last executing test programs: 2m15.64163708s ago: executing program 2 (id=247): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x2002}}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x1, 0xa}, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000280)={0x2e, 0x5, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x22, &(0x7f0000000200)=@new_dev={0x1, 0xeec}}}, 0x0) 2m15.54007786s ago: executing program 2 (id=248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1001, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 2m15.456203107s ago: executing program 2 (id=250): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x181402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) 2m15.455845576s ago: executing program 2 (id=251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffff", 0x48}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m15.254160054s ago: executing program 2 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m15.244772119s ago: executing program 2 (id=255): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m55.475471226s ago: executing program 32 (id=255): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m42.928646242s ago: executing program 1 (id=501): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x80, 0x2, 0x0, @empty=0x1c, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1m42.806109254s ago: executing program 1 (id=503): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x6}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) 1m41.92101637s ago: executing program 1 (id=519): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1m41.822778436s ago: executing program 1 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m41.80870891s ago: executing program 1 (id=522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1m41.170222495s ago: executing program 1 (id=533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0xfe, 0x1007}]}) syz_open_dev$MSR(0x0, 0xc, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m41.116443264s ago: executing program 33 (id=533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0xfe, 0x1007}]}) syz_open_dev$MSR(0x0, 0xc, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m3.415120061s ago: executing program 5 (id=955): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x2, 0x3, 0x54c, 0x5c4, 0x1, 0x0, "0501"}}, 0x11a) read(r0, &(0x7f00000002c0), 0x100) read(r0, &(0x7f0000000300), 0x100) read(r0, &(0x7f0000000340), 0x100) write(r0, &(0x7f0000000380)="0a00000001", 0x5) mkdir(&(0x7f00000003c0)='sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000440)='sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='sys/bus/hid/drivers/playstation/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000580)='0003:054C:05C4.0002', 0x13) 1m3.326112893s ago: executing program 5 (id=956): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1m3.061105485s ago: executing program 5 (id=961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x4000000000, 0x1, 0x17f, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x40000002, 0x0, 0xf, 0x40, 0x5, 0x0, 0x8000000bdb], 0x54000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2014cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x2000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m2.051556923s ago: executing program 5 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 1m1.955177215s ago: executing program 5 (id=972): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m1.902359366s ago: executing program 5 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x68) userfaultfd(0x801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 48.335651849s ago: executing program 0 (id=1053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 48.228589528s ago: executing program 0 (id=1054): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 48.035275453s ago: executing program 0 (id=1057): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x1000}, @fd, @fda={0x66646185, 0x2, 0x2, 0x1a}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1040}], 0x0, 0x0, 0x0}) 48.007130926s ago: executing program 0 (id=1058): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) close(r0) 47.813154346s ago: executing program 0 (id=1060): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a01"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 47.465574778s ago: executing program 0 (id=1063): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 47.455371543s ago: executing program 34 (id=1063): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 46.886153424s ago: executing program 35 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x68) userfaultfd(0x801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.910128263s ago: executing program 4 (id=1501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) io_uring_setup(0x4fee, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) 3.818174469s ago: executing program 4 (id=1502): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) brk(0x200000ffc000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.242728406s ago: executing program 7 (id=1510): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @local}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f00000002d0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000300)="80000028000000010000000000000000", 0x10) 2.927806049s ago: executing program 4 (id=1520): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x3b, {0x0, "49bf563412efbeadde00b80100000048ba00010400000000004889024c89f8488902f4"}}, @nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x1b, {"49bf0000000000000000"}}, @nested_vmresume={0x130, 0x18}], 0xb6}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x100000000000001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x1deadbeef123456) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 2.679972436s ago: executing program 4 (id=1524): syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d757b731540a"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="04aa826db9e603f8a5"]}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x409}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.672648831s ago: executing program 6 (id=1525): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0xa, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000e80)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1, 0x3a, 'a$-\\\'%$\']', 0x3a, '!