syzkaller1: entered promiscuous mode [ 52.208353][ T6051] syzkaller1: entered allmulticast mode [ 52.221102][ T6061] Zero length message leads to an empty skb [ 52.261015][ T6064] capability: warning: `syz.3.55' uses 32-bit capabilities (legacy support in use) [ 52.272366][ T6064] ======================================================= [ 52.272366][ T6064] WARNING: The mand mount option has been deprecated and [ 52.272366][ T6064] and is ignored by this kernel. Remove the mand [ 52.272366][ T6064] option from the mount to silence this warning. [ 52.272366][ T6064] ======================================================= [ 52.304794][ T1047] usb 7-1: Using ep0 maxpacket: 8 [ 52.312511][ T1047] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.324510][ T1047] usb 7-1: config 179 has no interface number 0 [ 52.329628][ T1047] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 52.344747][ T1047] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 52.363686][ T1047] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 57673, setting to 1024 [ 52.368663][ T1047] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 52.377089][ T6070] netlink: 'syz.0.57': attribute type 19 has an invalid length. [ 52.378291][ T1047] usb 7-1: config 179 interface 65 has no altsetting 0 [ 52.393049][ T1047] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 52.403293][ T1047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.428007][ T1047] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input6 [ 52.465382][ T6066] evm: overlay not supported [ 52.477709][ T5133] input input6: unable to receive magic message: -110 [ 52.491452][ T5133] input input6: unable to receive magic message: -32 [ 52.504529][ T5133] input input6: unable to receive magic message: -32 [ 52.508290][ T6075] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 52.514120][ T5133] input input6: unable to receive magic message: -32 [ 52.518874][ T5133] input input6: unable to receive magic message: -32 [ 52.583078][ T6084] tipc: Started in network mode [ 52.584838][ T6084] tipc: Node identity ac14140f, cluster identity 4711 [ 52.587800][ T6084] tipc: Enabled bearer , priority 10 [ 52.601223][ T6084] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.616931][ T6039] input input6: unable to receive magic message: -32 [ 52.646181][ T56] usb 7-1: USB disconnect, device number 2 [ 52.646213][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 52.672051][ T6090] overlay: Unknown parameter '' [ 53.021962][ T6111] tmpfs: Bad value for 'mpol' [ 53.212680][ T6120] kvm: emulating exchange as write [ 53.280326][ T6128] xt_CT: No such helper "netbios-ns" [ 53.516752][ T5752] Bluetooth: hci0: command tx timeout [ 53.521380][ T6137] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 53.541173][ T6137] cramfs: wrong magic [ 53.553809][ T6139] CIFS: Attempting to mount //127.0.0.1/share [ 53.568286][ T6139] CIFS: VFS: Error connecting to socket. Aborting operation. [ 53.570893][ T6139] CIFS: VFS: cifs_mount failed w/return code = -111 [ 53.573294][ T6140] CIFS: Attempting to mount //127.0.0.1/share [ 53.578982][ T6140] CIFS: VFS: Error connecting to socket. Aborting operation. [ 53.582185][ T6140] CIFS: VFS: cifs_mount failed w/return code = -111 [ 53.583193][ T6144] netlink: 'syz.0.80': attribute type 21 has an invalid length. [ 53.587705][ T6144] IPv6: NLM_F_CREATE should be specified when creating new route [ 53.590397][ T6144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.592924][ T6144] IPv6: NLM_F_CREATE should be set when creating new route [ 53.594119][ T6136] tipc: Enabling of bearer rejected, failed to enable media [ 53.595797][ T6144] IPv6: NLM_F_CREATE should be set when creating new route [ 53.595924][ T6144] IPv6: NLM_F_CREATE should be set when creating new route [ 53.610653][ T5507] tipc: Node number set to 2886997007 [ 53.614314][ T6136] IPv6: Can't replace route, no match found [ 53.663867][ T6148] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.074773][ T5752] Bluetooth: hci1: command tx timeout [ 54.156198][ C2] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 54.295152][ T40] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.465497][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 54.472658][ T40] usb 5-1: too many configurations: 42, using maximum allowed: 8 [ 54.478359][ T40] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 54.481477][ T40] usb 5-1: can't read configurations, error -61 [ 54.503288][ T6185] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 54.533057][ T6185] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 54.536548][ T6185] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 54.541472][ T6185] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 54.544614][ T6185] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 54.556432][ T6185] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 54.569412][ T5752] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 54.573968][ T5752] Bluetooth: hci2: Injecting HCI hardware error event [ 54.578880][ T5741] Bluetooth: hci2: hardware error 0x00 [ 54.608657][ T6185] pci 0000:00:01.0: Adding to iommu group 1 [ 54.614121][ T6185] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 54.616313][ T6185] pci 0000:00:01.0: vgaarb: bridge control possible [ 54.618398][ T6185] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 54.624923][ T40] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.627709][ T6185] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 54.640494][ T6185] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 54.653189][ T6185] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 54.698443][ T6185] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 54.700695][ T6185] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 54.705564][ T6185] [drm] features: -virgl +edid -resource_blob -host_visible [ 54.705576][ T6185] [drm] features: -context_init -blob_alignment [ 54.719959][ T6185] [drm] number of scanouts: 1 [ 54.721549][ T6185] [drm] number of cap sets: 0 [ 54.727861][ T6195] program syz.3.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.745905][ T6185] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 54.793667][ T6185] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 54.805006][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 54.808562][ T40] usb 5-1: too many configurations: 42, using maximum allowed: 8 [ 54.813123][ T40] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 54.816902][ T40] usb 5-1: can't read configurations, error -61 [ 54.820342][ T40] usb usb5-port1: attempt power cycle [ 55.104838][ T1047] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 55.126016][ T6205] smpboot: CPU 1 is now offline [ 55.147768][ T6205] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 55.165600][ T40] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 55.174436][ T6205] devtmpfs: Unknown parameter './config/usb_gadget/g1' [ 55.196806][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 55.200122][ T40] usb 5-1: too many configurations: 42, using maximum allowed: 8 [ 55.204244][ T40] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 55.207376][ T40] usb 5-1: can't read configurations, error -61 [ 55.265858][ T1047] usb 8-1: not running at top speed; connect to a high speed hub [ 55.269930][ T1047] usb 8-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.275672][ T1047] usb 8-1: config 1 interface 0 has no altsetting 0 [ 55.285926][ T1047] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.289068][ T1047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.292240][ T1047] usb 8-1: Product: syz [ 55.293925][ T1047] usb 8-1: Manufacturer: syz [ 55.296198][ T1047] usb 8-1: SerialNumber: syz [ 55.334833][ T40] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 55.352339][ T6213] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 55.356508][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 55.359288][ T40] usb 5-1: too many configurations: 42, using maximum allowed: 8 [ 55.364214][ T40] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 55.367515][ T40] usb 5-1: can't read configurations, error -61 [ 55.370371][ T40] usb usb5-port1: unable to enumerate USB device [ 55.398093][ T6213] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 55.401753][ T6213] overlayfs: failed to look up (tracing) for ino (-66) [ 55.515446][ T1047] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 55.524414][ T1047] usb 8-1: USB