last executing test programs: 35.100803113s ago: executing program 0 (id=874): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffd, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="139b8d6a603e", 'team0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xfff, 0xf9, 0x0, 0x4e}, {0x0, 0x8, 0x3, 0x2}, {0xe1d, 0x2, 0xf, 0x3}, {0x3, 0x0, 0x9, 0x9}]}) 34.950805939s ago: executing program 0 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'pcl726\x00', [0x144, 0x3, 0xd, 0x2, 0x4, 0x8, 0x8002, 0x2, 0x5, 0xc72d, 0x4, 0x9, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x101, 0x9, 0x6, 0x8, 0x8, 0x3, 0x5, 0x9, 0x40ffd, 0x8000fffd, 0xaf, 0x0, 0x283, 0x80000000, 0x4]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) 34.9007451s ago: executing program 0 (id=876): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000ffffff8500000000000000811010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 34.900398631s ago: executing program 0 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) syz_open_dev$dri(&(0x7f0000002580), 0x200, 0xa0800) (async) r2 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0xa0800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000200)={0x0, 0xffffffffffffff1e, r3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa7e9, 0x0, 0x7, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}}) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x4, 0x2d}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x4, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'nq\x00', 0x3a, 0x5, 0x54}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'nq\x00', 0x3a, 0x5, 0x54}, 0x2c) read$FUSE(r5, &(0x7f0000003f80)={0x2020}, 0x2020) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) (async) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r8, @ANYBLOB="08000b00e4a2000008000200ac"], 0x54}}, 0x4000000) 34.680768924s ago: executing program 0 (id=878): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00') write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66e11c760100010002000000b3f2000000100600", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0500000000000000000000f2ffffff00"/28], 0x50) setsockopt$inet6_int(r0, 0x29, 0xc7, &(0x7f0000000180)=0x90000000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) socket$nl_netfilter(0x10, 0x3, 0xc) 33.86576586s ago: executing program 0 (id=889): r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/162) 33.727315647s ago: executing program 32 (id=889): r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/162) 11.120580694s ago: executing program 4 (id=1082): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x2, 0xfffffffe, {{0x1e, 0x4, 0x1, 0x37, 0x78, 0x64, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x14, 0x35, 0x0, 0x6, [0x68b, 0x10e0000, 0x3, 0x0]}, @timestamp={0x44, 0xc, 0xd, 0x0, 0x9, [0x9, 0xfffffffc]}, @timestamp_addr={0x44, 0x44, 0xf0, 0x1, 0x5, [{@remote, 0xa5f}, {@rand_addr=0x64010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8}, {@rand_addr=0x64010102, 0x2}, {@empty, 0x2}, {@loopback, 0x80}]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000480)={'sit0\x00', r9, 0x0, 0x700, 0x4, 0x4, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x67, 0x0, 0x10, 0x2f, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x10, 0x74, 0x0, 0xd, [0xd5, 0x8001, 0x3]}]}}}}}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000140)=0x15) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r6, 0x0, 0x7151, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={[&(0x7f0000000040)='/%{\xf3\x00', &(0x7f00000000c0)='system_u:object_r:hugetlbfs_t:s0\x00', &(0x7f0000000140)='system_u:object_r:hugetlbfs_t:s0\x00']}, &(0x7f00000002c0)={[&(0x7f00000001c0)='@%/[\'.@\x00', &(0x7f0000000200)='+/\x00', &(0x7f0000000240)='/proc/thread-self/attr/sockcreate\x00', &(0x7f0000000280)='/proc/thread-self/attr/sockcreate\x00']}) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 10.250607044s ago: executing program 4 (id=1090): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$pptp(0x18, 0x1, 0x2) getpeername(r1, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000004c0)={0x4, &(0x7f0000000240)=[{@fixed}, {@fixed}, {@none}, {}]}) 10.248091603s ago: executing program 4 (id=1092): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000240)={&(0x7f0000000200)=""/29, 0x1d, 0x4, 0x4}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c0084773490876633582d524b9b5f984084489cc8cd264819a60065004b21b893390a8d2a5100d219b97af932a6494b2c57316aabca77b94a6310a78b6b1103f97f7447193657166bacaee006e25729bdc85f2d10386ff87acf65b4c929ccb89f71de016e6d432da826c1c36fbd5244c9472c840053052e1c941ed6e20ba5ff99490125f0846a000000803819a24b32894b7b96879e8248fb62d44ae6fc46bc9610bbb7ebec6d44c45beb5b816b513ecb270f8dc469dbab3686b6335b"]) 9.320808377s ago: executing program 4 (id=1094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001e00010a00f102abda73bbffffffffffff06000000"], 0x14}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0x146) close(r2) r3 = socket(0x200000000000011, 0x2, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x4af, 0x400000, 0x0, 0x0, 0x0, 0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x44041}, 0x0) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r9, &(0x7f0000000800)='file *evio.c +', 0xe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) recvmsg$kcm(r3, &(0x7f0000000c40)={&(0x7f00000003c0)=@qipcrtr, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/53, 0x35}, {&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000a00)=""/13, 0xd}, {&(0x7f0000000a40)=""/207, 0xcf}], 0x5, &(0x7f0000000bc0)}, 0x10062) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r10, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x90d6, 0x2}, 0x10) 9.170458379s ago: executing program 4 (id=1095): syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd602c00fe8000000000000000000000000000bbff0600000000000000000000000004012b0000000000000000000000000c907801000000"], 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000240)={'filter\x00', 0x7, "818cdb265bd579"}, &(0x7f0000000140)=0x2f) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x405}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = syz_open_pts(r1, 0x200) r4 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xa) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80080) 8.750690551s ago: executing program 4 (id=1100): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24002805}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000380)={0x0, 0xd, {0x52, 0xff, 0x7, {0x1, 0xf}, {0x0, 0xdf}, @ramp={0x8, 0x8, {0x4, 0x3, 0x9, 0x1}}}, {0x52, 0xc00, 0x3, {0x7, 0x9}, {0x3, 0x7}, @ramp={0x3, 0x852b, {0x9, 0x4, 0xcf2, 0x8}}}}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x200, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000000c0)=0x1000, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 8.695613181s ago: executing program 33 (id=1100): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24002805}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000380)={0x0, 0xd, {0x52, 0xff, 0x7, {0x1, 0xf}, {0x0, 0xdf}, @ramp={0x8, 0x8, {0x4, 0x3, 0x9, 0x1}}}, {0x52, 0xc00, 0x3, {0x7, 0x9}, {0x3, 0x7}, @ramp={0x3, 0x852b, {0x9, 0x4, 0xcf2, 0x8}}}}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x200, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000000c0)=0x1000, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 2.460492349s ago: executing program 5 (id=1163): mount(&(0x7f00000007c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000780)='romfs\x00', 0x204001, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x200000, 0x0) 2.398917076s ago: executing program 5 (id=1164): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2.397253539s ago: executing program 5 (id=1165): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000ec0)={&(0x7f0000000e80)=""/25, 0x19}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x1) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) open$dir(&(0x7f00000042c0)='./file1\x00', 0x4240, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) ptrace(0x10, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x44) syz_usb_disconnect(r1) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x402302, 0x0) write$char_usb(r2, &(0x7f0000000f40)="dd0c388b5fd38d2a8a303a4ee65a104c01acbeb18f7f8be781e703b3c70d680541ea88ff0a7ebe397f36334bd061db55cf4647320592b3d48361ca6fb7fe8e270822605ec0d0ed7f8adca88adb1bc9953312b180c7ba9b93dbc748cd0680d1267d054a823a23e83141c97b0aedae3690ed43c92aea5de55cfeb9d5f0af8c00d5ea510949be345c77229313b12ea14a9e6ca8aa8767dff42a67982c9bdf29f9326c04d49c9d6a4235d1e88eace0bb7a96b215a605a778", 0xb6) 1.790065013s ago: executing program 2 (id=1173): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000380)=ANY=[], 0x200002e6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x6}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x8a004) fadvise64(r4, 0x101, 0x0, 0x1) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000200)=[{0x17, '\x00', @buffer={"bc503e211b4c1198cd98b5f801b21380f62579814aae62d886a21f20d7646202", 0x20}, 0x7}]}) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000a80)={0x6, 0x0, @pic={0x4, 0x2, 0x9, 0x2, 0x5, 0xee, 0xda, 0x6, 0x2, 0x4, 0x7, 0x9, 0x3, 0x8, 0x31, 0x85}}) fcntl$setpipe(r0, 0x407, 0x7000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$FE_GET_EVENT(r5, 0x80286f4e, &(0x7f0000000040)={0x0, {0x0, 0x0, @vsb}}) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 1.090524407s ago: executing program 1 (id=1181): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0801000020010000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 1.090203817s ago: executing program 1 (id=1182): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x2eda, &(0x7f0000000040)={0x0, 0xd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r9, 0x80045440, &(0x7f0000000040)=0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r12], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r10, &(0x7f0000000000), 0x400000000000235, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x41a2, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x2, 0xb55, 0x0, 0x0}}, &(0x7f0000001fc0)) 1.010376555s ago: executing program 1 (id=1183): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x6, 0x40001038, r0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000300)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) fanotify_init(0xf00, 0x0) (async) fanotify_mark(r1, 0x6, 0x40001038, r0, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) landlock_create_ruleset(&(0x7f0000000300)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r2, 0xe) (async) 780.520627ms ago: executing program 1 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c000480380001800b00010064796e73657400002800028008000440000000090900010073797a3200000000080003400000000208000940000000030900020073797a3200"], 0x90}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000001900)={[{@mode}]}) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x42800) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x440000, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40a43, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r5, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x80, 0xc408}, [@IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_PHYS_SWITCH_ID={0x12, 0x24, "0a42964edcc091486b61fc13753a"}, @IFLA_MTU={0x8, 0x4, 0x40c7eaee}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) 707.68741ms ago: executing program 1 (id=1187): socket$pptp(0x18, 0x1, 0x2) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) 706.133218ms ago: executing program 1 (id=1189): recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000440)=""/136, 0x88}], 0x1}, 0x10000003}], 0x1, 0x40010021, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf2509"], 0x20}, 0x1, 0x0, 0x0, 0x4048050}, 0x8010) 588.801857ms ago: executing program 2 (id=1190): syz_emit_ethernet(0xfc6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) 588.683791ms ago: executing program 2 (id=1191): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0801000000050000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 529.716362ms ago: executing program 2 (id=1193): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x2, 0x12) (async) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000240)="6ddd8fd0da7e5c2500e6d06ed83d2020d86541358bb140f3497e44d84a0bcd33bdfa2f92b5149e3fb13c38a5944b8213c6a9fae2bf73b10cca956b5c7f52a6642784fa369bde1e1e15e2bf79b6c349c86d501e", 0x53) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x9e, "1103bdd3d4aa71cc75347219cf4f44220b5672aaa022df8cf83fcb9700f28b3666c7653e0b878a27bcb4e10b8e63243580f8289cb10b00a2f09027765f506994c3697b0b48ae7aa6e11d9a6f9a42668c595f9545d165f7c1d023e2e3f2315a94f4cce9d9459b10550549f2d36a5bdde48f67925b4d5e616986ee75e71d487f7c255e5f4409113a94d564bdff652d28b104f8358d6945762dea306e902c47"}, &(0x7f0000000140)=0xa6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x92, 0x5}, 0x90) 468.281348ms ago: executing program 2 (id=1194): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) readv(r0, &(0x7f0000000ec0)=[{&(0x7f0000000700)=""/230, 0xe6}], 0x1) readv(r0, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xfffffffffffffe3f) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100001047fff00"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r5], 0x48}}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1f, 0x4) syz_io_uring_setup(0x891, &(0x7f0000000300)={0x0, 0x400aee2, 0x2, 0x0, 0x317}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0xb, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x2e, 0x30, 0x61, 0x30, 0x61, 0x2e, 0x0, 0x0]}}, &(0x7f00000003c0)=""/136, 0x2f, 0x88, 0x1, 0xfffffff5}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x6}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pK \x00'}, 0x20) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r8, &(0x7f0000000180)='0\x00', 0x2) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, &(0x7f0000000600), &(0x7f0000000640)='%pI4 \x00'}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r9 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r9, 0x40044103, &(0x7f0000000000)=0x2) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r7, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={r10}, 0x4) (async) openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x14002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1}, &(0x7f00000008c0), &(0x7f0000000900)='%-5lx \x00'}, 0x20) 367.82392ms ago: executing program 2 (id=1196): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x40a00, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x3, @remote, 'veth0_vlan\x00'}}, 0x1e) r2 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000004"], 0x50) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) write$sndseq(r3, &(0x7f0000000080)=[{0x7, 0x5f, 0x3, 0xc, @time={0x7, 0x9}, {0x0, 0x3}, {0x2, 0x49}, @connect={{0x7f, 0x2}, {0x96, 0xff}}}, {0x5, 0xfc, 0xff, 0x8, @tick=0x6, {0xb, 0x4a}, {0x7f, 0x5}, @control={0x8, 0xffff0078, 0xfffffffb}}], 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}, {0x1, 0x2, 0x3000}], 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="582215007000fadb0300"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800600050088a8000006000100010000000c000200130000003f00000008000500", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 300.260505ms ago: executing program 3 (id=1198): socket$pptp(0x18, 0x1, 0x2) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) 229.762221ms ago: executing program 3 (id=1199): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_GET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea3) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x0, 0x1}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') statx(r2, &(0x7f0000000440)='./file0\x00', 0x2000, 0x4, &(0x7f0000000600)) write$cgroup_pid(r2, 0x0, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='hfs\x00', 0xee3493b28bc7f302, &(0x7f0000000300)='[\x00') (async) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='hfs\x00', 0xee3493b28bc7f302, &(0x7f0000000300)='[\x00') fcntl$addseals(r2, 0x409, 0x16) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xab1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008044}, 0x4088800) write$binfmt_misc(r2, &(0x7f0000000080)="b6bb4de490cd9fa0cabf2fbf5269529e3355a51d1503560bcda5eafb5f656e375e7277df28896d49e094dd0b48de4a60762df119e722c9c6f16f4464ebb49be49ac0411bc961da9357c94d3a827712686610038fc90f1b5094e9e86ec0506925", 0x60) (async) write$binfmt_misc(r2, &(0x7f0000000080)="b6bb4de490cd9fa0cabf2fbf5269529e3355a51d1503560bcda5eafb5f656e375e7277df28896d49e094dd0b48de4a60762df119e722c9c6f16f4464ebb49be49ac0411bc961da9357c94d3a827712686610038fc90f1b5094e9e86ec0506925", 0x60) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000004c0)={0x7, 0x0, [{0x40000000, 0xfffffffe, 0x4, 0x2, 0x1, 0x6, 0x1}, {0x40000001, 0x36ad, 0x0, 0x7fe, 0x1000, 0xe236, 0x4}, {0x6, 0xffff, 0x5, 0x6, 0x2, 0xaf, 0xfffffffa}, {0x0, 0x8, 0x1, 0x8, 0xff, 0x6, 0xd1}, {0x7, 0x101, 0x4, 0xa, 0x8, 0x6, 0x13a44471}, {0x4, 0x101, 0x7, 0x100, 0xfffffff9, 0x6, 0x1fa}, {0x80000007, 0x2, 0x0, 0xb, 0xfffffff9, 0xfffffbff, 0x2}]}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) ioctl$TIOCSIG(r2, 