*!\xcf9-:{,$\'[[)\'', 0x3a, './file0'}, 0x3f) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 2.415422316s ago: executing program 6 (id=1526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="66b8a1ac78390f23c80f21f86635080030000f23f8363e115000d38000160f20d86635080000000f22d80f22e567640f184f00660ffa6e66d9e40f011f0f00a40020", 0x42}], 0x1, 0x21, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b81003e0fe660fd554879a", 0xb}], 0x1, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000003018)='\aP', 0x2) write(0xffffffffffffffff, &(0x7f0000005fb8)="87", 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.313300159s ago: executing program 7 (id=1527): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r5, @ANYBLOB="08000200ac14"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 2.193055635s ago: executing program 7 (id=1528): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.192672623s ago: executing program 6 (id=1529): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x28}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4800) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="07002504", @ANYRES16=r2, @ANYBLOB="100027bd7000ffdbdf255500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000700000011000000"], 0x28}}, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_pts(r3, 0x20402) 2.105531384s ago: executing program 6 (id=1530): socket(0x1, 0x3, 0x6) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000340)=ANY=[], 0x200002e6) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x378) fcntl$setpipe(r0, 0x407, 0x7000000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x6}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 1.99392416s ago: executing program 3 (id=1532): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.905749695s ago: executing program 3 (id=1533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4ffe, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 1.905453529s ago: executing program 4 (id=1534): socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@map, 0x24, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.814508515s ago: executing program 4 (id=1535): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.755673934s ago: executing program 3 (id=1536): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000100)=0xe256) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='8', 0x1) 1.734459645s ago: executing program 3 (id=1537): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000005c0)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0x26000, {}, 0x1, 0xc}, {"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", "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"}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.576101486s ago: executing program 3 (id=1538): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r4}, &(0x7f0000000d40), &(0x7f0000000d80)=r0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.529362044s ago: executing program 3 (id=1539): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xe, 0xfff5}, {0x5, 0xfff2}}}, 0x24}}, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.389845982s ago: executing program 6 (id=1540): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) setpgid(0x0, r3) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x16) 1.287807902s ago: executing program 7 (id=1541): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)) 1.214093637s ago: executing program 6 (id=1542): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) 1.20198822s ago: executing program 7 (id=1543): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='my_configfs/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='128\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='my_configfs/nullb/nullb1/size\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1024\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='1\x00', 0x2) 0s ago: executing program 7 (id=1544): setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') kernel console output (not intermixed with test programs): sb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 110.751844][ T5888] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 110.754631][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.759566][ T5888] usb 9-1: config 0 descriptor?? [ 110.964165][ T42] audit: type=1400 audit(1785747929.086:650): avc: denied { create } for pid=7753 comm="syz.5.