disconnect, device number 6 [ 55.604780][ T5752] Bluetooth: hci0: command tx timeout [ 56.288323][ T5507] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 56.447376][ T5507] usb 8-1: Using ep0 maxpacket: 8 [ 56.466438][ T5507] usb 8-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 16665, setting to 1024 [ 56.470684][ T5507] usb 8-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.476810][ T5507] usb 8-1: config 1 interface 0 has no altsetting 0 [ 56.481338][ T5507] usb 8-1: New USB device found, idVendor=056a, idProduct=009a, bcdDevice= 0.40 [ 56.485474][ T5507] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.488515][ T5507] usb 8-1: Product: syz [ 56.490263][ T5507] usb 8-1: Manufacturer: О [ 56.492106][ T5507] usb 8-1: SerialNumber: syz [ 56.556527][ T6226] bridge_slave_1: left allmulticast mode [ 56.558453][ T6226] bridge_slave_1: left promiscuous mode [ 56.562524][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.570160][ T6226] bridge_slave_0: left allmulticast mode [ 56.572042][ T6226] bridge_slave_0: left promiscuous mode [ 56.573917][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.619534][ T42] kauditd_printk_skb: 104 callbacks suppressed [ 56.619557][ T42] audit: type=1400 audit(1785731058.381:408): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 56.645844][ T5741] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 56.654004][ T42] audit: type=1400 audit(1785731058.411:409): avc: denied { write } for pid=6231 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.660010][ T42] audit: type=1400 audit(1785731058.421:410): avc: denied { read } for pid=6231 comm="syz.2.108" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.668595][ T42] audit: type=1400 audit(1785731058.421:411): avc: denied { open } for pid=6231 comm="syz.2.108" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.700396][ T42] audit: type=1400 audit(1785731058.461:412): avc: denied { append } for pid=6233 comm="syz.2.109" name="card2" dev="devtmpfs" ino=2877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 56.716437][ T6229] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 56.741644][ T6234] i2c i2c-0: delete_device: Can't find device in list [ 56.746815][ T5507] usbhid 8-1:1.0: can't add hid device: -71 [ 56.750491][ T5507] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 56.754157][ T5507] usb 8-1: USB disconnect, device number 7 [ 56.777535][ T42] audit: type=1400 audit(1785731058.541:413): avc: denied { create } for pid=6242 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.784282][ T42] audit: type=1400 audit(1785731058.541:414): avc: denied { bind } for pid=6242 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.790987][ T42] audit: type=1400 audit(1785731058.541:415): avc: denied { name_bind } for pid=6242 comm="syz.1.111" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 56.798402][ T42] audit: type=1400 audit(1785731058.541:416): avc: denied { node_bind } for pid=6242 comm="syz.1.111" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 56.808206][ T6243] netlink: 'syz.1.111': attribute type 2 has an invalid length. [ 56.810703][ T6243] __nla_validate_parse: 18 callbacks suppressed [ 56.810712][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 56.816426][ T42] audit: type=1400 audit(1785731058.581:417): avc: denied { allowed } for pid=6242 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.877829][ T6249] netlink: 'syz.1.111': attribute type 21 has an invalid length. [ 56.914033][ T6251] Invalid logical block size (8189) [ 57.204845][ T56] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 57.377175][ T56] usb 7-1: too many configurations: 222, using maximum allowed: 8 [ 57.380367][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'. [ 57.380509][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'. [ 57.383596][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'. [ 57.383702][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'. [ 57.385054][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 57.385076][ T6286] netlink: 'syz.0.126': attribute type 10 has an invalid length. [ 57.385098][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.126'. [ 57.389927][ T56] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.389946][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.389957][ T56] usb 7-1: Product: syz [ 57.389965][ T56] usb 7-1: Manufacturer: syz [ 57.389972][ T56] usb 7-1: SerialNumber: syz [ 57.403951][ T6286] geneve2: entered promiscuous mode [ 57.403991][ T6286] geneve2: entered allmulticast mode [ 57.444368][ T56] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 57.489597][ T6288] trusted_key: encrypted_key: insufficient parameters specified [ 57.555914][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 57.559732][ T6291] process 'syz.0.127' launched './file0' with NULL argv: empty string added [ 57.563068][ T6291] Invalid argument reading file caps for ./file0 [ 57.869845][ T5850] usb 7-1: USB disconnect, device number 3 [ 58.359752][ T6311] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 58.376990][ T6311] : entered promiscuous mode [ 58.379491][ T6311] sg_write: data in/out 63015/14 bytes for SCSI command 0xc-- guessing data in; [ 58.379491][ T6311] program syz.0.133 not setting count and/or reply_len properly [ 58.622607][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 58.643011][ T6325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11102 sclass=netlink_route_socket pid=6325 comm=syz.2.138 [ 58.716415][ T56] usb 7-1: Service connection timeout for: 256 [ 58.724772][ T56] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 58.735310][ T56] ath9k_htc: Failed to initialize the device [ 58.744341][ T5850] usb 7-1: ath9k_htc: USB layer deinitialized [ 58.775544][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 58.816663][ T6343] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 58.849659][ T6348] cifs: Unknown parameter 'gdd' [ 59.319717][ T6371] input: syz0 as /devices/virtual/input/input8 [ 59.524786][ T5507] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 59.694719][ T5507] usb 5-1: Using ep0 maxpacket: 8 [ 59.698027][ T5507] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.701162][ T5507] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.704231][ T5507] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.707556][ T5507] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.711542][ T5507] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.714343][ T5507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.939426][ T5507] usb 5-1: GET_CAPABILITIES returned 0 [ 59.941303][ T5507] usbtmc 5-1:16.0: can't read capabilities [ 60.143363][ T10] usb 5-1: USB disconnect, device number 7 [ 60.152266][ T6370] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 60.188605][ T5844] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.265915][ T5844] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.273070][ T5844] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.278935][ T5844] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.395151][ C2] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 60.414311][ T6402] kvm: pic: level sensitive irq not supported [ 60.470661][ T6419] "syz.2.161" (6419) uses obsolete ecb(arc4) skcipher [ 60.544851][ T1174] Bluetooth: hci4: Frame reassembly failed (-84) [ 60.696751][ T6450] netlink: 'syz.3.168': attribute type 8 has an invalid length. [ 60.727343][ T6455] loop4: detected capacity change from 0 to 7 [ 60.732300][ T6455] Dev loop4: unable to read RDB block 7 [ 60.734151][ T6455] loop4: AHDI p1 p2 p3 [ 60.735640][ T6455] loop4: partition table partially beyond EOD, truncated [ 60.737990][ T6455] loop4: p1 start 1601398130 is beyond EOD, truncated [ 60.740169][ T6455] loop4: p2 start 1702059890 is beyond EOD, truncated [ 60.866432][ C3] Unknown status report in ack skb [ 61.277414][ T6482] Config c/1 of g1 needs at least one function. [ 61.280197][ T6482] udc usbip-vudc.0: failed to start g1: -22 [ 61.283371][ T6482] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 61.291813][ T6482] UDC core: g1: couldn't find an available UDC or it's busy [ 61.327105][ T6484] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 61.379719][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 183 [ 61.379795][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 183 [ 61.382767][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 183 [ 61.385402][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 