0x40045436, 0x30) (async) ioctl$TIOCSIG(r2, 0x40045436, 0x30) 229.624046ms ago: executing program 5 (id=1200): syz_emit_ethernet(0xfc6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) 229.555101ms ago: executing program 3 (id=1201): r0 = socket$kcm(0x2, 0x200000000000004, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) 170.620727ms ago: executing program 5 (id=1202): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="0300", 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf94}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xeba}]}, 0x24}}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xfeffff, 0x108, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xdb, 0x0, &(0x7f0000000440)="f06e6906251681ffc9b78cf387545794e4cb084b4627e2f155fc52f874d045af2bd2ba93583b1e38d0d9b46c48f99f9a55c2fcdcb0488ac0ee4a04564f063f1eeddcb519ff6a14c12ce36747bd84318f9a57b114c0a5455d707c9836b2f6aaed7b3d7240caefb05634e77c230b00008164b0bd5f0480773ac020e18bd3cf17fda069c4f4468da7c6142ba7da4b6762ad69e5a97498fb00f5a071b3739096f2e4e40559f2b8cddbdc5e2359e4ba98878ee8de90827968e01f3279b018698b0debe5bfec35778adeb6785c59aec3db2a4158c8877758e0a56f7eaaf8"}, 0x50) 170.425847ms ago: executing program 3 (id=1203): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="08010000b4050000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 120.562086ms ago: executing program 5 (id=1204): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0xce, &(0x7f0000000140)={{0x12, 0x1, 0x341, 0x0, 0x0, 0x0, 0x0, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x4, 0x40, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1ff, 0x8, 0x15, 0x8}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x404, 0x2, 0x6, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0x6, "a28950124b4f96be"}, @as_header={0x10, 0x24, 0x1, 0x0, 0xff, 0x0, 0x3, 0x1, 0x9, 0x2}, @as_header={0x10, 0x24, 0x1, 0x0, 0x9, 0x3, 0x2, 0x89, 0x9, 0x10}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8f, 0x3, 0x7f, 0x7f, "93f6d2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x9, 0x5, {0x8, 0x25, 0x1, 0x0, 0xcd9546c12197810d, 0x7d, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x51, 0x3, {0x8, 0x25, 0x1, 0x81, 0x3, 0x7, 0x5e}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x4, 0x80, 0xc, 0x40, 0x9}, 0x41, &(0x7f0000000280)={0x5, 0xf, 0x41, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "08ecf875284c0c4fe0d1a452843da434"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x1, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x8, 0x3d}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xc7, 0x2, 0x10001, 0x1e00, 0x8, [0x3f3f, 0xff3f0f]}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3c0a}}]}) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20380, 0x0) readv(r0, &(0x7f0000003500)=[{&(0x7f00000000c0)=""/112, 0x70}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2) 120.393223ms ago: executing program 3 (id=1205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000023, 0x0, 0x145d}]}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 0s ago: executing program 3 (id=1206): prctl$PR_SET_NAME(0x53564d41, 0x0) (async) prctl$PR_SET_NAME(0x53564d41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe00000100000000050013"], 0xd0}}, 0x2400c800) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="192a", 0x2, 0xfffffffffffffffc) keyctl$get_security(0x11, r4, &(0x7f0000000180)=""/64, 0x40) (async) keyctl$get_security(0x11, r4, &(0x7f0000000180)=""/64, 0x40) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4d0}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x14) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x14) write(r10, &(0x7f0000000a00)='1', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r11, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="66bad10466edb8010000000f01d90f30c4e2259e9f0a000000b92c0300000f32470fc7ad00000080b9800000c00f3235002040000f30b965090000b8d5000000ba000000000f30f3470f1efa66b831008ee0", 0x52}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x2000009) ioctl$KVM_RUN(r8, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 96.997835][ T42] audit: type=1400 audit(1785011067.494:7835): avc: denied { getopt } for pid=7709 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.018660][ T7714] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.118559][ T42] audit: type=1400 audit(1785011067.634:7836): avc: denied { map } for pid=7722 comm="syz.1.595" path="socket:[21635]" dev="sockfs" ino=21635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 97.286490][ T6440] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 97.316969][ T7727] x_tables: duplicate underflow at hook 1 [ 97.341241][ T7727] binder: 7726:7727 ioctl c0306201 200000000240 returned -14 [ 97.348021][ T7727] cgroup: name respecified [ 97.436905][ T6440] usb 8-1: Using ep0 maxpacket: 8 [ 97.445671][ T6440] usb 8-1: unable to get BOS descriptor or descriptor too short [ 97.449411][ T6440] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 97.454584][ T6440] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.457811][ T6440] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 97.461517][ T6440] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 97.464526][ T6440] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 97.468042][ T6440] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 812 [ 97.475114][ T6440] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 97.479100][ T6440] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.482382][ T6440] usb 8-1: Product: syz [ 97.484375][ T6440] usb 8-1: Manufacturer: syz [ 97.486801][ T6440] usb 8-1: SerialNumber: syz [ 97.496002][ T6440] usb 8-1: config 0 descriptor?? [ 97.499153][ T7719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.501666][ T7719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.507736][ T6440] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.310501][ T5890] usb 8-1: USB disconnect, device number 13 [ 98.447775][ T6440] net_ratelimit: 7 callbacks suppressed [ 98.447786][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.651237][ T7748] Cannot find del_set index 1 as target [ 98.682897][ T7750] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 98.739739][ T5890] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 98.811979][ T7667] cdc_wdm 5-1:1.0: Error autopm - -16 [ 98.812778][ T34] usb 5-1: USB disconnect, device number 11 [ 98.879380][ T7757] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 98.882227][ T7771] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.916939][ T5890] usb 8-1: Using ep0 maxpacket: 8 [ 98.923385][ T5890] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 98.926697][ T5890] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.927094][ T7776] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 98.929768][ T5890] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.932479][ T7776] binder: 7775:7776 ioctl 4018620d 200000000240 returned -1 [ 98.934239][ T7776] binder: 7775:7776 ioctl c0306201 2000000001c0 returned -14 [ 98.937618][ T5890] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.940701][ T7778] tc_dump_action: action bad kind [ 98.942106][ T5890] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.942174][ T7776] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 98.942189][ T7776] binder: 7775:7776 ioctl 4018620d 200000000040 returned -1 [ 98.959003][ T5890] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.962521][ T5890] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.010300][ T7785] Cannot find del_set index 1 as target [ 99.038170][ T7787] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 99.039409][ T42] audit: type=1400 audit(1785011069.554:7837): avc: denied { create } for pid=7786 comm="syz.0.616" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 99.045468][ T7789] program syz.2.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.076071][ T42] audit: type=1400 audit(1785011069.554:7838): avc: denied { associate } for pid=7786 comm="syz.0.616" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 99.109609][ T42] audit: type=1400 audit(1785011069.554:7839): avc: denied { mounton } for pid=7786 comm="syz.0.616" path="/122/bus" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 99.138395][ T42] audit: type=1400 audit(1785011069.554:7840): avc: denied { write } for pid=7786 comm="syz.0.616" name="bus" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 99.166276][ T42] audit: type=1400 audit(1785011069.554:7841): avc: denied { add_name } for pid=7786 comm="syz.0.616" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 99.174865][ T5890] usb 8-1: GET_CAPABILITIES returned 0 [ 99.225838][ T5890] usbtmc 8-1:16.0: can't read capabilities [ 99.287943][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'. [ 99.291866][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'. [ 99.392643][ T2230] usb 8-1: USB disconnect, device number 14 [ 99.414031][ T7814] Cannot find del_set index 1 as target [ 99.486635][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.956372][ T7825] FAULT_INJECTION: forcing a failure. [ 99.956372][ T7825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.961826][ T7825] CPU: 3 UID: 0 PID: 7825 Comm: syz.3.630 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.961844][ T7825] Tainted: [L]=SOFTLOCKUP [ 99.961847][ T7825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.961854][ T7825] Call Trace: [ 99.961858][ T7825] [ 99.961863][ T7825] dump_stack_lvl+0x100/0x190 [ 99.961906][ T7825] should_fail_ex.cold+0x5/0xa [ 99.961922][ T7825] _copy_from_user+0x2e/0xd0 [ 99.961942][ T7825] move_addr_to_kernel+0x65/0x170 [ 99.961964][ T7825] __sys_connect+0xb5/0x170 [ 99.961974][ T7825] ? __pfx___sys_connect+0x10/0x10 [ 99.961984][ T7825] ? __fget_files+0x21f/0x3d0 [ 99.961999][ T7825] ? __pfx_ksys_write+0x10/0x10 [ 99.962018][ T7825] __x64_sys_connect+0x72/0xb0 [ 99.962028][ T7825] ? lockdep_hardirqs_on+0x78/0x100 [ 99.962040][ T7825] do_syscall_64+0x115/0x870 [ 99.962051][ T7825] ? clear_bhb_loop+0x40/0x90 [ 99.962064][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.962075][ T7825] RIP: 0033:0x7f225339de99 [ 99.962084][ T7825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.962095][ T7825] RSP: 002b:00007f22515f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 99.962107][ T7825] RAX: ffffffffffffffda RBX: 00007f2253625fa0 RCX: 00007f225339de99 [ 99.962113][ T7825] RDX: 000000000000001e RSI: 0000200000000240 RDI: 0000000000000003 [ 99.962120][ T7825] RBP: 00007f22515f6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.962126][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.962132][ T7825] R13: 00007f2253626038 R14: 00007f2253625fa0 R15: 00007ffed9b199a8 [ 99.962145][ T7825] [ 100.276101][ T7849] Cannot find del_set index 1 as target [ 100.294697][ T7850] futex_wake_op: syz.0.635 tries to shift op by -1; fix this program [ 100.296563][ T5890] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 100.298511][ T7850] netlink: 44 bytes leftover after parsing attributes in process `syz.0.635'. [ 100.308015][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.466545][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 100.469515][ T5890] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 100.472752][ T5890] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 100.477067][ T5890] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.480577][ T5890] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 100.486517][ T5890] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 100.489423][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.491922][ T5890] usb 7-1: Product: syz [ 100.493206][ T5890] usb 7-1: Manufacturer: syz [ 100.494575][ T5890] usb 7-1: SerialNumber: syz [ 100.505732][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 100.511778][ T5890] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input25 [ 100.537670][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.556823][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 100.704952][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.709090][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 100.712640][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.713552][ T24] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 100.717522][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.720583][ T24] usb 8-1: config 0 has no interface number 0 [ 100.723045][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.725200][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.731797][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 100.734284][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.735387][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.735403][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 100.735415][ T24] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.735439][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 100.735451][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.737949][ T24] usb 8-1: config 0 descriptor?? [ 100.742666][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.749837][ T24] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 100.754507][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.785657][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.791042][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.795249][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.804719][ T7896] FAULT_INJECTION: forcing a failure. [ 100.804719][ T7896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.815680][ T7896] CPU: 0 UID: 0 PID: 7896 Comm: syz.1.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.815710][ T7896] Tainted: [L]=SOFTLOCKUP [ 100.815717][ T7896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.815727][ T7896] Call Trace: [ 100.815732][ T7896] [ 100.815738][ T7896] dump_stack_lvl+0x100/0x190 [ 100.815755][ T7896] should_fail_ex.cold+0x5/0xa [ 100.815768][ T7896] _copy_to_user+0x32/0xd0 [ 100.815785][ T7896] simple_read_from_buffer+0xcb/0x170 [ 100.815797][ T7896] proc_fail_nth_read+0x1af/0x230 [ 100.815814][ T7896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.815830][ T7896] ? rw_verify_area+0xce/0x6d0 [ 100.815845][ T7896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.815861][ T7896] vfs_read+0x1e4/0xb40 [ 100.815878][ T7896] ? __pfx_vfs_read+0x10/0x10 [ 100.815893][ T7896] ? __fget_files+0x215/0x3d0 [ 100.815906][ T7896] ? __fget_files+0x21f/0x3d0 [ 100.815920][ T7896] ksys_read+0x12a/0x250 [ 100.815936][ T7896] ? __pfx_ksys_read+0x10/0x10 [ 100.815961][ T7896] do_syscall_64+0x115/0x870 [ 100.815973][ T7896] ? clear_bhb_loop+0x40/0x90 [ 100.815985][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.815996][ T7896] RIP: 0033:0x7f76b915e6ce [ 100.816005][ T7896] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.816016][ T7896] RSP: 002b:00007f76ba0aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.816027][ T7896] RAX: ffffffffffffffda RBX: 00007f76ba0ab6c0 RCX: 00007f76b915e6ce [ 100.816033][ T7896] RDX: 000000000000000f RSI: 00007f76ba0ab0a0 RDI: 0000000000000004 [ 100.816040][ T7896] RBP: 00007f76ba0ab090 R08: 0000000000000000 R09: 0000000000000000 [ 100.816046][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.816052][ T7896] R13: 00007f76b9426038 R14: 00007f76b9425fa0 R15: 00007fffd759acc8 [ 100.816065][ T7896] [ 100.836569][ T5890] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 100.876318][ T7900] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 100.879090][ T5890] (id 0x00) [ 100.883663][ T7902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7902 comm=syz.2.642 [ 100.895572][ T7900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.900755][ T7902] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 100.909893][ T7900] bond2 (unregistering): Released all slaves [ 100.936537][ T5890] rc_core: IR keymap rc-imon-pad not found [ 100.938811][ T5890] Registered IR keymap rc-empty [ 100.939459][ T7902] macvtap1: entered allmulticast mode [ 100.940736][ T5890] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 100.946282][ T5890] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 100.948160][ T7902] macvtap2: entered allmulticast mode [ 100.950252][ T5890] imon:send_packet: packet tx failed (-71) [ 100.953028][ T7852] netlink: 228 bytes leftover after parsing attributes in process `syz.3.638'. [ 100.976527][ T5890] imon 7-1:155.0: remote input dev register failed [ 100.983823][ T5890] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 101.008703][ T7911] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 101.034203][ T5890] imon 7-1:155.0: unable to initialize intf0, err 0 [ 101.037620][ T5890] imon:imon_probe: failed to initialize context! [ 101.041773][ T5890] imon 7-1:155.0: unable to register, err -19 [ 101.048999][ T5890] usb 7-1: USB disconnect, device number 8 [ 101.104972][ T847] usb 8-1: USB disconnect, device number 15 [ 101.109472][ T847] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 101.110719][ T7927] Cannot find del_set index 1 as target [ 101.143504][ T7931] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 101.338846][ T7947] xt_recent: Unsupported userspace flags (000000b2) [ 