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 110.976096][ T42] audit: type=1400 audit(1785747929.096:651): avc: denied { ioctl } for pid=7753 comm="syz.5.576" path="socket:[21369]" dev="sockfs" ino=21369 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 110.993690][ T7754] syzkaller1: entered promiscuous mode [ 110.996051][ T7754] syzkaller1: entered allmulticast mode [ 111.040065][ T42] audit: type=1400 audit(1785747929.166:652): avc: denied { getopt } for pid=7755 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.190522][ T5888] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 111.192801][ T5888] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 111.194962][ T5888] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 111.197775][ T5888] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 111.200161][ T5888] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 111.207590][ T5888] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 111.247756][ T7758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.254753][ T7758] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.289269][ T7758] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.295164][ T5888] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 111.304324][ T5888] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 111.318483][ T7758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.321131][ T7758] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.325900][ T7758] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.331736][ T7758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.334277][ T7758] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.340427][ T7758] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.351636][ T7758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.354157][ T7758] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.363045][ T7758] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.481457][ T7774] overlayfs: upper fs does not support file handles, falling back to index=off. [ 111.504879][ T7776] netlink: 504 bytes leftover after parsing attributes in process `syz.4.569'. [ 111.646492][ T7768] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.659466][ T7768] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 111.680743][ T7768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.684539][ T7768] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 111.796196][ T7768] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.799515][ T7768] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 111.840348][ T7768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.842481][ T7768] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 112.170504][ T7811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.176317][ T7811] bond1: (slave macvlan2): making interface the new active one [ 112.179930][ T7811] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 112.183275][ T41] bond_slave_0: entered promiscuous mode [ 112.185512][ T41] bond_slave_1: entered promiscuous mode [ 112.250296][ T7817] binder: 7816:7817 ioctl c0306201 200000000040 returned -11 [ 112.455567][ T60] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 112.471423][ T60] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 112.476072][ T60] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 112.480558][ T60] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 112.598943][ T1044] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 112.674634][ T7841] team0: Port device vlan2 added [ 112.739799][ T1044] usb 9-1: device descriptor read/64, error -32 [ 112.987628][ T1044] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 113.136847][ T1044] usb 9-1: device descriptor read/64, error -32 [ 113.294499][ T34] IPVS: starting estimator thread 0... [ 113.297432][ T7863] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 113.376996][ T1044] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 113.386872][ T7864] IPVS: using max 26 ests per chain, 62400 per kthread [ 113.461110][ T7868] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.599979][ T1044] usb 9-1: device not accepting address 3, error -71 [ 114.083040][ T7885] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 114.092907][ T7885] pci 0000:00:01.0: BAR 0 [mem 0x00000000-0x007fffff pref] [ 114.095848][ T7885] pci 0000:00:01.0: BAR 2 [mem 0x00080000-0x00083fff 64bit pref] [ 114.099327][ T7885] pci 0000:00:01.0: BAR 4 [mem 0x2cc00000-0x2cc00fff] [ 114.103496][ T7885] pci 0000:00:01.0: ROM [mem 0x63700000-0x6370ffff pref] [ 114.120140][ T7885] pci 0000:00:01.0: Adding to iommu group 1 [ 114.128723][ T7885] pci 0000:00:01.0: vgaarb: bridge control possible [ 114.131331][ T7885] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none [ 114.144240][ T7885] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 114.148047][ T7885] pci 0000:00:01.0: ROM [mem 0x80800000-0x8080ffff pref]: assigned [ 114.151624][ T7885] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 114.155180][ T7885] pci 0000:00:01.0: BAR 4 [mem 0x80810000-0x80810fff]: assigned [ 114.161069][ T7885] virtio-pci 0000:00:01.0: enabling device (0000 -> 0002) [ 114.215451][ T7885] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 114.220624][ T7885] [drm] features: -virgl +edid -resource_blob -host_visible [ 114.220649][ T7885] [drm] features: -context_init -blob_alignment [ 114.241380][ T7885] [drm] number of scanouts: 1 [ 114.242863][ T7885] [drm] number of cap sets: 0 [ 114.309765][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 114.309781][ T42] audit: type=1400 audit(1785747932.436:686): avc: denied { write } for pid=7899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.313805][ T7885] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 114.370287][ T42] audit: type=1400 audit(1785747932.496:687): avc: denied { write } for pid=7902 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.398068][ T60] usb 9-1: USB disconnect, device number 3 [ 114.478865][ T7885] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 114.514721][ T42] audit: type=1400 audit(1785747932.636:688): avc: denied { write } for pid=7909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.571151][ T42] audit: type=1400 audit(1785747932.696:689): avc: denied { write } for pid=7914 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.974287][ T42] audit: type=1400 audit(1785747933.096:690): avc: denied { append } for pid=7935 comm="syz.3.627" name="uprobe_events" dev="tracefs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 115.356329][ T7955] netlink: 36 bytes leftover after parsing attributes in process `syz.5.635'. [ 115.359429][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.5.635'. [ 