183 [ 61.388142][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 183 [ 61.391340][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 183 [ 61.393751][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 183 [ 61.396395][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 183 [ 61.399301][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 183 [ 61.402461][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 183 [ 61.524217][ T6511] bridge_slave_0: left allmulticast mode [ 61.529873][ T6511] bridge_slave_0: left promiscuous mode [ 61.531868][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.548218][ T6511] bridge_slave_1: left allmulticast mode [ 61.550166][ T6511] bridge_slave_1: left promiscuous mode [ 61.552083][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.565896][ T6511] bond0: (slave bond_slave_0): Releasing backup interface [ 61.574147][ T6511] bond0: (slave bond_slave_1): Releasing backup interface [ 61.584363][ T6511] team0: Port device team_slave_0 removed [ 61.589205][ T6511] team0: Port device team_slave_1 removed [ 61.591539][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.593874][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.598688][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.601142][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.604357][ T6511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.609955][ T6522] tc_dump_action: action bad kind [ 61.622674][ T6525] syzkaller0: entered promiscuous mode [ 61.624471][ T6525] syzkaller0: entered allmulticast mode [ 61.628038][ T6524] tipc: Started in network mode [ 61.629649][ T6524] tipc: Node identity a68cb3fd8516, cluster identity 4711 [ 61.634790][ T6524] tipc: Enabled bearer , priority 0 [ 61.650396][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 61.650417][ T42] audit: type=1400 audit(1785731319.412:497): avc: denied { map } for pid=6527 comm="syz.2.190" path="socket:[15591]" dev="sockfs" ino=15591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.660739][ T42] audit: type=1400 audit(1785731319.412:498): avc: denied { read } for pid=6527 comm="syz.2.190" path="socket:[15591]" dev="sockfs" ino=15591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.664835][ T6523] tipc: Resetting bearer [ 61.672705][ T42] audit: type=1400 audit(1785731319.432:499): avc: denied { create } for pid=6527 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 61.680900][ T42] audit: type=1400 audit(1785731319.432:500): avc: denied { create } for pid=6527 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 61.704772][ T6523] tipc: Disabling bearer [ 61.917485][ T6552] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 62.123233][ T42] audit: type=1400 audit(1785731319.882:501): avc: denied { getopt } for pid=6555 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.242151][ T42] audit: type=1400 audit(1785731320.002:502): avc: denied { mount } for pid=6558 comm="syz.3.198" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 62.255713][ T42] audit: type=1400 audit(1785731320.022:503): avc: denied { mount } for pid=6558 comm="syz.3.198" name="/" dev="rpc_pipefs" ino=15616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 62.275381][ T6559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 62.321178][ T42] audit: type=1400 audit(1785731320.082:504): avc: denied { mounton } for pid=6558 comm="syz.3.198" path="/50/nfsd" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 62.333301][ T42] audit: type=1400 audit(1785731320.092:505): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 62.345986][ T42] audit: type=1400 audit(1785731320.112:506): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 62.455657][ T6570] xt_hashlimit: size too large, truncated to 1048576 [ 62.557897][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 62.561876][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 62.570200][ T6570] netlink: 'syz.3.200': attribute type 10 has an invalid length. [ 62.573738][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.576455][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.595284][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.597813][ T6570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.600401][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.602830][ T6570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.607785][ T6570] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 62.615608][ T6570] bridge0: port 3(syz_tun) entered blocking state [ 62.619564][ T6570] bridge0: port 3(syz_tun) entered disabled state [ 62.626494][ T6570] syz_tun: entered allmulticast mode [ 62.640180][ T6570] syz_tun: entered promiscuous mode [ 62.642604][ T6570] bridge0: port 3(syz_tun) entered blocking state [ 62.645515][ T6570] bridge0: port 3(syz_tun) entered forwarding state [ 62.652746][ T6570] netlink: 'syz.3.200': attribute type 10 has an invalid length. [ 62.655545][ T6570] syz_tun: left allmulticast mode [ 62.657648][ T6570] bridge0: port 3(syz_tun) entered disabled state [ 62.699813][ T6585] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 62.703798][ T6585] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 62.708919][ T6585] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 62.725573][ T6587] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 62.731584][ T6587] NILFS (nbd2): device size too small [ 62.884884][ T5850] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.044758][ T5850] usb 6-1: Using ep0 maxpacket: 32 [ 63.048094][ T5850] usb 6-1: config 1 interface 0 altsetting 250 endpoint 0x2 has an invalid bInterval 112, changing to 10 [ 63.051625][ T5850] usb 6-1: config 1 interface 0 has no altsetting 0 [ 63.055975][ T5850] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.40 [ 63.059339][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.062543][ T5850] usb 6-1: Product: syz [ 63.064065][ T5850] usb 6-1: Manufacturer: syz [ 63.065870][ T5850] usb 6-1: SerialNumber: syz [ 63.277478][ T6580] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.280808][ T6580] SELinux: failed to load policy [ 63.291659][ T5850] usbhid 6-1:1.0: can't add hid device: -71 [ 63.293728][ T5850] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 63.298567][ T5850] usb 6-1: USB disconnect, device number 2 [ 63.679369][ T6603] __nla_validate_parse: 10 callbacks suppressed [ 63.679391][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'. [ 63.685842][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'. [ 63.739025][ T6612] openvswitch: netlink: IP tunnel TTL not specified. [ 63.795372][ T6617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6617 comm=syz.3.214 [ 63.800854][ T6617] netlink: 'syz.3.214': attribute type 49 has an invalid length. [ 63.810697][ T6617] bond0: (slave bond_slave_0): Releasing backup interface [ 63.891387][ T6617] bond_slave_0: entered promiscuous mode [ 63.893978][ T6617] bond_slave_0: entered allmulticast mode [ 64.001021][ T6633] netlink: 'syz.3.218': attribute type 13 has an invalid length. [ 64.147269][ T6642] capability: warning: `syz.3.219' uses deprecated v2 capabilities in a way that may be insecure [ 64.401133][ T6660] netlink: 'syz.3.223': attribute type 4 has an invalid length. [ 64.460487][ T6674] fuse: Bad value for 'group_id' [ 64.462908][ T6674] fuse: Bad value for 'group_id' [ 64.519798][ T6680] futex_wake_op: syz.2.229 tries to shift op by -1; fix this program [ 64.533273][ T6682] netlink: 'syz.1.230': attribute type 4 has an invalid length. [ 64.537132][ T6682] netlink: 152 bytes leftover after parsing attributes in process `syz.1.230'. [ 64.543808][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 64.543809][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 64.545221][ T6682] .