101.566849][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.613378][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 102.621711][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.650230][ T7968] Cannot find del_set index 1 as target [ 102.931974][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 102.931985][ T42] audit: type=1400 audit(1785011073.444:7872): avc: denied { name_bind } for pid=7985 comm="syz.0.667" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 102.963594][ T7984] netlink: 84 bytes leftover after parsing attributes in process `syz.2.665'. [ 103.054039][ T7992] FAULT_INJECTION: forcing a failure. [ 103.054039][ T7992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.059341][ T7992] CPU: 3 UID: 0 PID: 7992 Comm: syz.1.668 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.059369][ T7992] Tainted: [L]=SOFTLOCKUP [ 103.059374][ T7992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.059383][ T7992] Call Trace: [ 103.059389][ T7992] [ 103.059396][ T7992] dump_stack_lvl+0x100/0x190 [ 103.059421][ T7992] should_fail_ex.cold+0x5/0xa [ 103.059443][ T7992] _copy_from_iter+0x1f4/0x1690 [ 103.059473][ T7992] ? __pfx__copy_from_iter+0x10/0x10 [ 103.059494][ T7992] ? _copy_from_iter+0x270/0x1690 [ 103.059520][ T7992] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 103.059543][ T7992] skb_copy_datagram_from_iter+0x11f/0x720 [ 103.059561][ T7992] ? _kstrtoull+0x13c/0x1f0 [ 103.059576][ T7992] ? __pfx__kstrtoull+0x10/0x10 [ 103.059596][ T7992] tun_get_user+0x1889/0x3c20 [ 103.059622][ T7992] ? __pfx_tun_get_user+0x10/0x10 [ 103.059641][ T7992] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.059672][ T7992] ? find_held_lock+0x2b/0x80 [ 103.059697][ T7992] ? tun_get+0x191/0x370 [ 103.059719][ T7992] ? tun_get+0x191/0x370 [ 103.059748][ T7992] tun_chr_write_iter+0xdc/0x200 [ 103.059768][ T7992] vfs_write+0x6ac/0x1050 [ 103.059795][ T7992] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 103.059813][ T7992] ? __pfx_vfs_write+0x10/0x10 [ 103.059835][ T7992] ? find_held_lock+0x2b/0x80 [ 103.059879][ T7992] ksys_write+0x12a/0x250 [ 103.059902][ T7992] ? __pfx_ksys_write+0x10/0x10 [ 103.059933][ T7992] do_syscall_64+0x115/0x870 [ 103.059953][ T7992] ? clear_bhb_loop+0x40/0x90 [ 103.059973][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.059989][ T7992] RIP: 0033:0x7f76b919de99 [ 103.060003][ T7992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.060020][ T7992] RSP: 002b:00007f76ba08a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.060037][ T7992] RAX: ffffffffffffffda RBX: 00007f76b9426090 RCX: 00007f76b919de99 [ 103.060048][ T7992] RDX: 0000000000000016 RSI: 00002000000001c0 RDI: 0000000000000003 [ 103.060057][ T7992] RBP: 00007f76ba08a090 R08: 0000000000000000 R09: 0000000000000000 [ 103.060066][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.060077][ T7992] R13: 00007f76b9426128 R14: 00007f76b9426090 R15: 00007fffd759acc8 [ 103.060098][ T7992] [ 103.339086][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.649677][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.876315][ T8008] random: crng reseeded on system resumption [ 103.894082][ T8008] Unrecognized hibernate image header format! [ 103.901103][ T8008] PM: hibernation: Image mismatch: architecture specific data [ 103.970795][ T8016] x_tables: duplicate underflow at hook 1 [ 103.987976][ T42] audit: type=1400 audit(1785011074.494:7873): avc: denied { set_context_mgr } for pid=8013 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 103.988872][ T8016] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 103.996168][ T8016] binder: 8013:8016 ioctl 4018620d 2000000000c0 returned -1 [ 104.014974][ T8016] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 104.017199][ T8016] binder: 8013:8016 ioctl 4018620d 200000000040 returned -1 [ 104.020553][ T8016] binder: 8013:8016 ioctl c0306201 200000000240 returned -11 [ 104.025417][ T8016] cgroup: name respecified [ 104.472168][ T8021] syzkaller0: entered promiscuous mode [ 104.474394][ T8021] syzkaller0: entered allmulticast mode [ 104.476534][ T2230] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 104.533223][ T42] audit: type=1400 audit(1785011075.044:7874): avc: denied { setattr } for pid=8031 comm="syz.3.680" name="TIPC" dev="sockfs" ino=20437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.538273][ T8032] netlink: 'syz.3.680': attribute type 21 has an invalid length. [ 104.545472][ T8032] netlink: 152 bytes leftover after parsing attributes in process `syz.3.680'. [ 104.608263][ T8038] netlink: 'syz.2.683': attribute type 2 has an invalid length. [ 104.617094][ T42] audit: type=1400 audit(1785011075.134:7875): avc: denied { getopt } for pid=8033 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.630563][ T2230] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 104.634786][ T2230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.641583][ T2230] usb 5-1: Product: syz [ 104.643451][ T2230] usb 5-1: Manufacturer: syz [ 104.645364][ T2230] usb 5-1: SerialNumber: syz [ 104.650278][ T42] audit: type=1400 audit(1785011075.164:7876): avc: denied { name_bind } for pid=8040 comm="syz.1.684" path="socket:[22824]" dev="sockfs" ino=22824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 104.696310][ T42] audit: type=1400 audit(1785011075.204:7877): avc: denied { firmware_load } for pid=24 comm="kworker/2:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 104.702288][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.720281][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.822737][ T42] audit: type=1400 audit(1785011075.334:7878): avc: denied { read } for pid=8058 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.832353][ T42] audit: type=1400 audit(1785011075.344:7879): avc: denied { bind } for pid=8058 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.900759][ T8068] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.903878][ T42] audit: type=1400 audit(1785011075.414:7880): avc: denied { create } for pid=8067 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 104.904787][ T8068] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 104.912244][ T42] audit: type=1400 audit(1785011075.414:7881): avc: denied { write } for pid=8067 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 104.966238][ T2230] usb 5-1: USB disconnect, device number 12 [ 105.020790][ T8081] FAULT_INJECTION: forcing a failure. [ 105.020790][ T8081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.028326][ T8081] CPU: 2 UID: 0 PID: 8081 Comm: syz.3.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.028370][ T8081] Tainted: [L]=SOFTLOCKUP [ 105.028376][ T8081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.028385][ T8081] Call Trace: [ 105.028390][ T8081] [ 105.028396][ T8081] dump_stack_lvl+0x100/0x190 [ 105.028422][ T8081] should_fail_ex.cold+0x5/0xa [ 105.028443][ T8081] _copy_to_user+0x32/0xd0 [ 105.028468][ T8081] simple_read_from_buffer+0xcb/0x170 [ 105.028489][ T8081] proc_fail_nth_read+0x1af/0x230 [ 105.028516][ T8081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.028555][ T8081] ? rw_verify_area+0xce/0x6d0 [ 105.028604][ T8081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.028628][ T8081] vfs_read+0x1e4/0xb40 [ 105.028656][ T8081] ? __pfx_vfs_read+0x10/0x10 [ 105.028681][ T8081] ? __fget_files+0x215/0x3d0 [ 105.028704][ T8081] ? __fget_files+0x21f/0x3d0 [ 105.028728][ T8081] ksys_read+0x12a/0x250 [ 105.028752][ T8081] ? __pfx_ksys_read+0x10/0x10 [ 105.028782][ T8081] do_syscall_64+0x115/0x870 [ 105.028799][ T8081] ? clear_bhb_loop+0x40/0x90 [ 105.028821][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.028838][ T8081] RIP: 0033:0x7f225335e6ce [ 105.028867][ T8081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.028883][ T8081] RSP: 002b:00007f22515d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.028903][ T8081] RAX: ffffffffffffffda RBX: 00007f22515d56c0 RCX: 00007f225335e6ce [ 105.028914][ T8081] RDX: 000000000000000f RSI: 00007f22515d50a0 RDI: 0000000000000007 [ 105.028924][ T8081] RBP: 00007f22515d5090 R08: 0000000000000000 R09: 0000000000000000 [ 105.028934][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.028944][ T8081] R13: 00007f2253626128 R14: 00007f2253626090 R15: 00007ffed9b199a8 [ 105.028968][ T8081] [ 105.310796][ T5890] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 105.456530][ T5890] usb 6-1: device descriptor read/64, error -71 [ 105.698926][ T8099] kvm: kvm [8098]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0xe50000000000 [ 105.702248][ T8099] kvm: kvm [8098]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0xe50000000000 [ 105.719100][ T8099] kvm: kvm [8098]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xe500be702111 [ 105.726574][ T5890] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 105.732530][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.749716][ T8099] kvm: kvm [8098]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0xe50000000000 [ 105.754220][ T8099] kvm: kvm [8098]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0xe50000000000 [ 105.816560][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 105.831197][ T24] ath9k_htc: Failed to initialize the device [ 105.858160][ T2230] usb 5-1: ath9k_htc: USB layer deinitialized [ 105.866521][ T5890] usb 6-1: device descriptor read/64, error -71 [ 105.978699][ T5890] usb usb6-port1: attempt power cycle [ 106.206494][ T2230] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 106.346640][ T5890] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 106.369937][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.370765][ T2230] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.377218][ T2230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.377400][ T5890] usb 6-1: device descriptor read/8, error -71 [ 106.380463][ T2230] usb 5-1: Product: syz [ 106.384933][ T2230] usb 5-1: Manufacturer: syz [ 106.387433][ T2230] usb 5-1: SerialNumber: syz [ 106.627056][ T5890] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 106.644709][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 106.657381][ T5890] usb 6-1: device descriptor read/8, error -71 [ 106.767305][ T5890] usb usb6-port1: unable to enumerate USB device [ 106.768527][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.810986][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.711'. [ 106.813424][ T8019] netlink: 48 bytes leftover after parsing attributes in process `syz.0.679'. [ 106.820981][ T5824] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 106.821187][ T5530] usb 5-1: USB disconnect, device number 13 [ 106.843484][ T5530] usb 5-1: ath9k_htc: USB layer deinitialized [ 106.850291][ T8122] netlink: 1 bytes leftover after parsing attributes in process `syz.2.711'. [ 106.925173][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 106.982566][ T8132] Cannot find del_set index 1 as target [ 107.065969][ T8137] binder: 8129:8137 ioctl c0306201 200000000040 returned -22 [ 107.071151][ T8137] binder: 8129:8137 ioctl c0306201 200000000640 returned -22 [ 107.101769][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.717'. [ 107.658598][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.806618][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.982488][ T8136] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 107.987141][ T8136] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 108.111304][ T8147] binder: 8146:8147 ioctl 2287 200000000040 returned -22 [ 108.169396][ T8154] Cannot find del_set index 1 as target [ 108.233932][ T8164] binder: 8163:8164 ioctl c0306201 200000000040 returned -22 [ 108.239550][ T8164] binder: 8163:8164 ioctl c0306201 200000000640 returned -22 [ 108.327693][ T8168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8168 comm=syz.3.729 [ 108.402579][ T42] audit: type=1400 audit(1785011078.914:7882): avc: denied { setopt } for pid=8174 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.486567][ T5824] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 108.510018][ T8193] Cannot find del_set index 1 as target [ 108.585487][ T8197] ucma_write: process 549 (syz.2.737) changed security contexts after opening file descriptor, this is not allowed. [ 108.666479][ T5824] usb 6-1: Using ep0 maxpacket: 8 [ 108.669463][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.672163][ T5824] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.674955][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.676967][ T5824] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.682985][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.685455][ T5824] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 108.689356][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.694238][ T5824] usb 6-1: config 0 descriptor?? [ 108.849794][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.896519][ T6440] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 109.050895][ T6440] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.053563][ T6440] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.056677][ T6440] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.059815][ T6440] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.065890][ T8214] SELinux: security_context_str_to_sid (4m§sevS„:"-”„½ôXòF@) failed with errno=-22 [ 109.066178][ T6440] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.072106][ T6440] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.074501][ T6440] usb 7-1: Product: syz [ 109.075792][ T6440] usb 7-1: Manufacturer: syz [ 109.080643][ T6440] cdc_wdm 7-1:1.0: skipping garbage [ 109.082665][ T6440] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 109.100367][ T5824] hid_parser_main: 10 callbacks suppressed [ 109.100384][ T5824] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 109.105427][ T5824] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 109.107728][ T5824] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 109.109883][ T5824] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 109.112054][ T5824] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 109.114620][ T5824] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 109.280641][ T5530] usb 7-1: USB disconnect, device number 9 [ 109.300978][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.304396][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.314032][ T29] usb 6-1: USB disconnect, device number 12 [ 109.341752][ T8220] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 109.363955][ T8220] typec_fusb302 0-0022: failed to request gpio_int_n [ 109.386604][ T8220] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 109.391767][ T8220] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 109.395189][ T8222] XFS (nbd1): SB validate failed with error -5. [ 109.408458][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.437252][ T42] audit: type=1400 audit(1785011079.954:7883): avc: denied { read } for pid=8219 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.440780][ T8220] typec_fusb302 1-0022: I2C/SMBus block functionality not supported! [ 109.447459][ T8220] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22 [ 109.561489][ T8234] Cannot find del_set index 1 as target [ 109.822798][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.753'. [ 109.823989][ T8259] Cannot find del_set index 1 as target [ 109.886686][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.993082][ T42] audit: type=1400 audit(1785011080.504:7884): avc: denied { shutdown } for pid=8273 comm="syz.3.759" lport=38487 faddr=fc01::ff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.036038][ T42] audit: type=1400 audit(1785011080.544:7885): avc: denied { ioctl } for pid=8276 comm="syz.2.760" path="socket:[23726]" dev="sockfs" ino=23726 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 110.055941][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 110.153128][ T8286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 110.286824][ T5824] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 110.301570][ T42] audit: type=1400 audit(1785011080.814:7886): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 110.333545][ T42] audit: type=1400 audit(1785011080.844:7887): avc: denied { write } for pid=8294 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.440960][ T5824] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.447121][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.451587][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 110.463024][ T5824] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 110.466711][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.469207][ T5824] usb 7-1: Product: syz [ 110.470516][ T5824] usb 7-1: Manufacturer: syz [ 110.472373][ T5824] usb 7-1: SerialNumber: syz [ 110.477776][ T5824] usb 7-1: config 0 descriptor?? [ 110.480534][ T8277] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.486564][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 110.499611][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 110.503191][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 110.526116][ T5846] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.527184][ T5824] rc_core: IR keymap rc-streamzap not found [ 110.532440][ T5846] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.533169][ T5824] Registered IR keymap rc-empty [ 110.536159][ T8311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.771'. [ 110.540075][ T5846] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.540860][ T5824] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 110.542000][ T5824] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input28 [ 110.548912][ T5846] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.613615][ T8316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8316 comm=syz.3.774 [ 110.688066][ T6440] usb 7-1: USB disconnect, device number 10 [ 110.926814][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.009698][ T8349] fuse: Unknown parameter '0xffffffffffffffff' [ 111.032377][ T8349] fuse: Unknown parameter 'ÿÿ0xffffffffffffffff' [ 111.063179][ T42] audit: type=1400 audit(1785011081.574:7888): avc: denied { append } for pid=8354 comm="syz.2.788" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 111.318018][ T8371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8371 comm=syz.3.793 [ 111.376563][ T5824] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 111.524558][ T8383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8383 comm=syz.3.797 [ 111.528600][ T5824] usb 7-1: Using ep0 maxpacket: 8 [ 111.531031][ T8383] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 111.534847][ T8384] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 111.535462][ T5824] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 111.542442][ T5824] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.546461][ T5824] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.552568][ T5824] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.560007][ T5824] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.565679][ T5824] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.568923][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.709631][ T8397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.714096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.792620][ T5824] usb 7-1: GET_CAPABILITIES returned 0 [ 111.794390][ T5824] usbtmc 7-1:16.0: can't read capabilities [ 111.831859][ T8402] netlink: 'syz.3.804': attribute type 9 has an invalid length. [ 111.838380][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 111.859567][ T8407] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 111.868458][ T8409] FAULT_INJECTION: forcing a failure. [ 111.868458][ T8409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 111.872584][ T8409] CPU: 2 UID: 0 PID: 8409 Comm: syz.1.807 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.872602][ T8409] Tainted: [L]=SOFTLOCKUP [ 111.872606][ T8409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.872612][ T8409] Call Trace: [ 111.872616][ T8409] [ 111.872621][ T8409] dump_stack_lvl+0x100/0x190 [ 111.872650][ T8409] should_fail_ex.cold+0x5/0xa [ 111.872663][ T8409] ? prepare_alloc_pages+0x16d/0x5f0 [ 111.872679][ T8409] should_fail_alloc_page+0xeb/0x140 [ 111.872695][ T8409] prepare_alloc_pages+0x1f0/0x5f0 [ 111.872711][ T8409] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 111.872726][ T8409] ? __lock_acquire+0x49f/0x1a40 [ 111.872743][ T8409] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.872754][ T8409] ? __lock_acquire+0x49f/0x1a40 [ 111.872771][ T8409] ? lock_acquire+0x1b9/0x370 [ 111.872785][ T8409] ? rcu_is_watching+0x12/0xc0 [ 111.872801][ T8409] ? trace_contention_end+0x126/0x160 [ 111.872815][ T8409] ? __mutex_lock+0x26d/0x1bd0 [ 111.872831][ T8409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.872844][ T8409] ? policy_nodemask+0xed/0x4f0 [ 111.872860][ T8409] alloc_pages_mpol+0x1fb/0x540 [ 111.872875][ T8409] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 111.872890][ T8409] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.872904][ T8409] ___kmalloc_large_node+0xe5/0x120 [ 111.872920][ T8409] __kmalloc_large_noprof+0x1c/0x70 [ 111.872935][ T8409] hidp_connection_add+0x3ff/0x1f80 [ 111.872953][ T8409] do_hidp_sock_ioctl.isra.0+0x365/0x520 [ 111.872966][ T8409] ? __pfx_do_hidp_sock_ioctl.isra.0+0x10/0x10 [ 111.872979][ T8409] ? avc_has_extended_perms+0x33a/0x1080 [ 111.873003][ T8409] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 111.873023][ T8409] ? tomoyo_path_number_perm+0x188/0x580 [ 111.873041][ T8409] sock_do_ioctl+0x118/0x280 [ 111.873057][ T8409] ? __pfx_sock_do_ioctl+0x10/0x10 [ 111.873075][ T8409] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 111.873091][ T8409] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 111.873110][ T8409] sock_ioctl+0x599/0x6b0 [ 111.873126][ T8409] ? __pfx_sock_ioctl+0x10/0x10 [ 111.873142][ T8409] ? hook_file_ioctl_common+0x140/0x440 [ 111.873157][ T8409] ? selinux_file_ioctl+0x13b/0x290 [ 111.873172][ T8409] ? selinux_file_ioctl+0xb6/0x290 [ 111.873189][ T8409] ? __pfx_sock_ioctl+0x10/0x10 [ 111.873206][ T8409] __x64_sys_ioctl+0x18e/0x210 [ 111.873221][ T8409] do_syscall_64+0x115/0x870 [ 111.873232][ T8409] ? clear_bhb_loop+0x40/0x90 [ 111.873246][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.873256][ T8409] RIP: 0033:0x7f76b919de99 [ 111.873266][ T8409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.873276][ T8409] RSP: 002b:00007f76ba0ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.873287][ T8409] RAX: ffffffffffffffda RBX: 00007f76b9425fa0 RCX: 00007f76b919de99 [ 111.873294][ T8409] RDX: 0000200000000180 RSI: 00000000400448c8 RDI: 0000000000000005 [ 111.873300][ T8409] RBP: 00007f76ba0ab090 R08: 0000000000000000 R09: 0000000000000000 [ 111.873307][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.873313][ T8409] R13: 00007f76b9426038 R14: 00007f76b9425fa0 R15: 00007fffd759acc8 [ 111.873326][ T8409] [ 111.920004][ T8411] syzkaller0: entered promiscuous mode [ 111.992435][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.992628][ T8411] syzkaller0: entered allmulticast mode [ 112.006310][ T8420] macvtap1: entered promiscuous mode [ 112.011259][ T8420] dummy0: entered promiscuous mode [ 112.018020][ T8420] team0: Device macvtap1 failed to register rx_handler [ 112.042568][ T5530] dummy0: left promiscuous mode [ 112.059597][ T42] audit: type=1404 audit(1785011082.574:7889): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 112.077421][ T42] audit: type=1400 audit(1785011082.594:7890): avc: denied { prog_load } for pid=8424 comm="syz.1.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 112.085377][ T42] audit: type=1404 audit(1785011082.594:7891): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 112.086939][ T8425] tmpfs: Bad value for 'mpol' [ 112.107897][ T8413] block nbd3: shutting down sockets [ 112.200746][ T8435] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 112.204031][ T8435] netlink: 'syz.0.817': attribute type 3 has an invalid length. [ 112.207520][ T8435] netlink: 224 bytes leftover after parsing attributes in process `syz.0.817'. [ 112.239936][ T8437] netlink: 76 bytes leftover after parsing attributes in process `syz.3.818'. [ 112.247626][ T8439] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8439 comm=syz.0.819 [ 112.261695][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 112.303472][ T8444] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input29 [ 112.342472][ T8443] input: syz1 as /devices/virtual/input/input30 [ 112.448200][ T5530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.002460][ T8480] /dev/sg0: Can't lookup blockdev [ 113.007022][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.057234][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.163469][ T5530] usb 7-1: USB disconnect, device number 11 [ 114.194892][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 114.194908][ T42] audit: type=1400 audit(1785011084.704:7955): avc: denied { watch } for pid=8490 comm="syz.2.833" path="/214/bus" dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.207520][ T42] audit: type=1400 audit(1785011084.704:7956): avc: denied { watch_sb watch_reads } for pid=8490 comm="syz.2.833" path="/214/bus" dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.247857][ T42] audit: type=1400 audit(1785011084.764:7957): avc: denied { create } for pid=8490 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.255663][ T42] audit: type=1400 audit(1785011084.764:7958): avc: denied { read } for pid=8490 comm="syz.2.833" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 114.265190][ T42] audit: type=1400 audit(1785011084.764:7959): avc: denied { open } for pid=8490 comm="syz.2.833" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 114.274968][ T42] audit: type=1400 audit(1785011084.764:7960): avc: denied { create } for pid=8490 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.283264][ T42] audit: type=1400 audit(1785011084.764:7961): avc: denied { write } for pid=8490 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.696781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.086857][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.371566][ T8452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.376969][ T42] audit: type=1400 audit(1785011085.894:7962): avc: denied { module_request } for pid=8485 comm="syz.1.832" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792D0F scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 115.454566][ T42] audit: type=1400 audit(1785011085.964:7963): avc: denied { create } for pid=8503 comm="syz.1.837" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.471625][ T42] audit: type=1400 audit(1785011085.984:7964): avc: denied { map } for pid=8503 comm="syz.1.837" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=23927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.487136][ T5530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.493985][ T8508] __nla_validate_parse: 2 callbacks suppressed [ 115.493996][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 115.544867][ T8510] ufs: You didn't specify the type of your ufs filesystem [ 115.544867][ T8510] [ 115.544867][ T8510] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 115.544867][ T8510] [ 115.544867][ T8510] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 115.545108][ T8511] veth1_to_bridge: mtu less than device minimum [ 115.565015][ T8508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.749086][ T8519] bridge_slave_0: left allmulticast mode [ 115.751345][ T8519] bridge_slave_0: left promiscuous mode [ 115.753190][ T8519] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.760407][ T8519] bridge_slave_1: left allmulticast mode [ 115.762801][ T8519] bridge_slave_1: left promiscuous mode [ 115.765264][ T8519] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.774928][ T8519] bond0: (slave bond_slave_0): Releasing backup interface [ 115.780716][ T8519] bond0: (slave bond_slave_1): Releasing backup interface [ 115.786551][ T8519] team0: Port device team_slave_0 removed [ 115.791411][ T8519] team0: Port device team_slave_1 removed [ 115.793580][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.795838][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.803220][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.805495][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.811487][ T8519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.831951][ T8525] team0: Port device xfrm0 added [ 115.853816][ T8527] binder_alloc: 8526: binder_alloc_buf, no vma [ 115.913234][ T8534] syzkaller0: entered promiscuous mode [ 115.915062][ T8534] syzkaller0: entered allmulticast mode [ 115.970548][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.970902][ T8536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8536 comm=syz.1.845 [ 115.979111][ T8536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8536 comm=syz.1.845 [ 115.984115][ T8536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8536 comm=syz.1.845 [ 115.988885][ T8536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8536 comm=syz.1.845 [ 115.994134][ T8536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8536 comm=syz.1.845 [ 115.999724][ T8536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8536 comm=syz.1.845 [ 116.126594][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.282813][ T8540] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.846'. [ 116.607149][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.633467][ T8546] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 117.043913][ T8558] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.167427][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.203642][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=8562 comm=syz.1.853 [ 118.878189][ T8529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.881746][ T8519] tipc: Started in network mode [ 118.884592][ T8519] tipc: Node identity 4e3aaa34ac08, cluster identity 4711 [ 118.891952][ T8519] tipc: Enabled bearer , priority 0 [ 118.897724][ T8565] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 118.954469][ T8573] netlink: 'syz.0.855': attribute type 8 has an invalid length. [ 118.956115][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.858'. [ 118.960454][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 119.049075][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 119.144081][ T8598] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 119.146198][ T8598] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.150812][ T8598] vhci_hcd vhci_hcd.0: Device attached [ 119.153960][ T8599] vhci_hcd: connection closed [ 119.160620][ T13] vhci_hcd vhci_hcd.0: stop threads [ 119.165018][ T13] vhci_hcd vhci_hcd.0: release socket [ 119.169506][ T5530] net_ratelimit: 3 callbacks suppressed [ 119.169516][ T5530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.169561][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 119.228714][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 119.228726][ T42] audit: type=1400 audit(1785011089.744:8028): avc: denied { create } for pid=8607 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.229769][ T8609] Cannot find del_set index 1 as target [ 119.230673][ T42] audit: type=1400 audit(1785011089.744:8029): avc: denied { setopt } for pid=8607 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.245839][ T42] audit: type=1400 audit(1785011089.744:8030): avc: denied { ioctl } for pid=8605 comm="syz.2.870" path="socket:[25249]" dev="sockfs" ino=25249 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.247900][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.254014][ T42] audit: type=1400 audit(1785011089.744:8031): avc: denied { read } for pid=8605 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.382981][ T8614] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input31 [ 119.408385][ T42] audit: type=1400 audit(1785011089.924:8032): avc: denied { accept } for pid=8610 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.415651][ T8616] set match dimension is over the limit! [ 119.460562][ T42] audit: type=1400 audit(1785011089.974:8033): avc: denied { ioctl } for pid=8615 comm="syz.2.873" path="socket:[24111]" dev="sockfs" ino=24111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.548608][ T8616] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.586636][ T42] audit: type=1400 audit(1785011090.104:8034): avc: denied { create } for pid=8615 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.600987][ T42] audit: type=1400 audit(1785011090.104:8035): avc: denied { bind } for pid=8615 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.724856][ T42] audit: type=1400 audit(1785011090.234:8036): avc: denied { name_bind } for pid=8622 comm="syz.0.874" src=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 119.933447][ T42] audit: type=1400 audit(1785011090.444:8037): avc: denied { mount } for pid=8629 comm="syz.0.877" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 120.078538][ T50] IPVS: starting estimator thread 0... [ 120.166634][ T8634] IPVS: using max 45 ests per chain, 108000 per kthread [ 120.287289][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.755162][ T5890] tipc: Node number set to 3794971188 [ 120.918823][ T8651] Cannot find del_set index 1 as target [ 121.030385][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.122792][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.125269][ T8665] xt_hashlimit: size too large, truncated to 1048576 [ 121.189006][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.195094][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.198865][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.202615][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.205508][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.256332][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.259682][ T8676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.321743][ T8694] Cannot find del_set index 1 as target [ 121.343987][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.355996][ T8698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 121.366556][ T8698] openvswitch: netlink: Missing key (keys=40, expected=80) [ 121.393817][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 121.401301][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.501819][ T8710] raw_sendmsg: syz.3.902 forgot to set AF_INET. Fix it! [ 