115.362210][ T7955] netlink: 36 bytes leftover after parsing attributes in process `syz.5.635'. [ 115.461639][ T7961] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 115.521305][ T7961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.528179][ T7961] bond1: (slave bond2): making interface the new active one [ 115.533812][ T7961] bond1: (slave bond2): Enslaving as an active interface with an up link [ 115.621964][ T7968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'. [ 115.625735][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 115.630760][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 115.760572][ T7973] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.764117][ T42] audit: type=1400 audit(1785747933.886:691): avc: denied { map } for pid=7972 comm="syz.3.641" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.773299][ T42] audit: type=1400 audit(1785747933.886:692): avc: denied { execute } for pid=7972 comm="syz.3.641" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.838952][ T7976] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 116.201057][ T7982] binder: 7981:7982 ioctl c0306201 200000000080 returned -14 [ 116.207964][ T42] audit: type=1400 audit(1785747934.336:693): avc: denied { call } for pid=7981 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 116.215858][ T42] audit: type=1400 audit(1785747934.336:694): avc: denied { transfer } for pid=7981 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 116.643574][ T42] audit: type=1400 audit(1785747934.766:695): avc: denied { setopt } for pid=7990 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.177124][ T8006] kvm: user requested TSC rate below hardware speed [ 117.749811][ T8031] netlink: 64 bytes leftover after parsing attributes in process `syz.5.665'. [ 117.765492][ T8031] syzkaller1: entered promiscuous mode [ 117.767547][ T8031] syzkaller1: entered allmulticast mode [ 117.946775][ T55] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 118.135297][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 118.140556][ T55] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 118.144699][ T55] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.150310][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.154059][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.166723][ T55] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.175640][ T55] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.179467][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.258849][ T8054] syz_tun: entered allmulticast mode [ 118.263765][ T8054] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 118.267289][ T8054] mroute: pending queue full, dropping entries [ 118.271554][ T8053] syz_tun: left allmulticast mode [ 118.826998][ T7734] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 118.979522][ T7734] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 118.990942][ T7734] usb 9-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 118.998338][ T7734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.006772][ T7734] usb 9-1: Product: syz [ 119.008589][ T7734] usb 9-1: Manufacturer: syz [ 119.016735][ T7734] usb 9-1: SerialNumber: syz [ 119.037661][ T8072] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.044254][ T7734] emi26 - firmware loader 9-1:1.0: emi26_probe start [ 119.059691][ T7734] usb 9-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 119.065571][ T7734] usb 9-1: Falling back to sysfs fallback for: emi26/loader.fw [ 119.300446][ T7734] usb 9-1: Firmware "emi26/loader.fw" not valid IHEX records [ 119.307062][ T7734] usb 9-1: emi26_load_firmware - request_firmware() failed [ 119.312255][ T8088] usbtmc 8-1:16.0: simple usb_control_msg failed -32 [ 119.316182][ T7734] usb 9-1: emi26_load_firmware - error loading firmware: error = -22 [ 119.320381][ T7734] emi26 - firmware loader 9-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 119.337251][ T7734] usb 9-1: USB disconnect, device number 4 [ 119.352985][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 119.352998][ T42] audit: type=1400 audit(1785747937.476:702): avc: denied { write } for pid=8090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.384670][ T8092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.388650][ T8092] block device autoloading is deprecated and will be removed. [ 119.419638][ T42] audit: type=1400 audit(1785747937.546:703): avc: denied { write } for pid=8094 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.476087][ T8087] block device autoloading is deprecated and will be removed. [ 119.480373][ T8087] md: invalid raid superblock magic on ram32 [ 119.482956][ T8087] md: ram32 does not have a valid v0.0 superblock, not importing! [ 119.486401][ T8087] md: md_import_device returned -22 [ 119.660726][ T42] audit: type=1800 audit(1785747937.786:704): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.686" name="file0" dev="overlay" ino=1221 res=0 errno=0 [ 119.910364][ T42] audit: type=1400 audit(1785747938.036:705): avc: denied { read write } for pid=8118 comm="syz.5.692" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 119.919711][ T42] audit: type=1400 audit(1785747938.036:706): avc: denied { open } for pid=8118 comm="syz.5.692" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 119.958021][ T42] audit: type=1400 audit(1785747938.086:707): avc: denied { connect } for pid=8121 comm="syz.5.