`: renamed from bond0 (while UP) [ 64.974752][ T6678] ima: policy update failed [ 64.982770][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.237'. [ 65.131034][ T6724] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 65.663702][ T50] cfg80211: failed to load regulatory.db [ 65.873689][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 65.890095][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 65.931285][ T6746] No such timeout policy "syz1" [ 65.934228][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 65.949021][ T6750] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 65.993733][ T6754] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 65.999364][ T6754] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 66.002864][ T6754] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 66.008783][ T6754] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 66.095110][ T6760] loop4: detected capacity change from 0 to 7 [ 66.115560][ T6760] Dev loop4: unable to read RDB block 7 [ 66.117862][ T6760] loop4: unable to read partition table [ 66.120308][ T6760] loop4: partition table beyond EOD, truncated [ 66.122837][ T6760] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 66.144241][ T6760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6760 comm=syz.0.253 [ 66.145917][ T6771] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 66.149533][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 66.152774][ T6774] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 66.166981][ T6774] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 66.171152][ T6774] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 66.175200][ T6774] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 66.200560][ T6774] /dev/sr0: Can't open blockdev [ 66.209804][ T6771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.226385][ T6774] syzkaller1: entered promiscuous mode [ 66.228357][ T6774] syzkaller1: entered allmulticast mode [ 66.524885][ T50] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 66.698846][ T50] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 66.702618][ T50] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 66.709371][ T50] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 66.713209][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.716600][ T50] usb 5-1: Product: syz [ 66.718542][ T50] usb 5-1: Manufacturer: syz [ 66.720492][ T50] usb 5-1: SerialNumber: syz [ 66.725990][ T6791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.728978][ T6791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.734463][ T50] kl5kusb105 5-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 66.741916][ T50] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 66.940246][ T42] kauditd_printk_skb: 57 callbacks suppressed [ 66.940259][ T42] audit: type=1400 audit(1785731324.702:564): avc: denied { write } for pid=6790 comm="syz.0.260" name="/" dev="configfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.967337][ T10] usb 5-1: USB disconnect, device number 8 [ 66.967374][ T42] audit: type=1400 audit(1785731324.732:565): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 66.982670][ T10] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 66.993691][ T10] kl5kusb105 5-1:1.0: device disconnected [ 67.093455][ T42] audit: type=1400 audit(1785731324.852:566): avc: denied { ioctl } for pid=6813 comm="syz.0.267" path="socket:[14132]" dev="sockfs" ino=14132 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.157591][ T6816] syzkaller1: entered promiscuous mode [ 67.160012][ T6816] syzkaller1: entered allmulticast mode [ 67.174745][ T5845] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.271030][ T42] audit: type=1400 audit(1785731325.032:567): avc: denied { execute } for pid=6825 comm="syz.1.270" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 67.287341][ T6828] NILFS (nbd3): device size too small [ 67.325808][ T42] audit: type=1400 audit(1785731325.092:568): avc: denied { append } for pid=6837 comm="syz.0.272" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.348227][ T5845] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 67.351896][ T5845] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 67.356591][ T5845] usb 7-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 67.359719][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 67.362340][ T5845] usb 7-1: Product: syz [ 67.363858][ T5845] usb 7-1: Manufacturer: syz [ 67.369309][ T5845] usb 7-1: config 0 descriptor?? [ 67.411677][ T42] audit: type=1400 audit(1785731325.172:569): avc: denied { append } for pid=6841 comm="syz.0.274" name="usbmon3" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.455483][ T42] audit: type=1400 audit(1785731325.222:570): avc: denied { ioctl } for pid=6843 comm="syz.1.275" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 67.532132][ T42] audit: type=1400 audit(1785731325.292:571): avc: denied { mount } for pid=6852 comm="syz.1.277" name="/" dev="autofs" ino=15884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 67.573209][ T42] audit: type=1400 audit(1785731325.332:572): avc: denied { bind } for pid=6854 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.580535][ T5845] usb 7-1: USB disconnect, device number 4 [ 67.654595][ T6862] kernel profiling enabled (shift: 63) [ 67.657436][ T6862] profiling shift: 63 too large [ 67.721977][ T42] audit: type=1400 audit(1785731325.482:573): avc: denied { write } for pid=6865 comm="syz.0.283" name="/" dev="9p" ino=78395303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.974509][ T6870] bridge: RTM_NEWNEIGH with invalid ether address [ 67.991262][ T6873] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 67.999570][ T6873] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 68.002312][ T6873] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.007578][ T6873] vhci_hcd vhci_hcd.0: Device attached [ 68.019689][ T6873] syzkaller0: entered promiscuous mode [ 68.021457][ T6873] syzkaller0: entered allmulticast mode [ 68.093883][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.096659][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.253064][ T6898] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.266457][ T10] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 68.394825][ T848] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.524930][ T848] usb 7-1: device descriptor read/64, error -71 [ 68.564938][ T56] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 68.592141][ T6916] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 68.597339][ T6916] Error validating options; rc = [-22] [ 68.725721][ T56] usb 5-1: not running at top speed; connect to a high speed hub [ 68.729248][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.732525][ T56] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 68.737136][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.746651][ T56] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 68.750057][ T56] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 68.752576][ T56] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 68.756190][ T56] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 68.759043][ T56] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 68.764924][ T56] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 68.769241][ T56] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 68.772917][ T56] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 68.775142][ T848] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 68.777397][ T56] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 68.885891][ T6874] vhci_hcd: connection reset by peer [ 68.890925][ T13] vhci_hcd vhci_hcd.3: stop threads [ 68.893410][ T13] vhci_hcd vhci_hcd.3: release socket [ 68.896946][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 68.915647][ T848] usb 7-1: device descriptor read/64, error -71 [ 68.945244][ T5850] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 68.948411][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.955295][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.029160][ T848] usb usb7-port1: attempt power cycle [ 69.073525][ T56] usb 5-1: USB disconnect, device number 9 [ 69.085536][ T5850] usb 6-1: device descriptor read/64, error -71 [ 69.088184][ T56] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 69.094533][ T56] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 69.099442][ T56] keyspan 5-1:1.0: device disconnected [ 69.324850][ T5850] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 69.374757][ T848] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 69.395377][ T848] usb 7-1: device descriptor read/8, error -71 [ 69.455739][ T5850] usb 6-1: device descriptor read/64, error -71 [ 69.565028][ T5850] usb usb6-port1: attempt power cycle [ 69.654843][ T848] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 69.685553][ T6936] __nla_validate_parse: 4 callbacks suppressed [ 69.685573][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 69.686499][ T848] usb 7-1: device descriptor read/8, error -71 [ 69.687987][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.304'. [ 69.727096][ T6941] warning: `syz.0.306' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.797212][ T848] usb usb7-port1: unable to enumerate USB device [ 69.882262][ T6949] netlink: 144 bytes leftover after parsing attributes in process `syz.0.309'. [ 69.905155][ T5850] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 69.936229][ T5850] usb 6-1: device descriptor read/8, error -71 [ 69.988734][ T6955] binder: 6954:6955 ioctl c0306201 200000000480 returned -22 [ 70.170958][ T6965] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.175307][ T5850] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 70.205735][ T5850] usb 6-1: device descriptor read/8, error -71 [ 70.273161][ T6965] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.315013][ T5850] usb usb6-port1: unable to enumerate USB device [ 70.358624][ T6965] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.447124][ T6965] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.574831][ T5844] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.584819][ T5844] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.588187][ T5844] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.594777][ T5844] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.620842][ T6970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.317'. [ 70.624585][ T6971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.317'. [ 70.630209][ T6970] netlink: 52 bytes leftover after parsing attributes in process `syz.0.317'. [ 71.024769][ T848] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 71.040918][ T6990] syz.3.320 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.176549][ T848] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 71.181238][ T848] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 71.186599][ T848] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 71.188456][ T6994] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 71.190211][ T848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 71.197156][ T848] usb 5-1: Product: syz [ 71.198905][ T848] usb 5-1: Manufacturer: syz [ 71.204273][ T848] usb 5-1: config 0 descriptor?? [ 71.213918][ T6994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20496 sclass=netlink_route_socket pid=6994 comm=syz.2.321 [ 71.415752][ T848] usb 5-1: USB disconnect, device number 10 [ 71.605286][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 71.615479][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 71.625735][ T5844] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.629565][ T5844] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.632368][ T5844] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.635679][ T5844] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.695381][ T7021] fuse: Bad value for 'user_id' [ 71.697014][ T7021] fuse: Bad value for 'user_id' [ 71.791068][ T7023] netlink: 72 bytes leftover after parsing attributes in process `syz.1.330'. [ 71.805244][ T7023] input: syz0 as /devices/virtual/input/input9 [ 71.819945][ T7023] nicvf0: renamed from team0 (while UP) [ 71.825196][ T7023] nicvf0: Cannot enslave team device to itself [ 71.827289][ T7023] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 71.871095][ T7029] netlink: 6060 bytes leftover after parsing attributes in process `syz.1.331'. [ 71.957653][ T7037] openvswitch: netlink: VXLAN extension 19 out of range max 1 [ 71.960820][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 71.960830][ T42] audit: type=1400 audit(1785731329.722:594): avc: denied { remount } for pid=7036 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.085142][ T7042] netlink: 'syz.3.335': attribute type 1 has an invalid length. [ 72.104111][ T7042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.111449][ T7042] syz_tun: left promiscuous mode [ 72.134029][ T7042] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 72.141140][ T7042] netlink: 'syz.3.335': attribute type 14 has an invalid length. [ 72.375962][ T103] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 72.381397][ T7056] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 72.555057][ C2] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 72.563979][ T7064] sctp: [Deprecated]: syz.3.342 (pid 7064) Use of int in maxseg socket option. [ 72.563979][ T7064] Use struct sctp_assoc_value instead [ 72.610809][ T42] audit: type=1400 audit(1785731330.372:595): avc: denied { read } for pid=7065 comm="syz.3.343" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.618522][ T42] audit: type=1400 audit(1785731330.372:596): avc: denied { open } for pid=7065 comm="syz.3.343" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.627343][ T42] audit: type=1400 audit(1785731330.372:597): avc: denied { ioctl } for pid=7065 comm="syz.3.343" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.865004][ T7082] xt_hashlimit: max too large, truncated to 1048576 [ 72.868380][ T7082] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 72.874210][ T7082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7082 comm=syz.2.348 [ 72.987617][ T42] audit: type=1400 audit(1785731330.752:598): avc: denied { create } for pid=7083 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 73.040585][ T42] audit: type=1400 audit(1785731330.802:599): avc: denied { bind } for pid=7083 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.092519][ T42] audit: type=1400 audit(1785731330.852:600): avc: denied { write } for pid=7083 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 73.100339][ T42] audit: type=1400 audit(1785731330.852:601): avc: denied { setattr } for pid=7083 comm="syz.3.349" name="MCTP" dev="sockfs" ino=16213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 73.260217][ T42] audit: type=1800 audit(1785731331.022:602): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.354" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 73.268009][ T42] audit: type=1400 audit(1785731331.032:603): avc: denied { connect } for pid=7109 comm="syz.2.354" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.303565][ T7112] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 73.356770][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 73.750410][ T7148] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 74.049537][ T7161] Bluetooth: MGMT ver 1.23 [ 74.797090][ T7220] hpfs: hpfs_map_sector(): read error [ 74.814607][ T7220] input: syz0 as /devices/virtual/input/input11 [ 75.036752][ T7249] netlink: 'syz.1.392': attribute type 2 has an invalid length. [ 75.039181][ T7249] __nla_validate_parse: 4 callbacks suppressed [ 75.039191][ T7249] netlink: 232 bytes leftover after parsing attributes in process `syz.1.392'. [ 75.077425][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.080039][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.083472][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.086806][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.089412][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.091778][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.093621][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.095588][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.099170][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.101939][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.104418][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.107230][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.109888][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.112507][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.119909][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.122627][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.125361][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.128061][ T7252] 9p: Unknown uid 00000000004294967295 [ 75.169727][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 75.174113][ T7258] openvswitch: netlink: EtherType 0 is less than min 600 [ 75.410943][ T7282] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.414497][ T7282] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 75.459544][ T7282] geneve2: left promiscuous mode [ 75.463511][ T7282] 8021q: adding VLAN 0 to HW filter on device eth0 [ 75.474889][ T7283] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 75.477427][ T7282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 75.492783][ T7282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 75.497009][ T7282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 75.697175][ T7303] nbd: must specify an index to disconnect [ 75.987601][ T1496] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 