121.606567][ T29] SELinux: failure in sel_netif_sid_slow(), invalid network interface (80) [ 121.646064][ T8725] Cannot find del_set index 1 as target [ 121.671625][ T12] team0: Port device xfrm0 removed [ 121.703251][ T6440] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 121.739458][ T12] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 121.749910][ T12] bond0 (unregistering): Released all slaves [ 121.755597][ T12] bond1 (unregistering): Released all slaves [ 121.763838][ T12] bond2 (unregistering): Released all slaves [ 121.773335][ T12] bond3 (unregistering): Released all slaves [ 121.788234][ T7861] tipc: Resetting bearer [ 121.866704][ T6440] usb 6-1: Using ep0 maxpacket: 32 [ 121.870935][ T6440] usb 6-1: unable to get BOS descriptor or descriptor too short [ 121.880696][ T6440] usb 6-1: string descriptor 0 read error: -22 [ 121.883577][ T6440] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 121.889138][ T6440] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 121.898601][ T6440] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 121.902143][ T6440] dw2102: su3000_power_ctrl: 1, initialized 0 [ 121.904566][ T6440] dvb-usb: bulk message failed: -22 (2/0) [ 121.910718][ T6440] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.915170][ T6440] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 121.919214][ T6440] usb 6-1: media controller created [ 121.922252][ T6440] dvb-usb: bulk message failed: -22 (6/0) [ 121.925815][ T6440] dw2102: i2c transfer failed. [ 121.933098][ T6440] dvb-usb: bulk message failed: -22 (6/0) [ 121.935235][ T6440] dw2102: i2c transfer failed. [ 121.938532][ T6440] dvb-usb: bulk message failed: -22 (6/0) [ 121.940936][ T6440] dw2102: i2c transfer failed. [ 121.942998][ T6440] dvb-usb: bulk message failed: -22 (6/0) [ 121.945302][ T6440] dw2102: i2c transfer failed. [ 121.948715][ T6440] dvb-usb: bulk message failed: -22 (6/0) [ 121.953471][ T6440] dw2102: i2c transfer failed. [ 121.955558][ T6440] dvb-usb: bulk message failed: -22 (6/0) [ 121.965040][ T6440] dw2102: i2c transfer failed. [ 121.968304][ T6440] dvb-usb: MAC address: 02:02:02:02:02:02 [ 121.978918][ T6440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.980110][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 122.001887][ T6440] dvb-usb: bulk message failed: -22 (3/0) [ 122.004345][ T6440] dw2102: command 0x0e transfer failed. [ 122.007111][ T6440] dvb-usb: bulk message failed: -22 (3/0) [ 122.009575][ T6440] dw2102: command 0x0e transfer failed. [ 122.020419][ T12] tipc: Disabling bearer [ 122.025193][ T12] tipc: Left network mode [ 122.029543][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.030373][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.910'. [ 122.031890][ T8668] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.037278][ T8668] bridge_slave_0: entered allmulticast mode [ 122.047237][ T8668] bridge_slave_0: entered promiscuous mode [ 122.104920][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.108189][ T8668] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.111086][ T8668] bridge_slave_1: entered allmulticast mode [ 122.115003][ T8668] bridge_slave_1: entered promiscuous mode [ 122.138145][ T8668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.147477][ T8668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.176922][ T8668] team0: Port device team_slave_0 added [ 122.180193][ T8668] team0: Port device team_slave_1 added [ 122.207212][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.216515][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.226168][ T8668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.263617][ T8769] netlink: 7 bytes leftover after parsing attributes in process `syz.2.914'. [ 122.266652][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'. [ 122.271228][ T8769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.914'. [ 122.280249][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.284310][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.297937][ T8668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.330251][ T6440] dvb-usb: bulk message failed: -22 (3/0) [ 122.335049][ T6440] dw2102: command 0x0e transfer failed. [ 122.339216][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 122.342051][ T34] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 122.347753][ T6440] dvb-usb: bulk message failed: -22 (3/0) [ 122.353239][ T6440] dw2102: command 0x0e transfer failed. [ 122.358368][ T6440] dvb-usb: bulk message failed: -22 (1/0) [ 122.363613][ T6440] dw2102: command 0x51 transfer failed. [ 122.375891][ T8698] dvb-usb: bulk message failed: -22 (22/0) [ 122.383278][ T8698] dw2102: i2c transfer failed. [ 122.392778][ T8668] hsr_slave_0: entered promiscuous mode [ 122.397053][ T6440] DVB: Unable to find symbol ds3000_attach() [ 122.398972][ T6440] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 122.402374][ T8668] hsr_slave_1: entered promiscuous mode [ 122.404542][ T8668] debugfs: 'hsr0' already exists in 'hsr' [ 122.406611][ T8668] Cannot create hsr debugfs directory [ 122.466472][ T6440] rc_core: IR keymap rc-su3000 not found [ 122.468169][ T6440] Registered IR keymap rc-empty [ 122.483887][ T6440] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 122.488151][ T6440] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input32 [ 122.503988][ T6440] dvb-usb: schedule remote query interval to 150 msecs. [ 122.506920][ T6440] dw2102: su3000_power_ctrl: 0, initialized 1 [ 122.509463][ T6440] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 122.516730][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 122.519031][ T6440] usb 6-1: USB disconnect, device number 13 [ 122.525363][ T34] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 122.530457][ T34] usb 8-1: config 0 has no interface number 0 [ 122.532635][ T34] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 122.535696][ T12] hsr_slave_0: left promiscuous mode [ 122.535874][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.540977][ T12] hsr_slave_1: left promiscuous mode [ 122.549454][ T34] usb 8-1: config 0 descriptor?? [ 122.582170][ T12] veth1_macvtap: left promiscuous mode [ 122.584868][ T12] veth0_macvtap: left promiscuous mode [ 122.592444][ T12] veth1_vlan: left promiscuous mode [ 122.594222][ T12] veth0_vlan: left promiscuous mode [ 122.633206][ T6440] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 122.657575][ T34] viperboard 8-1:0.143: version 0.00 found at bus 008 address 016 [ 122.665352][ T34] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 122.673267][ T34] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 122.757826][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.913'. [ 122.762120][ T34] usb 8-1: USB disconnect, device number 16 [ 122.944274][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 123.076071][ T8668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.085035][ T8668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.093733][ T8668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.106038][ T8668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.109723][ T8668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.132304][ T8668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.137732][ T8668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.147774][ T8668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.168981][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5 [ 123.258283][ T5747] Bluetooth: hci0: command tx timeout [ 123.388848][ T12] IPVS: stop unused estimator thread 0... [ 123.452596][ T8668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.468294][ T8668] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.475502][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.478500][ T7871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.501914][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.504556][ T7863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.517994][ T8848] sctp: [Deprecated]: syz.3.932 (pid 8848) Use of int in maxseg socket option. [ 123.517994][ T8848] Use struct sctp_assoc_value instead [ 123.780164][ T8668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.847221][ T8873] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 123.971249][ T8668] veth0_vlan: entered promiscuous mode [ 123.981901][ T8668] veth1_vlan: entered promiscuous mode [ 124.007287][ T8668] veth0_macvtap: entered promiscuous mode [ 124.011820][ T8668] veth1_macvtap: entered promiscuous mode [ 124.023682][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.033191][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.045585][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.050187][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.055035][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.059909][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.142556][ T5890] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 124.168520][ T8894] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.173783][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.942'. [ 124.173870][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.181171][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.198065][ T7871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.208222][ T7871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.238836][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 124.238850][ T42] audit: type=1400 audit(1785011094.754:8102): avc: denied { mounton } for pid=8668 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 124.249150][ T42] audit: type=1400 audit(1785011094.754:8103): avc: denied { mount } for pid=8668 comm="syz-executor" name="/" dev="gadgetfs" ino=9320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 124.257045][ T42] audit: type=1400 audit(1785011094.754:8104): avc: denied { mount } for pid=8668 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.264337][ T42] audit: type=1400 audit(1785011094.754:8105): avc: denied { mounton } for pid=8668 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 124.303487][ T8897] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input33 [ 124.320948][ T5890] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.328830][ T5890] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.332582][ T5890] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 124.343157][ T5890] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 124.349567][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.356082][ T8877] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.362203][ T5890] hub 7-1:1.0: bad descriptor, ignoring hub [ 124.364736][ T5890] hub 7-1:1.0: probe with driver hub failed with error -5 [ 124.370107][ T5890] cdc_wdm 7-1:1.0: skipping garbage [ 124.372397][ T5890] cdc_wdm 7-1:1.0: skipping garbage [ 124.383234][ T5890] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 124.385940][ T5890] cdc_wdm 7-1:1.0: Unknown control protocol [ 124.422580][ T8903] macvlan0: entered promiscuous mode [ 124.426073][ T8903] netlink: 'syz.4.944': attribute type 1 has an invalid length. [ 124.429628][ T8903] netlink: 'syz.4.944': attribute type 2 has an invalid length. [ 124.434546][ T42] audit: type=1400 audit(1785011094.944:8106): avc: denied { map } for pid=8901 comm="syz.4.944" path="socket:[26416]" dev="sockfs" ino=26416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 124.461519][ T42] audit: type=1400 audit(1785011094.974:8107): avc: denied { setopt } for pid=8905 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.473184][ T8906] openvswitch: netlink: IP tunnel dst address not specified [ 124.519305][ T8910] netlink: 'syz.4.948': attribute type 30 has an invalid length. [ 124.545677][ T8910] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 124.551315][ T8910] Cannot find add_set index 0 as target [ 124.562482][ T42] audit: type=1400 audit(1785011095.074:8108): avc: denied { read write } for pid=8875 comm="syz.2.938" name="cdc-wdm0" dev="devtmpfs" ino=3219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 124.571105][ T42] audit: type=1400 audit(1785011095.074:8109): avc: denied { open } for pid=8875 comm="syz.2.938" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 124.615439][ T8919] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 124.623853][ T8919] netlink: 'syz.4.951': attribute type 3 has an invalid length. [ 124.627042][ T8919] netlink: 224 bytes leftover after parsing attributes in process `syz.4.951'. [ 124.679867][ T42] audit: type=1400 audit(1785011095.184:8110): avc: denied { read } for pid=8925 comm="syz.3.954" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 124.712347][ T8930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24262 sclass=netlink_route_socket pid=8930 comm=syz.1.956 [ 124.719340][ T8931] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 124.722256][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.956'. [ 124.745219][ T8936] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 124.754384][ T42] audit: type=1400 audit(1785011095.264:8111): avc: denied { read write } for pid=8938 comm="syz.4.958" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.785289][ T8947] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 124.787322][ T8939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.958'. [ 124.789060][ T8947] netlink: 'syz.1.961': attribute type 3 has an invalid length. [ 124.793365][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.943632][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.947380][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.951345][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.954043][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.023929][ T8962] Bluetooth: MGMT ver 1.23 [ 125.071791][ T8965] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 125.074392][ T8965] binder: 8964:8965 ioctl 4018620d 200000000240 returned -1 [ 125.078664][ T8965] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 125.081262][ T8965] binder: 8964:8965 ioctl 4018620d 200000000040 returned -1 [ 125.134904][ T8965] kvm: MONITOR instruction emulated as NOP! [ 125.236552][ T6440] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 125.244462][ T8968] netlink: 'syz.3.967': attribute type 16 has an invalid length. [ 125.336663][ T5747] Bluetooth: hci0: command tx timeout [ 125.390534][ T6440] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.404779][ T6440] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 125.411791][ T6440] usb 6-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 125.420348][ T6440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.431570][ T6440] usb-storage 6-1:1.0: USB Mass Storage device detected [ 125.450740][ T6440] usb-storage 6-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 125.455792][ T6440] scsi host6: usb-storage 6-1:1.0 [ 125.502675][ T8877] cdc_wdm 7-1:1.0: Error autopm - -16 [ 125.502893][ T847] usb 7-1: USB disconnect, device number 12 [ 125.631078][ T24] usb 6-1: USB disconnect, device number 14 [ 126.076541][ T24] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 126.238101][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 126.241242][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.245251][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.251626][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.256202][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 126.261842][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 126.265236][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.273165][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.278083][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.282368][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 126.288068][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 126.290710][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.295091][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.300490][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.304902][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 126.312281][ T24] usb 9-1: string descriptor 0 read error: -22 [ 126.314969][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 126.319234][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.330171][ T24] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 126.341524][ T9012] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 126.348743][ T9013] netlink: 'syz.1.982': attribute type 1 has an invalid length. [ 126.369555][ T9012] bond2: entered promiscuous mode [ 126.372095][ T9012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.378935][ T9012] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.391250][ T9012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.396158][ T9012] IPv6: NLM_F_CREATE should be set when creating new route [ 126.399265][ T9012] IPv6: NLM_F_CREATE should be set when creating new route [ 126.402262][ T9012] IPv6: NLM_F_CREATE should be set when creating new route [ 126.408116][ T9012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.423650][ T9012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.427691][ T9012] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 126.431997][ T9012] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 