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.964817][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.694'. [ 119.997311][ T8119] sd 0:0:0:0: PR command failed: 1026 [ 119.999928][ T8119] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 120.002695][ T8119] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 120.027256][ T42] audit: type=1400 audit(1785747938.156:708): avc: denied { write } for pid=8124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.095090][ T42] audit: type=1400 audit(1785747938.216:709): avc: denied { write } for pid=8129 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.157484][ T55] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 120.313101][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 120.317079][ T55] usb 5-1: not running at top speed; connect to a high speed hub [ 120.323203][ T55] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 120.326886][ T55] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 120.330313][ T55] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 120.334370][ T55] usb 5-1: config 14 has no interface number 0 [ 120.337425][ T55] usb 5-1: config 14 has no interface number 1 [ 120.340012][ T55] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 120.344157][ T55] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 120.348870][ T55] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.353527][ T55] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 120.357912][ T55] usb 5-1: config 14 interface 57 has no altsetting 0 [ 120.360500][ T55] usb 5-1: config 14 interface 228 has no altsetting 0 [ 120.365343][ T55] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 120.368922][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.372063][ T55] usb 5-1: Product: syz [ 120.373858][ T55] usb 5-1: Manufacturer: syz [ 120.375820][ T55] usb 5-1: SerialNumber: syz [ 120.712475][ T7734] usb 8-1: USB disconnect, device number 7 [ 120.760114][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.699'. [ 120.764346][ T8142] netlink: 144 bytes leftover after parsing attributes in process `syz.3.699'. [ 120.796113][ T55] legousbtower 5-1:14.57: interrupt endpoints not found [ 120.958566][ T42] audit: type=1400 audit(1785747939.086:710): avc: denied { mount } for pid=8145 comm="syz.3.701" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 121.198262][ T55] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 121.207914][ T55] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 121.960996][ T41] usb 5-1: USB disconnect, device number 4 [ 121.969778][ T41] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 122.448064][ T8155] Set syz1 is full, maxelem 65536 reached [ 122.508589][ T8179] ehci-pci 0000:00:1d.7: remove, state 1 [ 122.517390][ T8179] usb usb1: USB disconnect, device number 1 [ 122.520889][ T8179] usb 1-1: USB disconnect, device number 2 [ 122.526877][ T1044] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 122.700189][ T1044] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.703954][ T1044] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 122.716938][ T1044] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.720948][ T1044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.725213][ T1044] usb 8-1: Product: syz [ 122.728979][ T1044] usb 8-1: Manufacturer: syz [ 122.730420][ T42] audit: type=1400 audit(1785747940.856:711): avc: denied { map } for pid=8186 comm="syz.4.716" path="socket:[26874]" dev="sockfs" ino=26874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 122.731012][ T1044] usb 8-1: SerialNumber: syz [ 122.777143][ T8179] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 122.788670][ T1044] cdc_mbim 8-1:1.0: skipping garbage [ 122.805126][ T8189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.717'. [ 122.896335][ T8182] uhci_hcd 0000:00:1d.0: remove, state 1 [ 122.916736][ T7734] hub 2-0:1.0: activate --> -108 [ 122.921178][ T8182] usb usb2: USB disconnect, device number 1 [ 122.956397][ T8194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 122.981567][ T8177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.990243][ T8182] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 123.178623][ T8201] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 123.194935][ T8201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.226461][ T8201] bond3: (slave geneve2): making interface the new active one [ 123.230461][ T8201] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 123.295323][ T8207] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.724'. [ 123.300039][ T8207] openvswitch: netlink: Message has 512 unknown bytes. [ 123.593414][ T8177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.596904][ T1044] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 123.600442][ T1044] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 123.613663][ T1044] wwan wwan0: port wwan0mbim0 attached [ 123.650677][ T1044] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 6e:91:bd:6c:c5:fe [ 123.801344][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 123.804216][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 123.807079][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 123.809804][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 123.812505][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 123.815262][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 123.817985][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 123.820694][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 123.823472][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 123.826186][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 123.831018][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 123.833759][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 123.836771][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 123.839527][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 123.842262][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 123.844974][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 123.847742][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 123.850489][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 123.853265][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 