76.026551][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 76.030291][ T7316] hsr_slave_0: left promiscuous mode [ 76.033468][ T7316] hsr_slave_1: left promiscuous mode [ 76.114841][ T1496] usb 5-1: device descriptor read/64, error -71 [ 76.212192][ T7320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.414'. [ 76.354780][ T1496] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 76.484807][ T1496] usb 5-1: device descriptor read/64, error -71 [ 76.595198][ T1496] usb usb5-port1: attempt power cycle [ 76.960133][ T1496] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 76.975312][ T1496] usb 5-1: device descriptor read/8, error -71 [ 77.172943][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 77.172961][ T42] audit: type=1400 audit(1785731334.932:658): avc: denied { write } for pid=7352 comm="syz.1.421" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.214864][ T1496] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 77.235787][ T7353] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.237017][ T1496] usb 5-1: device descriptor read/8, error -71 [ 77.322415][ T42] audit: type=1400 audit(1785731335.082:659): avc: denied { map } for pid=7362 comm="syz.1.424" path="/dev/vbi7" dev="devtmpfs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.347041][ T42] audit: type=1400 audit(1785731335.112:660): avc: denied { setopt } for pid=7354 comm="syz.3.422" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.356952][ T1496] usb usb5-port1: unable to enumerate USB device [ 77.435690][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.427'. [ 77.441578][ T42] audit: type=1400 audit(1785731335.202:661): avc: denied { read } for pid=7369 comm="syz.1.426" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.456715][ T42] audit: type=1400 audit(1785731335.222:662): avc: denied { write } for pid=7369 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.460371][ T7372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7372 comm=syz.3.427 [ 77.473650][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.427'. [ 77.500825][ T42] audit: type=1400 audit(1785731335.262:663): avc: denied { bpf } for pid=7369 comm="syz.1.426" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.511259][ T42] audit: type=1400 audit(1785731335.272:664): avc: denied { module_request } for pid=7369 comm="syz.1.426" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.535949][ T7391] erofs (device loop2): cannot find valid erofs superblock [ 77.576843][ T42] audit: type=1400 audit(1785731335.342:665): avc: denied { read } for pid=7394 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.644865][ T7406] WARNING! power/level is deprecated; use power/control instead [ 77.650904][ T42] audit: type=1400 audit(1785731335.412:666): avc: denied { perfmon } for pid=7405 comm="syz.2.434" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.661561][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 77.683322][ T7406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.699319][ T7411] netlink: 45 bytes leftover after parsing attributes in process `syz.3.436'. [ 77.710691][ T7406] bond1: (slave veth3): Enslaving as an active interface with an up link [ 77.720391][ T7406] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 77.750165][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'. [ 77.753822][ T7415] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 77.809892][ T42] audit: type=1400 audit(1785731335.572:667): avc: denied { name_connect } for pid=7418 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 77.856826][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 78.059345][ T7434] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 78.065374][ T5845] e1000 0000:00:06.0 eth0: Reset adapter [ 78.163700][ T7434] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 78.345118][ T5845] e1000 0000:00:06.0 eth0: Reset adapter [ 78.475717][ T5845] e1000 0000:00:06.0 eth0: Reset adapter [ 78.658573][ T5894] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 78.699060][ T7467] kvm: kvm [7466]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 78.703441][ T7467] kvm: kvm [7466]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 78.855960][ T7486] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 78.859976][ T7486] nbd: error processing sock list [ 80.635971][ T5845] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 83.961507][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 83.961526][ T42] audit: type=1400 audit(1785731341.722:686): avc: denied { write } for pid=7499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.015356][ T42] audit: type=1400 audit(1785731341.782:687): avc: denied { write } for pid=7502 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.213506][ T42] audit: type=1400 audit(1785731343.972:688): avc: denied { write } for pid=7506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.250980][ T42] audit: type=1400 audit(1785731344.012:689): avc: denied { write } for pid=7509 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.699763][ T42] audit: type=1400 audit(1785731348.462:690): avc: denied { write } for pid=7518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.740262][ T42] audit: type=1400 audit(1785731348.502:691): avc: denied { write } for pid=7521 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.781977][ T42] audit: type=1400 audit(1785731349.542:692): avc: denied { ioctl } for pid=7531 comm="syz.3.455" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.820256][ T7539] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 91.827857][ T7539] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 91.849284][ T42] audit: type=1400 audit(1785731349.612:693): avc: denied { getopt } for pid=7546 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.887771][ T7553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7553 comm=syz.0.459 [ 91.890069][ T7554] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 91.892679][ T7556] __nla_validate_parse: 2 callbacks suppressed [ 91.892694][ T7556] netlink: 7 bytes leftover after parsing attributes in process `syz.3.460'. [ 91.894454][ T7553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7553 comm=syz.0.459 [ 91.898299][ T7554] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 91.903819][ T7560] gfs2: gfs2 mount does not exist [ 91.910400][ T7560] gfs2: gfs2 mount does not exist [ 91.912327][ T7560] gfs2: gfs2 mount does not exist [ 91.914156][ T7560] gfs2: gfs2 mount does not exist [ 91.916160][ T7560] gfs2: gfs2 mount does not exist [ 91.917956][ T7560] gfs2: gfs2 mount does not exist [ 91.919801][ T7560] gfs2: gfs2 mount does not exist [ 91.921973][ T7560] gfs2: gfs2 mount does not exist [ 91.923705][ T7560] gfs2: gfs2 mount does not exist [ 91.925503][ T7560] gfs2: gfs2 mount does not exist [ 91.927176][ T7560] gfs2: gfs2 mount does not exist [ 91.929083][ T7560] gfs2: gfs2 mount does not exist [ 91.930825][ T7560] gfs2: gfs2 mount does not exist [ 91.932633][ T7560] gfs2: gfs2 mount does not exist [ 91.934331][ T7560] gfs2: gfs2 mount does not exist [ 91.936997][ T7560] gfs2: gfs2 mount does not exist [ 91.938921][ T7560] gfs2: gfs2 mount does not exist [ 91.940889][ T7560] gfs2: gfs2 mount does not exist [ 91.942600][ T7560] gfs2: gfs2 mount does not exist [ 91.944401][ T7560] gfs2: gfs2 mount does not exist [ 91.946649][ T7560] gfs2: gfs2 mount does not exist [ 91.948392][ T7560] gfs2: gfs2 mount does not exist [ 91.950025][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 91.950286][ T7560] gfs2: gfs2 mount does not exist [ 91.954596][ T7560] gfs2: gfs2 mount does not exist [ 91.956397][ T7560] gfs2: gfs2 mount does not exist [ 91.957342][ T7556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7556 comm=syz.3.460 [ 91.958098][ T7560] gfs2: gfs2 mount does not exist [ 92.980080][ T7600] misc userio: The device must be registered before sending interrupts [ 92.983638][ T42] audit: type=1400 audit(1785731350.742:694): avc: denied { write } for pid=7599 comm="syz.2.471" lport=34451 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 92.987201][ T42] audit: type=1400 audit(1785731350.742:695): avc: denied { setopt } for pid=7599 comm="syz.2.471" lport=34451 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 92.994016][ T7600] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.469'. [ 93.002731][ T7600] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.469'. [ 93.035750][ T41] rpcbind: server 127.0.0.1 not responding, timed