126.437229][ T9016] Cannot find del_set index 1 as target [ 126.441948][ T9012] bond2: (slave ip6gre1): making interface the new active one [ 126.445153][ T9012] ip6gre1: entered promiscuous mode [ 126.449150][ T9012] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 126.551894][ T24] usb 9-1: USB disconnect, device number 2 [ 126.734973][ T9040] can0: slcan on ttyS3. [ 126.827060][ T9040] can0 (unregistered): slcan off ttyS3. [ 126.978594][ T9048] Cannot find del_set index 1 as target [ 127.406553][ T5747] Bluetooth: hci0: command tx timeout [ 129.486606][ T5747] Bluetooth: hci0: command tx timeout [ 132.608615][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.118172][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 133.118188][ T42] audit: type=1400 audit(1785011103.634:8135): avc: denied { write } for pid=9070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.185732][ T42] audit: type=1400 audit(1785011103.694:8136): avc: denied { write } for pid=9073 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.699949][ T42] audit: type=1400 audit(1785011105.214:8137): avc: denied { write } for pid=9076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.749346][ T42] audit: type=1400 audit(1785011105.264:8138): avc: denied { write } for pid=9079 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.099028][ T42] audit: type=1400 audit(1785011105.614:8139): avc: denied { write } for pid=9082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.140480][ T42] audit: type=1400 audit(1785011105.654:8140): avc: denied { write } for pid=9085 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.210278][ T42] audit: type=1400 audit(1785011105.724:8141): avc: denied { write } for pid=9088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.266021][ T42] audit: type=1400 audit(1785011105.774:8142): avc: denied { write } for pid=9091 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.037964][ T9096] loop4: detected capacity change from 0 to 7 [ 140.056801][ T9096] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 140.061339][ T9096] loop4: partition table partially beyond EOD, truncated [ 140.064575][ T9096] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 140.106219][ T9099] udevd[9099]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 140.131140][ T9102] Cannot find del_set index 1 as target [ 140.296880][ T9126] validate_nla: 3 callbacks suppressed [ 140.296894][ T9126] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 140.329083][ T9126] 8021q: adding VLAN 0 to HW filter on device bond6 [ 140.345859][ T9126] i2c i2c-0: delete_device: Can't parse I2C address [ 140.346751][ T9132] Cannot find del_set index 1 as target [ 140.395739][ T42] audit: type=1400 audit(1785011110.904:8143): avc: denied { map } for pid=9135 comm="syz.3.1014" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.398364][ T9138] netlink: 'syz.1.1016': attribute type 29 has an invalid length. [ 140.404128][ T42] audit: type=1400 audit(1785011110.904:8144): avc: denied { execute } for pid=9135 comm="syz.3.1014" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.414505][ T9138] netlink: 'syz.1.1016': attribute type 29 has an invalid length. [ 140.420759][ T9138] netlink: 'syz.1.1016': attribute type 29 has an invalid length. [ 140.512699][ T42] audit: type=1400 audit(1785011111.024:8145): avc: denied { map } for pid=9143 comm="syz.1.1019" path="socket:[29747]" dev="sockfs" ino=29747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 140.563363][ T42] audit: type=1400 audit(1785011111.074:8146): avc: denied { ioctl } for pid=9148 comm="syz.3.1021" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30748 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.578506][ T9151] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 140.590811][ T9149] __nla_validate_parse: 4 callbacks suppressed [ 140.590826][ T9149] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1021'. [ 140.690733][ T9162] Cannot find del_set index 1 as target [ 140.739874][ T9155] block nbd2: Device being setup by another task [ 140.743610][ T9166] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 140.743627][ T9166] binder: 9165:9166 ioctl 4018620d 200000003280 returned -1 [ 140.743914][ T9166] binder: 9165:9166 ioctl c0306201 200000000080 returned -14 [ 140.744966][ T9166] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 140.758989][ T9166] binder: 9165:9166 ioctl 4018620d 200000000040 returned -1 [ 140.762086][ T9166] binder: 9165:9166 ioctl c0306201 2000000003c0 returned -14 [ 140.765359][ T9166] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1028'. [ 140.776858][ T9155] block nbd2: Device being setup by another task [ 140.926608][ T9155] block nbd2: Device being setup by another task [ 141.009533][ T9195] Cannot find del_set index 1 as target [ 141.038996][ T42] audit: type=1400 audit(1785011111.554:8147): avc: denied { ioctl } for pid=9196 comm="syz.3.1037" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 141.119320][ T9155] block nbd2: Device being setup by another task [ 141.124128][ T9206] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1040'. [ 141.130065][ T42] audit: type=1326 audit(1785011111.644:8148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.4.1040" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facfc79de99 code=0x0 [ 141.168307][ T9213] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 141.171092][ T9213] binder: 9212:9213 ioctl 4018620d 200000004a80 returned -1 [ 141.175109][ T9213] binder: 9212:9213 ioctl c0306201 200000000040 returned -22 [ 141.177600][ T9155] block nbd2: Device being setup by another task [ 141.179699][ T9213] binder: 9212:9213 ioctl c0306201 200000000640 returned -22 [ 141.206545][ T5825] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 141.241527][ T42] audit: type=1400 audit(1785011111.754:8149): avc: denied { append } for pid=9212 comm="syz.3.1042" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 141.242402][ T9214] orangefs_devreq_open: device cannot be opened in blocking mode [ 141.326498][ T9155] block nbd2: Device being setup by another task [ 141.366976][ T9155] block nbd2: Device being setup by another task [ 141.380065][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.386028][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 141.391377][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 141.397466][ T5825] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 141.400443][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.402879][ T5825] usb 6-1: Product: syz [ 141.404171][ T5825] usb 6-1: Manufacturer: syz [ 141.405701][ T5825] usb 6-1: SerialNumber: syz [ 141.411471][ T5825] usb 6-1: config 0 descriptor?? [ 141.414230][ T9191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.426887][ T9155] block nbd2: shutting down sockets [ 141.476474][ T5825] rc_core: IR keymap rc-streamzap not found [ 141.480039][ T5825] Registered IR keymap rc-empty [ 141.482124][ T5825] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 141.490549][ T5825] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input34 [ 141.511936][ T9234] Cannot find del_set index 1 as target [ 141.728117][ T9247] Process accounting resumed [ 141.800849][ T42] audit: type=1400 audit(1785011112.314:8150): avc: denied { mount } for pid=9258 comm="syz.2.1057" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 141.829509][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.835050][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.850975][ T42] audit: type=1804 audit(1785011112.364:8151): pid=9191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1034" name="/newroot/265/file0" dev="tmpfs" ino=1411 res=1 errno=0 [ 141.855992][ T9191] ref_ctr increment failed for inode: 0x583 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888022f93300 [ 141.862465][ T9190] uprobe: syz.1.1034:9190 failed to unregister, leaking uprobe [ 141.868779][ T5825] usb 6-1: USB disconnect, device number 15 [ 141.899171][ T9265] Cannot find del_set index 1 as target [ 141.960080][ T42] audit: type=1400 audit(1785011112.474:8152): avc: denied { create } for pid=9270 comm="syz.2.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.603025][ T9297] Cannot find del_set index 1 as target [ 142.956529][ T5825] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 143.116554][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 143.122345][ T5825] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 143.125094][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.127657][ T5825] usb 6-1: Product: syz [ 143.128936][ T5825] usb 6-1: Manufacturer: syz [ 143.130449][ T5825] usb 6-1: SerialNumber: syz [ 143.153109][ T5825] usb 6-1: config 0 descriptor?? [ 143.536215][ T9325] Cannot find del_set index 1 as target [ 143.565248][ T5825] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 143.571996][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.576257][ T5825] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 143.584722][ T5825] usb 6-1: media controller created [ 143.602335][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.716712][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 143.733633][ T9336] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 143.742015][ T9336] bond6: (slave lo): Enslaving as an active interface with an up link [ 143.754906][ T9336] bond6 (unregistering): (slave lo): Releasing backup interface [ 143.760949][ T9336] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 143.766076][ T5825] zl10353_read_register: readreg error (reg=127, ret==0) [ 143.766268][ T9336] bond6 (unregistering): Released all slaves [ 143.769486][ T5825] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 143.775425][ T5825] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 144.066519][ T5887] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 144.143782][ T847] usb 6-1: USB disconnect, device number 16 [ 144.168826][ T847] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 144.220256][ T5887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.224382][ T5887] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.228226][ T5887] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 144.232512][ T5887] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 144.236106][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.243099][ T9342] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 144.248440][ T5887] hub 7-1:1.0: bad descriptor, ignoring hub [ 144.250871][ T5887] hub 7-1:1.0: probe with driver hub failed with error -5 [ 144.253952][ T5887] cdc_wdm 7-1:1.0: skipping garbage [ 144.256075][ T5887] cdc_wdm 7-1:1.0: skipping garbage [ 144.263234][ T5887] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 144.265809][ T5887] cdc_wdm 7-1:1.0: Unknown control protocol [ 144.466693][ T847] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 144.616591][ T847] usb 6-1: Using ep0 maxpacket: 16 [ 144.620103][ T847] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.624017][ T847] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 144.629800][ T847] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 144.633457][ T847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.636677][ T847] usb 6-1: Product: syz [ 144.638315][ T847] usb 6-1: Manufacturer: syz [ 144.640173][ T847] usb 6-1: SerialNumber: syz [ 144.644245][ T847] usb 6-1: config 0 descriptor?? [ 145.358876][ T9342] cdc_wdm 7-1:1.0: Error autopm - -16 [ 145.360913][ T5825] usb 7-1: USB disconnect, device number 13 [ 145.478018][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 145.478036][ T42] audit: type=1400 audit(1785011115.994:8171): avc: denied { write } for pid=9368 comm="syz.4.1094" name="/" dev="9p" ino=72377407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.489554][ T42] audit: type=1400 audit(1785011115.994:8172): avc: denied { create } for pid=9368 comm="syz.4.1094" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.496161][ T42] audit: type=1400 audit(1785011115.994:8173): avc: denied { associate } for pid=9368 comm="syz.4.1094" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 145.506062][ T42] audit: type=1400 audit(1785011115.994:8174): avc: denied { read write } for pid=9368 comm="syz.4.1094" name="file1" dev="9p" ino=72377411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.516808][ T42] audit: type=1400 audit(1785011115.994:8175): avc: denied { open } for pid=9368 comm="syz.4.1094" path="/37/file0/file1" dev="9p" ino=72377411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.526173][ T42] audit: type=1400 audit(1785011116.024:8176): avc: denied { write } for pid=9368 comm="syz.4.1094" name="/" dev="9p" ino=72377407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.535379][ T42] audit: type=1400 audit(1785011116.024:8177): avc: denied { create } for pid=9368 comm="syz.4.1094" name="debugfs" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 145.543709][ T42] audit: type=1400 audit(1785011116.024:8178): avc: denied { mounton } for pid=9368 comm="syz.4.1094" path="/37/file0/debugfs" dev="9p" ino=72903409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.552905][ T42] audit: type=1400 audit(1785011116.064:8179): avc: denied { lock } for pid=9366 comm="syz.3.1093" path="socket:[28375]" dev="sockfs" ino=28375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 145.565113][ T42] audit: type=1400 audit(1785011116.084:8180): avc: denied { read } for pid=9368 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.568565][ T9369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1094'. [ 145.580295][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.872251][ T5824] usb 6-1: USB disconnect, device number 17 [ 146.052980][ T8731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.057210][ T8731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.130864][ T8731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.134273][ T8731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.146835][ T1500] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 146.151524][ T9387] input: syz0 as /devices/virtual/input/input35 [ 146.209976][ T8731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.213831][ T8731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.225861][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.232601][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.240738][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.245834][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.253236][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.316812][ T1500] usb 7-1: Using ep0 maxpacket: 16 [ 146.323960][ T1500] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.329178][ T1500] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.336026][ T1500] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 146.344059][ T1500] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.347705][ T1500] usb 7-1: Product: syz [ 146.349517][ T1500] usb 7-1: Manufacturer: syz [ 146.351535][ T1500] usb 7-1: SerialNumber: syz [ 146.358027][ T1500] usb 7-1: config 0 descriptor?? [ 146.596018][ C3] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 146.614414][ T1500] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input36 [ 146.623901][ T1500] imon:send_packet: packet tx failed (-71) [ 146.636824][ T1500] imon 7-1:0.0: panel buttons/knobs setup failed [ 146.696532][ T1500] rc_core: IR keymap rc-imon-pad not found [ 146.699137][ T1500] Registered IR keymap rc-empty [ 146.701292][ T1500] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 146.711540][ T1500] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 146.715810][ T1500] imon:send_packet: packet tx failed (-71) [ 146.746598][ T1500] imon 7-1:0.0: remote input dev register failed [ 146.748678][ T1500] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 146.788592][ T1500] imon 7-1:0.0: unable to initialize intf0, err 0 [ 146.790785][ T1500] imon:imon_probe: failed to initialize context! [ 146.792818][ T1500] imon 7-1:0.0: unable to register, err -19 [ 146.799704][ T1500] usb 7-1: USB disconnect, device number 14 [ 147.132768][ T1500] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 147.288802][ T1500] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 147.293451][ T1500] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 147.298014][ T1500] usb 7-1: config 0 interface 0 has no altsetting 0 [ 147.302716][ T1500] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 147.306570][ T1500] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.309825][ T1500] usb 7-1: Product: syz [ 147.311500][ T1500] usb 7-1: Manufacturer: syz [ 147.313368][ T1500] usb 7-1: SerialNumber: syz [ 147.317586][ T1500] usb 7-1: config 0 descriptor?? [ 147.320671][ T9379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.538202][ C3] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 147.549536][ T1500] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input38 [ 147.571138][ T1500] imon:send_packet: packet tx failed (-71) [ 147.586596][ T1500] imon 7-1:0.0: panel buttons/knobs setup failed [ 147.636523][ T1500] rc_core: IR keymap rc-imon-pad not found [ 147.638392][ T1500] Registered IR keymap rc-empty [ 147.639942][ T1500] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 147.643183][ T1500] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 147.646310][ T1500] imon:send_packet: packet tx failed (-71) [ 147.676490][ T1500] imon 7-1:0.0: remote input dev register failed [ 147.678525][ T1500] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 147.713408][ T1500] imon 7-1:0.0: unable to initialize intf0, err 0 [ 147.715723][ T1500] imon:imon_probe: failed to initialize context! [ 147.717793][ T1500] imon 7-1:0.0: unable to register, err -19 [ 147.721434][ T1500] usb 7-1: USB disconnect, device number 15 [ 147.857413][ T8731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.861627][ T8731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.009958][ T8731] bridge_slave_1: left allmulticast mode [ 148.012258][ T8731] bridge_slave_1: left promiscuous mode [ 148.016801][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.026309][ T8731] bridge_slave_0: left allmulticast mode [ 148.031392][ T8731] bridge_slave_0: left promiscuous mode [ 148.036292][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.181348][ T8731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.182944][ T8731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.183823][ T8731] bond0 (unregistering): Released all slaves [ 148.189626][ T8731] bond1 (unregistering): Released all slaves [ 148.276834][ T5825] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 148.286498][ T5747] Bluetooth: hci0: command tx timeout [ 148.352264][ T9433] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 148.354780][ T9433] netlink: 'syz.2.1111': attribute type 3 has an invalid length. [ 148.357462][ T9433] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1111'. [ 148.384830][ T9438] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1112'. [ 148.387936][ T9438] netlink: 'syz.2.1112': attribute type 6 has an invalid length. [ 148.400474][ T9438] netlink: 'syz.2.1112': attribute type 5 has an invalid length. [ 148.404762][ T9438] netlink: 'syz.2.1112': attribute type 4 has an invalid length. [ 148.448765][ T5825] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.452184][ T5825] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.456950][ T5825] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 148.460279][ T5825] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 148.463201][ T5825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.483574][ T9414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.484848][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1114'. [ 148.539548][ T5825] hub 8-1:1.0: bad descriptor, ignoring hub [ 148.541691][ T5825] hub 8-1:1.0: probe with driver hub failed with error -5 [ 148.544763][ T5825] cdc_wdm 8-1:1.0: skipping garbage [ 148.551432][ T5825] cdc_wdm 8-1:1.0: skipping garbage [ 148.558985][ T5825] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 148.561055][ T5825] cdc_wdm 8-1:1.0: Unknown control protocol [ 148.604015][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 148.739541][ T8731] hsr_slave_0: left promiscuous mode [ 148.743604][ T8731] hsr_slave_1: left promiscuous mode [ 148.748145][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.752671][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.758201][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.760763][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.781329][ T8731] veth1_macvtap: left promiscuous mode [ 148.783104][ T8731] veth0_macvtap: left promiscuous mode [ 148.785428][ T9466] Bluetooth: MGMT ver 1.23 [ 148.793049][ T8731] veth1_vlan: left promiscuous mode [ 148.794928][ T8731] veth0_vlan: left promiscuous mode [ 149.023480][ T9475] can: request_module (can-proto-0) failed. [ 149.033872][ T8731] team0 (unregistering): Port device team_slave_1 removed [ 149.041171][ T8731] team0 (unregistering): Port device team_slave_0 removed [ 149.130679][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7 [ 149.145021][ T9476] batman_adv: batadv0: Adding interface: dummy0 [ 149.148239][ T9476] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.157426][ T9476] batman_adv: batadv0: Interface activated: dummy0 [ 149.203277][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.206181][ T9390] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.208916][ T9390] bridge_slave_0: entered allmulticast mode [ 149.211636][ T9390] bridge_slave_0: entered promiscuous mode [ 149.215616][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.218107][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.220466][ T9390] bridge_slave_1: entered allmulticast mode [ 149.242651][ T9390] bridge_slave_1: entered promiscuous mode [ 149.250474][ T9483] input: syz0 as /devices/virtual/input/input40 [ 149.285626][ T9390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.292020][ T9390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.318854][ T9390] team0: Port device team_slave_0 added [ 149.322134][ T9390] team0: Port device team_slave_1 added [ 149.335783][ T9390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.338042][ T9390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.347063][ T9390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.352052][ T9390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.354720][ T9390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.364832][ T9390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.389245][ T9390] hsr_slave_0: entered promiscuous mode [ 149.391985][ T9390] hsr_slave_1: entered promiscuous mode [ 149.394494][ T9390] debugfs: 'hsr0' already exists in 'hsr' [ 149.397344][ T9390] Cannot create hsr debugfs directory [ 149.400347][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8 [ 149.581632][ T9390] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.588011][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.591767][ T9390] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.601461][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.605297][ T9390] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.611071][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.614768][ T9390] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.624449][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.640573][ T5453] 8021q: adding VLAN 0 to HW filter on device eth9 [ 149.655409][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.658413][ T9390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.661427][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.664262][ T9390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.722402][ T9390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.729878][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.733308][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.736683][ T5825] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 149.754567][ T9390] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.763329][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.766247][ T7871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.776785][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.779664][ T7871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.896600][ T5825] usb 7-1: Using ep0 maxpacket: 16 [ 149.901884][ T5825] usb 7-1: config 0 has no interfaces? [ 149.904261][ T5825] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 149.910163][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.920978][ T5825] usb 7-1: config 0 descriptor?? [ 150.053879][ T9390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.134756][ T9483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.139035][ T9483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.169710][ T5824] usb 7-1: USB disconnect, device number 16 [ 150.225999][ T9390] veth0_vlan: entered promiscuous mode [ 150.234139][ T9390] veth1_vlan: entered promiscuous mode [ 150.255186][ T9390] veth0_macvtap: entered promiscuous mode [ 150.261702][ T9390] veth1_macvtap: entered promiscuous mode [ 150.274298][ T9390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.280504][ T9390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.285977][ T8731] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.292540][ T8731] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.299589][ T8731] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.303108][ T8731] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.366590][ T5747] Bluetooth: hci0: command tx timeout [ 150.374846][ T7890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.379522][ T7890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.404104][ T7861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.408101][ T7861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.485207][ T9525] Cannot find del_set index 1 as target [ 150.585425][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 150.585441][ T42] audit: type=1400 audit(1785011121.094:8198): avc: denied { load_policy } for pid=9528 comm="syz.5.1121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 150.586280][ T9530] SELinux: failed to load policy [ 150.750502][ T9539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.807121][ T9546] Cannot find del_set index 1 as target [ 151.088800][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1132'. [ 151.092922][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1132'. [ 151.105704][ T42] audit: type=1400 audit(1785011121.614:8199): avc: denied { mount } for pid=9559 comm="syz.5.1132" name="/" dev="hugetlbfs" ino=33475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 151.201675][ T9562] ipvlan0: entered promiscuous mode [ 151.204074][ T9562] ipvlan0: entered allmulticast mode [ 151.206496][ T9562] veth0_vlan: entered allmulticast mode [ 151.256179][ T42] audit: type=1400 audit(1785011121.764:8200): avc: denied { write } for pid=9563 comm="syz.2.1134" name="/" dev="9p" ino=72377407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.422609][ T9573] Cannot find del_set index 1 as target [ 151.452471][ T9575] can: request_module (can-proto-0) failed. [ 151.460611][ T9578] can: request_module (can-proto-0) failed. [ 151.492203][ T42] audit: type=1400 audit(1785011122.004:8201): avc: denied { watch_mount } for pid=9581 comm="syz.5.1140" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.643572][ T42] audit: type=1400 audit(1785011122.154:8202): avc: denied { connect } for pid=9592 comm="syz.2.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.790341][ T42] audit: type=1400 audit(1785011122.304:8203): avc: denied { listen } for pid=9599 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.800724][ T9612] Cannot find del_set index 1 as target [ 151.920528][ T42] audit: type=1400 audit(1785011122.434:8204): avc: denied { read } for pid=9621 comm="syz.5.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.962766][ T42] audit: type=1400 audit(1785011122.474:8206): avc: denied { create } for pid=9623 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.971242][ T42] audit: type=1400 audit(1785011122.474:8205): avc: denied { create } for pid=9623 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.977747][ T42] audit: type=1400 audit(1785011122.484:8207): avc: denied { write } for pid=9623 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.978031][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1154'. [ 152.029870][ T9627] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 152.033328][ T9414] cdc_wdm 8-1:1.0: Error autopm - -16 [ 152.033581][ T847] usb 8-1: USB disconnect, device number 17 [ 152.035953][ T9627] random: crng reseeded on system resumption [ 152.240651][ T9637] Cannot find del_set index 1 as target [ 152.349986][ T9644] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 152.361359][ T9644] romfs: unable to set blocksize [ 152.361359][ T9644] [ 152.456621][ T5747] Bluetooth: hci0: command tx timeout [ 152.719390][ T1500] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 152.795095][ T9659] fuse: Unknown parameter 'g' [ 152.800896][ T9659] fuseblk: Invalid rootmode [ 152.806734][ T5890] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 152.898111][ T1500] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.903832][ T1500] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.907569][ T1500] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 152.911433][ T1500] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 152.914922][ T1500] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.927711][ T9650] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 152.931569][ T1500] hub 10-1:1.0: bad descriptor, ignoring hub [ 152.933491][ T1500] hub 10-1:1.0: probe with driver hub failed with error -5 [ 152.935926][ T1500] cdc_wdm 10-1:1.0: skipping garbage [ 152.938046][ T1500] cdc_wdm 10-1:1.0: skipping garbage [ 152.940582][ T1500] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 152.942461][ T1500] cdc_wdm 10-1:1.0: Unknown control protocol [ 152.986683][ T5890] usb 8-1: Using ep0 maxpacket: 32 [ 153.001657][ T5890] usb 8-1: config index 0 descriptor too short (expected 15270, got 18) [ 153.008918][ T5890] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 153.015926][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.019382][ T5890] usb 8-1: Product: syz [ 153.020646][ T5890] usb 8-1: Manufacturer: syz [ 153.022156][ T5890] usb 8-1: SerialNumber: syz [ 153.024834][ T5890] usb 8-1: config 0 descriptor?? [ 153.029953][ T5890] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 153.032798][ T5890] dvb-usb: bulk message failed: -22 (4/0) [ 153.035061][ T5890] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.043948][ T5890] dvb-usb: bulk message failed: -22 (5/0) [ 153.047817][ T5890] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.054401][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.058432][ T5890] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 153.060877][ T5890] usb 8-1: media controller created [ 153.067870][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.077975][ T5890] usb 8-1: selecting invalid altsetting 3 [ 153.079800][ T5890] ttusb2: set interface to alts=3 failed [ 153.111576][ T5890] DVB: Unable to find symbol tda10086_attach() [ 153.113717][ T5890] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 153.117782][ T5890] dvb-usb: bulk message failed: -22 (4/0) [ 153.120081][ T5890] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.124133][ T5890] dvb-usb: bulk message failed: -22 (5/0) [ 153.129976][ T5890] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.134206][ T5890] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 153.237044][ T9674] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 153.267631][ T9632] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 153.272174][ T9632] dvb-usb: bulk message failed: -22 (7/0) [ 153.275859][ T9632] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 153.280160][ T9632] ttusb2: i2c transfer failed. [ 153.293442][ T9632] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input42 [ 153.325575][ T847] usb 8-1: USB disconnect, device number 18 [ 153.361614][ T847] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 153.389380][ T9680] tipc: Started in network mode [ 153.391535][ T9680] tipc: Node identity ac14140f, cluster identity 4711 [ 153.396285][ T9680] tipc: New replicast peer: 172.30.0.2 [ 153.399641][ T9680] tipc: Enabled bearer , priority 10 [ 153.750407][ T9696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9696 comm=syz.1.1182 [ 153.754613][ T9696] netlink: 'syz.1.1182': attribute type 12 has an invalid length. [ 153.757644][ T9696] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1182'. [ 153.842143][ T9699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.844693][ T9699] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.858002][ T9699] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.867083][ T9699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.869144][ T9699] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.873050][ T9699] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.883051][ T9699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.885262][ T9699] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.889635][ T9699] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.898549][ T9699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.901175][ T9699] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.955345][ T9699] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.041391][ T9650] cdc_wdm 10-1:1.0: Error autopm - -16 [ 154.041584][ T1500] usb 10-1: USB disconnect, device number 2 [ 154.100294][ T9713] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 154.111359][ T9713] Invalid source name [ 154.112933][ T9713] UBIFS error (pid: 9713): cannot open "ubifs", error -22 [ 154.113945][ T9713] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 154.130904][ T9713] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 154.216927][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'. [ 154.383018][ T9722] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.428428][ T5747] Bluetooth: hci1: unexpected subevent 0x0a length: 17 < 30 [ 154.433589][ T35] blk_print_req_error: 2 callbacks suppressed [ 154.433604][ T35] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 