out [ 93.041251][ T42] audit: type=1400 audit(1785731350.802:696): avc: denied { ioctl } for pid=7601 comm="syz.3.472" path="socket:[19815]" dev="sockfs" ino=19815 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 93.043980][ T7613] program syz.3.472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.063068][ T7617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7617 comm=syz.2.475 [ 93.068223][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'. [ 93.159494][ T7627] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 93.203610][ T7633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.480'. [ 93.273773][ T7643] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 93.315694][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.318504][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.369619][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.375477][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.488210][ T7643] geneve2: left allmulticast mode [ 93.515439][ T5816] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.522288][ T5816] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.528483][ T5816] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.534040][ T5816] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.567410][ T7661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.490'. [ 93.571256][ T7661] block nbd0: not configured, cannot reconfigure [ 93.737334][ T1166] Bluetooth: hci4: Frame reassembly failed (-84) [ 93.867333][ T7693] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 94.016012][ T7701] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 94.103382][ T7708] netlink: 44 bytes leftover after parsing attributes in process `syz.3.501'. [ 94.233506][ T42] audit: type=1400 audit(1785731351.992:697): avc: denied { wake_alarm } for pid=7713 comm="syz.0.504" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.256572][ T7716] can: request_module (can-proto-4) failed. [ 94.310767][ T42] audit: type=1400 audit(1785731352.072:698): avc: denied { write } for pid=7722 comm="syz.0.507" path="socket:[19325]" dev="sockfs" ino=19325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.363914][ T42] audit: type=1400 audit(1785731352.122:699): avc: denied { remount } for pid=7728 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 94.363929][ T7729] tracefs: Unknown parameter 'moda)qe' [ 94.435953][ T56] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 94.449533][ T7731] Mass Storage Function, version: 2009/09/11 [ 94.453221][ T7731] LUN: removable file: (no medium) [ 94.461353][ T7731] [ 94.462441][ T7731] ====================================================== [ 94.465349][ T7731] WARNING: possible circular locking dependency detected [ 94.467701][ T7731] syzkaller #0 Tainted: G S L [ 94.470234][ T7731] ------------------------------------------------------ [ 94.472590][ T7731] syz.2.511/7731 is trying to acquire lock: [ 94.474437][ T7731] ffff88802d37dd40 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 94.477842][ T7731] [ 94.477842][ T7731] but task is already holding lock: [ 94.480117][ T7731] ffff888056e81920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 94.483093][ T7731] [ 94.483093][ T7731] which lock already depends on the new lock. [ 94.483093][ T7731] [ 94.486073][ T7731] [ 94.486073][ T7731] the existing dependency chain (in reverse order) is: [ 94.488701][ T7731] [ 94.488701][ T7731] -> #3 (&common->filesem){++++}-{4:4}: [ 94.491065][ T7731] lock_acquire+0x1b9/0x370 [ 94.492653][ T7731] down_read+0x99/0x4c0 [ 94.494128][ T7731] fsg_show_file+0x20/0x180 [ 94.495630][ T7731] configfs_read_iter+0x426/0x6f0 [ 94.497256][ T7731] __kernel_read+0x397/0xad0 [ 94.498859][ T7731] integrity_kernel_read+0x7e/0xb0 [ 94.500644][ T7731] ima_calc_file_hash_tfm+0x25e/0x350 [ 94.502521][ T7731] ima_calc_file_hash+0x1e3/0x380 [ 94.504244][ T7731] ima_collect_measurement+0x94f/0xb30 [ 94.506118][ T7731] process_measurement+0xdfe/0x2350 [ 94.507905][ T7731] ima_file_check+0xc3/0x110 [ 94.509526][ T7731] security_file_post_open+0xc4/0x210 [ 94.511389][ T7731] path_openat+0x985/0x4280 [ 94.513077][ T7731] do_file_open+0x20e/0x430 [ 94.514677][ T7731] do_sys_openat2+0x10f/0x1e0 [ 94.516424][ T7731] __x64_sys_openat+0x12d/0x210 [ 94.518130][ T7731] do_syscall_64+0x115/0x870 [ 94.519739][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.521895][ T7731] [ 94.521895][ T7731] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 94.524270][ T7731] lock_acquire+0x1b9/0x370 [ 94.525847][ T7731] down_read+0x99/0x4c0 [ 94.527314][ T7731] configfs_write_iter+0x218/0x4e0 [ 94.529068][ T7731] vfs_write+0x6ac/0x1050 [ 94.530608][ T7731] ksys_write+0x12a/0x250 [ 94.532158][ T7731] do_syscall_64+0x115/0x870 [ 94.533778][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.535784][ T7731] [ 94.535784][ T7731] -> #1 (&buffer->mutex){+.+.}-{4:4}: [ 94.538122][ T7731] lock_acquire+0x1b9/0x370 [ 94.539725][ T7731] __mutex_lock+0x1a4/0x1bd0 [ 94.541341][ T7731] configfs_read_iter+0x79/0x6f0 [ 94.543056][ T7731] __kernel_read+0x397/0xad0 [ 94.544653][ T7731] integrity_kernel_read+0x7e/0xb0 [ 94.546398][ T7731] ima_calc_file_hash_tfm+0x25e/0x350 [ 94.548246][ T7731] ima_calc_file_hash+0x1e3/0x380 [ 94.550008][ T7731] ima_collect_measurement+0x94f/0xb30 [ 94.552398][ T7731] process_measurement+0xdfe/0x2350 [ 94.554452][ T7731] ima_file_check+0xc3/0x110 [ 94.556073][ T7731] security_file_post_open+0xc4/0x210 [ 94.558062][ T7731] path_openat+0x985/0x4280 [ 94.559661][ T7731] do_file_open+0x20e/0x430 [ 94.561265][ T7731] do_sys_openat2+0x10f/0x1e0 [ 94.563024][ T7731] __x64_sys_openat+0x12d/0x210 [ 94.564733][ T7731] do_syscall_64+0x115/0x870 [ 94.566262][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.568261][ T7731] [ 94.568261][ T7731] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 94.571305][ T7731] check_prev_add+0xeb/0xe60 [ 94.573372][ T7731] __lock_acquire+0x136c/0x1a40 [ 94.575617][ T7731] lock_acquire+0x1b9/0x370 [ 94.577729][ T7731] __mutex_lock+0x1a4/0x1bd0 [ 94.579457][ T7731] process_measurement+0x5ab/0x2350 [ 94.581578][ T7731] ima_file_check+0xc3/0x110 [ 94.583555][ T7731] security_file_post_open+0xc4/0x210 [ 94.585602][ T7731] path_openat+0x985/0x4280 [ 94.587180][ T7731] do_file_open+0x20e/0x430 [ 94.588919][ T7731] file_open_name+0x1c3/0x3e0 [ 94.591078][ T7731] filp_open+0x2e/0x50 [ 94.592643][ T7731] fsg_lun_open+0x6b/0x7b0 [ 94.594196][ T7731] fsg_store_file+0x1e7/0x450 [ 94.595814][ T7731] configfs_write_iter+0x302/0x4e0 [ 94.597551][ T7731] vfs_write+0x6ac/0x1050 [ 94.599077][ T7731] ksys_write+0x12a/0x250 [ 94.600624][ T7731] do_syscall_64+0x115/0x870 [ 94.602484][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.604486][ T7731] [ 94.604486][ T7731] other info that might help us debug this: [ 94.604486][ T7731] [ 94.607599][ T7731] Chain exists of: [ 94.607599][ T7731] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &common->filesem [ 94.607599][ T7731] [ 94.611848][ T7731] Possible unsafe locking scenario: [ 94.611848][ T7731] [ 94.614189][ T7731] CPU0 CPU1 [ 94.615832][ T7731] ---- ---- [ 94.617502][ T7731] lock(&common->filesem); [ 94.618928][ T7731] lock(&p->frag_sem); [ 94.621026][ T7731] lock(&common->filesem); [ 94.623219][ T7731] lock(&ima_iint_mutex_key[depth]); [ 94.625134][ T7731] [ 94.625134][ T7731] *** DEADLOCK *** [ 94.625134][ T7731] [ 94.627647][ T7731] 5 locks held by syz.2.511/7731: [ 94.629210][ T7731] #0: ffff888027819b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 94.632064][ T7731] #1: ffff888024458450 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 94.634925][ T7731] #2: ffff88803df75280 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 94.637926][ T7731] #3: ffff8880228ffe70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 94.640858][ T7731] #4: ffff888056e81920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 94.643875][ T7731] [ 94.643875][ T7731] stack backtrace: [ 94.645728][ T7731] CPU: 3 UID: 0 PID: 7731 Comm: syz.2.511 Tainted: G S L syzkaller #0 PREEMPT(full) [ 94.645749][ T7731] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 94.645755][ T7731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.645770][ T7731] Call Trace: [ 94.645775][ T7731] [ 94.645780][ T7731] dump_stack_lvl+0x100/0x190 [ 94.645811][ T7731] print_circular_bug.cold+0x178/0x1c7 [ 94.645832][ T7731] check_noncircular+0x146/0x160 [ 94.645846][ T7731] ? arch_stack_walk+0xa6/0xf0 [ 94.645872][ T7731] check_prev_add+0xeb/0xe60 [ 94.645904][ T7731] ? stack_trace_save+0x8e/0xc0 [ 94.645925][ T7731] __lock_acquire+0x136c/0x1a40 [ 94.645941][ T7731] lock_acquire+0x1b9/0x370 [ 94.645956][ T7731] ? process_measurement+0x5ab/0x2350 [ 94.645969][ T7731] ? __pfx___might_resched+0x10/0x10 [ 94.645991][ T7731] __mutex_lock+0x1a4/0x1bd0 [ 94.646006][ T7731] ? process_measurement+0x5ab/0x2350 [ 94.646017][ T7731] ? process_measurement+0x5ab/0x2350 [ 94.646028][ T7731] ? __pfx___mutex_lock+0x10/0x10 [ 94.646042][ T7731] ? __pfx___might_resched+0x10/0x10 [ 94.646058][ T7731] ? down_write+0x146/0x1f0 [ 94.646076][ T7731] ? process_measurement+0x5ab/0x2350 [ 94.646088][ T7731] process_measurement+0x5ab/0x2350 [ 94.646101][ T7731] ? __pfx_process_measurement+0x10/0x10 [ 94.646113][ T7731] ? do_raw_spin_unlock+0x145/0x1e0 [ 94.646130][ T7731] ? _raw_spin_unlock+0x28/0x50 [ 94.646145][ T7731] ? do_raw_spin_lock+0x128/0x260 [ 94.646165][ T7731] ? __pfx_v9fs_file_open+0x10/0x10 [ 94.646186][ T7731] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 94.646201][ T7731] ima_file_check+0xc3/0x110 [ 94.646213][ T7731] ? __pfx_ima_file_check+0x10/0x10 [ 94.646229][ T7731] security_file_post_open+0xc4/0x210 [ 94.646247][ T7731] path_openat+0x985/0x4280 [ 94.646262][ T7731] ? __pfx_path_openat+0x10/0x10 [ 94.646275][ T7731] ? kasan_save_stack+0x30/0x50 [ 94.646294][ T7731] ? kasan_save_track+0x14/0x30 [ 94.646306][ T7731] ? __kasan_slab_alloc+0x89/0x90 [ 94.646319][ T7731] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 94.646337][ T7731] ? do_getname_kernel+0x5d/0x250 [ 94.646351][ T7731] ? filp_open+0x1d/0x50 [ 94.646365][ T7731] ? fsg_lun_open+0x6b/0x7b0 [ 94.646378][ T7731] ? fsg_store_file+0x1e7/0x450 [ 94.646392][ T7731] do_file_open+0x20e/0x430 [ 94.646404][ T7731] ? __pfx_do_file_open+0x10/0x10 [ 94.646422][ T7731] ? rcu_is_watching+0x12/0xc0 [ 94.646440][ T7731] file_open_name+0x1c3/0x3e0 [ 94.646453][ T7731] ? __pfx_file_open_name+0x10/0x10 [ 94.646466][ T7731] ? do_getname_kernel+0x5d/0x250 [ 94.646479][ T7731] ? __asan_memcpy+0x3c/0x60 [ 94.646490][ T7731] ? do_getname_kernel+0x1be/0x250 [ 94.646505][ T7731] filp_open+0x2e/0x50 [ 94.646521][ T7731] fsg_lun_open+0x6b/0x7b0 [ 94.646535][ T7731] ? __pfx_down_read+0x10/0x10 [ 94.646550][ T7731] fsg_store_file+0x1e7/0x450 [ 94.646563][ T7731] configfs_write_iter+0x302/0x4e0 [ 94.646577][ T7731] vfs_write+0x6ac/0x1050 [ 94.646593][ T7731] ? __pfx_configfs_write_iter+0x10/0x10 [ 94.646606][ T7731] ? __pfx_vfs_write+0x10/0x10 [ 94.646625][ T7731] ksys_write+0x12a/0x250 [ 94.646640][ T7731] ? __pfx_ksys_write+0x10/0x10 [ 94.646659][ T7731] do_syscall_64+0x115/0x870 [ 94.646671][ T7731] ? clear_bhb_loop+0x40/0x90 [ 94.646684][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.646695][ T7731] RIP: 0033:0x7ff82e39e019 [ 94.646706][ T7731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.646719][ T7731] RSP: 002b:00007ff82f34a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.646738][ T7731] RAX: ffffffffffffffda RBX: 00007ff82e625fa0 RCX: 00007ff82e39e019 [ 94.646746][ T7731] RDX: 0000000000000005 RSI: 0000200000000380 RDI: 0000000000000004 [ 94.646753][ T7731] RBP: 00007ff82e43500c R08: 0000000000000000 R09: 0000000000000000 [ 94.646760][ T7731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.646767][ T7731] R13: 00007ff82e626038 R14: 00007ff82e625fa0 R15: 00007ffdb05e3df8 [ 94.646780][ T7731] [ 94.781851][ T7731] mass_storage.0/lun.0: file too small: file0 [ 94.834752][ T1047] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 94.856111][ T56] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 94.859499][ T56] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 94.863426][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.868033][ T56] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 94.871758][ T56] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 94.875219][ T56] usb 8-1: Product: syz [ 94.876954][ T56] usb 8-1: Manufacturer: syz [ 94.878949][ T56] usb 8-1: SerialNumber: syz [ 94.882808][ T56] usb 8-1: config 0 descriptor?? [ 94.886130][ T56] hub 8-1:0.0: bad descriptor, ignoring hub [ 94.887999][ T56] hub 8-1:0.0: probe with driver hub failed with error -5 [ 94.891197][ T56] usb 8-1: selecting invalid altsetting 0 [ 94.984738][ T1047] usb 5-1: Using ep0 maxpacket: 16 [ 94.989005][ T1047] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 94.991977][ T1047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.994504][ T1047] usb 5-1: Product: syz [ 94.995952][ T1047] usb 5-1: Manufacturer: syz [ 94.997567][ T1047] usb 5-1: SerialNumber: syz [ 95.000221][ T1047] usb 5-1: config 0 descriptor?? [ 95.224867][ T40] usb 8-1: USB disconnect, device number 8 [ 95.404453][ T1047] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 95.409714][ T1047] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.414400][ T1047] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 95.417821][ T1047] usb 5-1: media controller created [ 95.424241][ T1047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.616035][ T1047] zl10353_read_register: readreg error (reg=127, ret==0) [ 95.618322][ T1047] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 95.620878][ T1047] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 95.651962][ T5816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.655894][ T5816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.729933][ T5816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.734392][ T5816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.754776][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 95.754981][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 95.788445][ T5816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.791880][ T5816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.877576][ T5816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.881018][ T5816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.986629][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 95.986646][ T42] audit: type=1326 audit(1785731353.752:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.0.512" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f019639e019 code=0x0 [ 96.040938][ T5816] bond0 (unregistering): Released all slaves [ 96.046211][ T5816] bond1 (unregistering): (slave veth3): Releasing backup interface [ 96.050102][ T5816] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 96.053294][ T5816] bond1 (unregistering): Released all slaves [ 96.057523][ T5816] bond2 (unregistering): Released all slaves [ 96.109289][ T42] audit: type=1400 audit(1785731353.872:710): avc: denied { write } for pid=7742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.144459][ T42] audit: type=1400 audit(1785731353.902:711): avc: denied { write } for pid=7745 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.166140][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 96.222379][ T42] audit: type=1400 audit(1785731353.982:712): avc: denied { write } for pid=7748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.256859][ T42] audit: type=1400 audit(1785731354.022:713): avc: denied { write } for pid=7751 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.285264][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 96.334603][ T42] audit: type=1400 audit(1785731354.092:714): avc: denied { write } for pid=7754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.371664][ T42] audit: type=1400 audit(1785731354.132:715): avc: denied { write } for pid=7757 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.414510][ T5816] hsr_slave_0: left promiscuous mode [ 96.421360][ T5816] hsr_slave_1: left promiscuous mode [ 96.426169][ T5816] veth1_macvtap: left promiscuous mode [ 96.428396][ T5816] veth0_macvtap: left promiscuous mode [ 96.430673][ T5816] veth1_vlan: left promiscuous mode [ 96.432839][ T5816] veth0_vlan: left promiscuous mode [ 96.566372][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 96.615881][ T42] audit: type=1400 audit(1785731354.382:716): avc: denied { write } for pid=7760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.651470][ T42] audit: type=1400 audit(1785731354.412:717): avc: denied { write } for pid=7763 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.680806][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 96.874953][ C2] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 97.425706][ T50] usb 5-1: USB disconnect, device number 15 [ 97.441097][ T50] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.