154.516634][ T24] tipc: Node number set to 2886997007 [ 154.786098][ T9765] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1206'. [ 154.809138][ T9765] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 154.826003][ T9765] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 154.830557][ T9765] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 154.833449][ T9765] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 154.835718][ T9765] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 154.839022][ T9765] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 154.859617][ T9765] pci 0000:00:01.0: Adding to iommu group 1 [ 154.866441][ T9765] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 154.868941][ T9765] pci 0000:00:01.0: vgaarb: bridge control possible [ 154.871048][ T9765] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 154.881379][ T9765] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 154.887327][ T9765] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 154.894784][ T9765] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 154.899221][ T9765] pci 0000:00:04.0: PCI bridge to [bus 01] [ 154.901152][ T9765] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 154.905176][ T9765] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 154.909175][ T9765] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 154.962829][ T9765] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 154.966596][ T9765] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 154.971360][ T9765] [drm] features: -virgl +edid -resource_blob -host_visible [ 154.971377][ T9765] [drm] features: -context_init -blob_alignment [ 154.993054][ T9765] ------------[ cut here ]------------ [ 154.996734][ T9765] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 155.001441][ T9765] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa6/0x420, CPU#2: syz.3.1206/9765 [ 155.005934][ T9765] Modules linked in: [ 155.008774][ T9765] CPU: 2 UID: 0 PID: 9765 Comm: syz.3.1206 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 155.013337][ T9765] Tainted: [L]=SOFTLOCKUP [ 155.015337][ T9765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.019922][ T9765] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 155.022638][ T9765] Code: 48 8b 43 60 48 8d 58 a0 48 3d 70 7e d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 c5 79 5d 09 85 c0 75 e0 48 8d 3d 1a 28 ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 45 7b 5d 09 48 85 c0 0f [ 155.030872][ T9765] RSP: 0018:ffffc900068d6f58 EFLAGS: 00010246 [ 155.033483][ T9765] RAX: 0000000000000000 RBX: ffff8881000a1680 RCX: fffff52000d1adc6 [ 155.036867][ T9765] RDX: 0000000000000000 RSI: ffffffff8c6f79e0 RDI: ffffffff912744c0 [ 155.039958][ T9765] RBP: ffffffff8c6f79e0 R08: 0000000000000000 R09: fffffbfff2244dba [ 155.042702][ T9765] R10: ffffc900068d6f58 R11: 0000000000000000 R12: 0000000000000000 [ 155.045250][ T9765] R13: ffffc900068d6fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 155.048270][ T9765] FS: 00007f22515f66c0(0000) GS:ffff8880d5fde000(0000) knlGS:0000000000000000 [ 155.051237][ T9765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.053337][ T9765] CR2: 00007f22515d5d58 CR3: 000000005f63a000 CR4: 0000000000352ef0 [ 155.055791][ T9765] DR0: 2000000000000005 DR1: 0000000000000005 DR2: 0000000000040004 [ 155.058804][ T9765] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 155.061674][ T9765] Call Trace: [ 155.063006][ T9765] [ 155.064152][ T9765] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 155.066002][ T9765] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 155.067963][ T9765] ? vp_modern_set_queue_enable+0x43/0x90 [ 155.069523][ T9765] ? iowrite16+0x33/0xb0 [ 155.070720][ T9765] ? vp_modern_find_vqs+0xd2/0x100 [ 155.072124][ T9765] virtio_gpu_init.cold+0x51c/0x126e [ 155.073651][ T9765] ? lockdep_hardirqs_on+0x78/0x100 [ 155.075436][ T9765] ? __pfx_virtio_gpu_init+0x10/0x10 [ 155.077330][ T9765] ? console_unlock+0x1c9/0x260 [ 155.079079][ T9765] ? __pfx_console_unlock+0x10/0x10 [ 155.081072][ T9765] ? con_is_bound+0x141/0x190 [ 155.082980][ T9765] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 155.085183][ T9765] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 155.088262][ T9765] ? vga_remove_vgacon+0x21/0x30 [ 155.091001][ T9765] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 155.093688][ T9765] virtio_gpu_probe+0x21c/0x360 [ 155.095620][ T9765] virtio_dev_probe+0x6a2/0xbe0 [ 155.097503][ T9765] ? __pfx_virtio_dev_probe+0x10/0x10 [ 155.099496][ T9765] ? kernfs_create_link+0x1bd/0x240 [ 155.101130][ T9765] ? kernfs_put+0x3f/0x60 [ 155.102647][ T9765] ? sysfs_do_create_link_sd+0xbb/0x140 [ 155.104533][ T9765] ? sysfs_create_link+0x68/0xc0 [ 155.106083][ T9765] ? __pfx_virtio_dev_probe+0x10/0x10 [ 155.108050][ T9765] really_probe+0x241/0xa60 [ 155.109499][ T9765] __driver_probe_device+0x20e/0x450 [ 155.111135][ T9765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.112988][ T9765] driver_probe_device+0x4a/0x140 [ 155.114528][ T9765] __device_attach_driver+0x1df/0x320 [ 155.116485][ T9765] ? __pfx___device_attach_driver+0x10/0x10 [ 155.118380][ T9765] bus_for_each_drv+0x159/0x1e0 [ 155.119889][ T9765] ? __pfx_bus_for_each_drv+0x10/0x10 [ 155.121581][ T9765] ? lockdep_hardirqs_on+0x78/0x100 [ 155.123271][ T9765] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.125136][ T9765] __device_attach+0x1e4/0x4d0 [ 155.126743][ T9765] ? __pfx___device_attach+0x10/0x10 [ 155.128392][ T9765] ? do_raw_spin_unlock+0x145/0x1e0 [ 155.130185][ T9765] device_initial_probe+0xaf/0xd0 [ 155.132188][ T9765] bus_probe_device+0x64/0x160 [ 155.134007][ T9765] device_add+0x121d/0x1970 [ 155.135619][ T9765] ? __pfx_device_add+0x10/0x10 [ 155.137890][ T9765] ? __pfx___might_resched+0x10/0x10 [ 155.139530][ T9765] ? __init_waitqueue_head+0xca/0x150 [ 155.141196][ T9765] ? ioread8+0x8f/0xd0 [ 155.142475][ T9765] register_virtio_device+0x4f0/0x5d0 [ 155.144369][ T9765] ? __pfx_register_virtio_device+0x10/0x10 [ 155.147005][ T9765] ? __pfx_pcibios_set_master+0x10/0x10 [ 155.148773][ T9765] ? __raw_spin_lock_init+0x3a/0x110 [ 155.150353][ T9765] ? __pfx_virtio_pci_probe+0x10/0x10 [ 155.151972][ T9765] virtio_pci_probe+0x255/0x410 [ 155.153776][ T9765] local_pci_probe+0xdd/0x1b0 [ 155.155706][ T9765] pci_call_probe+0x176/0x800 [ 155.157743][ T9765] ? __pfx_pci_call_probe+0x10/0x10 [ 155.159901][ T9765] ? find_held_lock+0x2b/0x80 [ 155.162059][ T9765] ? pci_match_device+0x450/0x5f0 [ 155.164175][ T9765] ? pci_match_device+0x450/0x5f0 [ 155.166302][ T9765] ? pci_match_id+0x34d/0x3f0 [ 155.168976][ T9765] ? pci_match_device+0xb4/0x5f0 [ 155.171097][ T9765] pci_device_probe+0x1cd/0x370 [ 155.173236][ T9765] ? __pfx_pci_device_probe+0x10/0x10 [ 155.175470][ T9765] really_probe+0x241/0xa60 [ 155.177600][ T9765] __driver_probe_device+0x20e/0x450 [ 155.179838][ T9765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.182289][ T9765] driver_probe_device+0x4a/0x140 [ 155.184414][ T9765] __device_attach_driver+0x1df/0x320 [ 155.186767][ T9765] ? __pfx___device_attach_driver+0x10/0x10 [ 155.189148][ T9765] bus_for_each_drv+0x159/0x1e0 [ 155.191097][ T9765] ? __pfx_bus_for_each_drv+0x10/0x10 [ 155.193291][ T9765] ? lockdep_hardirqs_on+0x78/0x100 [ 155.195438][ T9765] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.198282][ T9765] __device_attach+0x1e4/0x4d0 [ 155.200235][ T9765] ? __pfx___device_attach+0x10/0x10 [ 155.202469][ T9765] ? do_raw_spin_unlock+0x145/0x1e0 [ 155.204675][ T9765] device_initial_probe+0xaf/0xd0 [ 155.206935][ T9765] pci_bus_add_device+0xc5/0x100 [ 155.209068][ T9765] pci_bus_add_devices+0x9a/0x1f0 [ 155.211217][ T9765] pci_rescan_bus+0x2a/0x40 [ 155.213182][ T9765] rescan_store+0xfb/0x130 [ 155.215091][ T9765] ? __pfx_rescan_store+0x10/0x10 [ 155.217358][ T9765] ? sysfs_file_kobj+0xe4/0x290 [ 155.219416][ T9765] ? __pfx_rescan_store+0x10/0x10 [ 155.221501][ T9765] bus_attr_store+0x74/0xb0 [ 155.223410][ T9765] ? __pfx_bus_attr_store+0x10/0x10 [ 155.225582][ T9765] sysfs_kf_write+0xf2/0x150 [ 155.227967][ T9765] kernfs_fop_write_iter+0x3e0/0x5f0 [ 155.230193][ T9765] ? __pfx_sysfs_kf_write+0x10/0x10 [ 155.232404][ T9765] vfs_write+0x6ac/0x1050 [ 155.234236][ T9765] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 155.236824][ T9765] ? __pfx_vfs_write+0x10/0x10 [ 155.238864][ T9765] ksys_write+0x12a/0x250 [ 155.240697][ T9765] ? __pfx_ksys_write+0x10/0x10 [ 155.242759][ T9765] do_syscall_64+0x115/0x870 [ 155.244719][ T9765] ? clear_bhb_loop+0x40/0x90 [ 155.246818][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.249263][ T9765] RIP: 0033:0x7f225339de99 [ 155.251146][ T9765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.259498][ T9765] RSP: 002b:00007f22515f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.262390][ T9765] RAX: ffffffffffffffda RBX: 00007f2253625fa0 RCX: 00007f225339de99 [ 155.264819][ T9765] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 000000000000000f [ 155.267335][ T9765] RBP: 00007f2253433eaf R08: 0000000000000000 R09: 0000000000000000 [ 155.269745][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.272168][ T9765] R13: 00007f2253626038 R14: 00007f2253625fa0 R15: 00007ffed9b199a8 [ 155.274586][ T9765] [ 155.275695][ T9765] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.278268][ T9765] CPU: 2 UID: 0 PID: 9765 Comm: syz.3.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.282558][ T9765] Tainted: [L]=SOFTLOCKUP [ 155.284318][ T9765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.288393][ T9765] Call Trace: [ 155.289765][ T9765] [ 155.291004][ T9765] dump_stack_lvl+0x100/0x190 [ 155.292948][ T9765] vpanic+0x552/0x970 [ 155.294586][ T9765] ? __pfx_vpanic+0x10/0x10 [ 155.296458][ T9765] panic+0xd1/0xe0 [ 155.297988][ T9765] ? __pfx_panic+0x10/0x10 [ 155.299821][ T9765] ? check_panic_on_warn+0x1f/0x90 [ 155.301899][ T9765] check_panic_on_warn.cold+0x19/0x34 [ 155.304059][ T9765] ? __kmem_cache_create_args+0xa6/0x420 [ 155.306342][ T9765] __warn.cold+0x191/0x318 [ 155.307748][ T9765] __report_bug+0x30f/0x440 [ 155.309163][ T9765] ? __kmem_cache_create_args+0xa6/0x420 [ 155.310898][ T9765] ? __pfx___report_bug+0x10/0x10 [ 155.312463][ T9765] ? __mutex_lock+0x26d/0x1bd0 [ 155.313937][ T9765] ? __kmem_cache_create_args+0x44/0x420 [ 155.315690][ T9765] report_bug_entry+0xe1/0x290 [ 155.317182][ T9765] ? __kmem_cache_create_args+0xa9/0x420 [ 155.318890][ T9765] handle_bug+0x1cd/0x2a0 [ 155.320222][ T9765] exc_invalid_op+0x17/0x50 [ 155.321639][ T9765] asm_exc_invalid_op+0x1a/0x20 [ 155.323136][ T9765] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 155.325079][ T9765] Code: 48 8b 43 60 48 8d 58 a0 48 3d 70 7e d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 c5 79 5d 09 85 c0 75 e0 48 8d 3d 1a 28 ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 45 7b 5d 09 48 85 c0 0f [ 155.330943][ T9765] RSP: 0018:ffffc900068d6f58 EFLAGS: 00010246 [ 155.332811][ T9765] RAX: 0000000000000000 RBX: ffff8881000a1680 RCX: fffff52000d1adc6 [ 155.335216][ T9765] RDX: 0000000000000000 RSI: ffffffff8c6f79e0 RDI: ffffffff912744c0 [ 155.337680][ T9765] RBP: ffffffff8c6f79e0 R08: 0000000000000000 R09: fffffbfff2244dba [ 155.340099][ T9765] R10: ffffc900068d6f58 R11: 0000000000000000 R12: 0000000000000000 [ 155.342524][ T9765] R13: ffffc900068d6fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 155.344985][ T9765] ? __kmem_cache_create_args+0x9b/0x420 [ 155.346741][ T9765] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 155.348393][ T9765] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 155.350209][ T9765] ? vp_modern_set_queue_enable+0x43/0x90 [ 155.351972][ T9765] ? iowrite16+0x33/0xb0 [ 155.353306][ T9765] ? vp_modern_find_vqs+0xd2/0x100 [ 155.354933][ T9765] virtio_gpu_init.cold+0x51c/0x126e [ 155.356763][ T9765] ? lockdep_hardirqs_on+0x78/0x100 [ 155.358364][ T9765] ? __pfx_virtio_gpu_init+0x10/0x10 [ 155.360019][ T9765] ? console_unlock+0x1c9/0x260 [ 155.361546][ T9765] ? __pfx_console_unlock+0x10/0x10 [ 155.363150][ T9765] ? con_is_bound+0x141/0x190 [ 155.364625][ T9765] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 155.366389][ T9765] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 155.368180][ T9765] ? vga_remove_vgacon+0x21/0x30 [ 155.369725][ T9765] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 155.371874][ T9765] virtio_gpu_probe+0x21c/0x360 [ 155.373397][ T9765] virtio_dev_probe+0x6a2/0xbe0 [ 155.374943][ T9765] ? __pfx_virtio_dev_probe+0x10/0x10 [ 155.376614][ T9765] ? kernfs_create_link+0x1bd/0x240 [ 155.378219][ T9765] ? kernfs_put+0x3f/0x60 [ 155.379556][ T9765] ? sysfs_do_create_link_sd+0xbb/0x140 [ 155.381279][ T9765] ? sysfs_create_link+0x68/0xc0 [ 155.382809][ T9765] ? __pfx_virtio_dev_probe+0x10/0x10 [ 155.384464][ T9765] really_probe+0x241/0xa60 [ 155.385904][ T9765] __driver_probe_device+0x20e/0x450 [ 155.387536][ T9765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.389370][ T9765] driver_probe_device+0x4a/0x140 [ 155.390942][ T9765] __device_attach_driver+0x1df/0x320 [ 155.392604][ T9765] ? __pfx___device_attach_driver+0x10/0x10 [ 155.394411][ T9765] bus_for_each_drv+0x159/0x1e0 [ 155.396042][ T9765] ? __pfx_bus_for_each_drv+0x10/0x10 [ 155.397724][ T9765] ? lockdep_hardirqs_on+0x78/0x100 [ 155.399318][ T9765] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.401107][ T9765] __device_attach+0x1e4/0x4d0 [ 155.402578][ T9765] ? __pfx___device_attach+0x10/0x10 [ 155.404204][ T9765] ? do_raw_spin_unlock+0x145/0x1e0 [ 155.405869][ T9765] device_initial_probe+0xaf/0xd0 [ 155.407444][ T9765] bus_probe_device+0x64/0x160 [ 155.408929][ T9765] device_add+0x121d/0x1970 [ 155.410357][ T9765] ? __pfx_device_add+0x10/0x10 [ 155.411860][ T9765] ? __pfx___might_resched+0x10/0x10 [ 155.413513][ T9765] ? __init_waitqueue_head+0xca/0x150 [ 155.415184][ T9765] ? ioread8+0x8f/0xd0 [ 155.416516][ T9765] register_virtio_device+0x4f0/0x5d0 [ 155.418170][ T9765] ? __pfx_register_virtio_device+0x10/0x10 [ 155.419979][ T9765] ? __pfx_pcibios_set_master+0x10/0x10 [ 155.421683][ T9765] ? __raw_spin_lock_init+0x3a/0x110 [ 155.423304][ T9765] ? __pfx_virtio_pci_probe+0x10/0x10 [ 155.424983][ T9765] virtio_pci_probe+0x255/0x410 [ 155.426481][ T9765] local_pci_probe+0xdd/0x1b0 [ 155.428416][ T9765] pci_call_probe+0x176/0x800 [ 155.430381][ T9765] ? __pfx_pci_call_probe+0x10/0x10 [ 155.432501][ T9765] ? find_held_lock+0x2b/0x80 [ 155.434415][ T9765] ? pci_match_device+0x450/0x5f0 [ 155.436314][ T9765] ? pci_match_device+0x450/0x5f0 [ 155.437899][ T9765] ? pci_match_id+0x34d/0x3f0 [ 155.439358][ T9765] ? pci_match_device+0xb4/0x5f0 [ 155.440893][ T9765] pci_device_probe+0x1cd/0x370 [ 155.442390][ T9765] ? __pfx_pci_device_probe+0x10/0x10 [ 155.444024][ T9765] really_probe+0x241/0xa60 [ 155.445502][ T9765] __driver_probe_device+0x20e/0x450 [ 155.447134][ T9765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.448960][ T9765] driver_probe_device+0x4a/0x140 [ 155.450529][ T9765] __device_attach_driver+0x1df/0x320 [ 155.452164][ T9765] ? __pfx___device_attach_driver+0x10/0x10 [ 155.453968][ T9765] bus_for_each_drv+0x159/0x1e0 [ 155.455504][ T9765] ? __pfx_bus_for_each_drv+0x10/0x10 [ 155.457202][ T9765] ? lockdep_hardirqs_on+0x78/0x100 [ 155.458808][ T9765] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.460615][ T9765] __device_attach+0x1e4/0x4d0 [ 155.462095][ T9765] ? __pfx___device_attach+0x10/0x10 [ 155.463724][ T9765] ? do_raw_spin_unlock+0x145/0x1e0 [ 155.465549][ T9765] device_initial_probe+0xaf/0xd0 [ 155.467181][ T9765] pci_bus_add_device+0xc5/0x100 [ 155.468746][ T9765] pci_bus_add_devices+0x9a/0x1f0 [ 155.470330][ T9765] pci_rescan_bus+0x2a/0x40 [ 155.471742][ T9765] rescan_store+0xfb/0x130 [ 155.473132][ T9765] ? __pfx_rescan_store+0x10/0x10 [ 155.474682][ T9765] ? sysfs_file_kobj+0xe4/0x290 [ 155.476312][ T9765] ? __pfx_rescan_store+0x10/0x10 [ 155.477870][ T9765] bus_attr_store+0x74/0xb0 [ 155.479477][ T9765] ? __pfx_bus_attr_store+0x10/0x10 [ 155.481611][ T9765] sysfs_kf_write+0xf2/0x150 [ 155.483514][ T9765] kernfs_fop_write_iter+0x3e0/0x5f0 [ 155.485663][ T9765] ? __pfx_sysfs_kf_write+0x10/0x10 [ 155.487372][ T9765] vfs_write+0x6ac/0x1050 [ 155.488726][ T9765] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 155.490544][ T9765] ? __pfx_vfs_write+0x10/0x10 [ 155.492036][ T9765] ksys_write+0x12a/0x250 [ 155.493392][ T9765] ? __pfx_ksys_write+0x10/0x10 [ 155.495023][ T9765] do_syscall_64+0x115/0x870 [ 155.496989][ T9765] ? clear_bhb_loop+0x40/0x90 [ 155.498937][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.501394][ T9765] RIP: 0033:0x7f225339de99 [ 155.503270][ T9765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.511085][ T9765] RSP: 002b:00007f22515f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.514521][ T9765] RAX: ffffffffffffffda RBX: 00007f2253625fa0 RCX: 00007f225339de99 [ 155.517756][ T9765] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 000000000000000f [ 155.520989][ T9765] RBP: 00007f2253433eaf R08: 0000000000000000 R09: 0000000000000000 [ 155.524212][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.527476][ T9765] R13: 00007f2253626038 R14: 00007f2253625fa0 R15: 00007ffed9b199a8 [ 155.530770][ T9765] [ 155.532784][ T9765] Kernel Offset: disabled [ 155.534589][ T9765] Rebooting in 86400 seconds..