123.855942][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 123.886883][ T1044] usb 8-1: USB disconnect, device number 8 [ 123.893259][ T1044] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 124.016684][ T8234] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 124.087388][ T1044] wwan wwan0: port wwan0mbim0 disconnected [ 124.190104][ T8250] overlayfs: upper fs does not support file handles, falling back to index=off. [ 124.242577][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 124.246452][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 124.362902][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 124.362917][ T42] audit: type=1400 audit(1785747942.486:731): avc: denied { rename } for pid=8262 comm="syz.0.740" name="file0" dev="tmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.409225][ T42] audit: type=1400 audit(1785747942.536:732): avc: denied { write } for pid=8267 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.570286][ T8311] netlink: 'syz.0.757': attribute type 10 has an invalid length. [ 125.685397][ T8318] netlink: 'syz.0.757': attribute type 10 has an invalid length. [ 125.711625][ T42] audit: type=1400 audit(1785747943.836:733): avc: denied { name_bind } for pid=8316 comm="syz.5.759" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 125.853480][ T8310] batman_adv: batadv0: Interface deactivated: gretap1 [ 125.889959][ T8311] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 125.903196][ T8315] bridge0: port 1(syz_tun) entered blocking state [ 125.911142][ T8315] bridge0: port 1(syz_tun) entered disabled state [ 125.914857][ T8315] syz_tun: entered allmulticast mode [ 125.918036][ T8315] syz_tun: entered promiscuous mode [ 125.941800][ T8317] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 125.948820][ T8318] syz_tun: left allmulticast mode [ 125.950709][ T8318] bridge0: port 1(syz_tun) entered disabled state [ 125.975740][ T5815] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.982695][ T5815] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.989294][ T5815] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.995334][ T5815] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.998584][ T5815] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.001550][ T5815] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.005042][ T5815] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.009634][ T5815] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.075686][ T8335] netlink: 'syz.0.766': attribute type 1 has an invalid length. [ 126.104969][ T8335] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.130150][ T8335] bond4: (slave geneve3): making interface the new active one [ 126.134136][ T8335] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 126.196804][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.199600][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.202312][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.205018][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.556798][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 126.708524][ T34] usb 10-1: config 0 has no interfaces? [ 126.711010][ T34] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 126.714671][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.721435][ T34] usb 10-1: config 0 descriptor?? [ 126.773198][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 126.778590][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 126.834760][ T42] audit: type=1400 audit(1785747944.956:734): avc: denied { read } for pid=8351 comm="syz.4.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.943951][ T5886] usb 10-1: USB disconnect, device number 2 [ 127.104009][ T42] audit: type=1326 audit(1785747945.226:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.4.774" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f009b59e019 code=0x0 [ 127.324158][ T42] audit: type=1400 audit(1785747945.446:736): avc: denied { bind } for pid=8373 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.383141][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 127.386709][ T8378] netlink: 'syz.3.781': attribute type 30 has an invalid length. [ 127.389709][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 127.401291][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 127.405063][ T8378] netlink: 'syz.3.781': attribute type 30 has an invalid length. [ 127.407887][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 127.929672][ T7734] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 128.107020][ T7734] usb 8-1: Using ep0 maxpacket: 16 [ 128.110556][ T7734] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.115797][ T7734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.123068][ T7734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.127457][ T7734] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.134347][ T7734] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.140906][ T7734] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 128.146263][ T7734] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 128.150304][ T7734] usb 8-1: Manufacturer: syz [ 128.158445][ T7734] usb 8-1: config 0 descriptor?? [ 128.326359][ T42] audit: type=1400 audit(1785747946.446:737): avc: denied { append } for pid=8406 comm="syz.5.792" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 128.399056][ T8411] bridge0: port 3(syz_tun) entered blocking state [ 128.402003][ T8411] bridge0: port 3(syz_tun) entered disabled state [ 128.404915][ T8411] syz_tun: entered allmulticast mode [ 128.413120][ T8411] syz_tun: entered promiscuous mode [ 128.415990][ T8411] bridge0: port 3(syz_tun) entered blocking state [ 128.422288][ T8411] bridge0: port 3(syz_tun) entered forwarding state [ 128.427688][ T7734] rc_core: IR keymap rc-hauppauge not found [ 128.432503][ T7734] Registered IR keymap rc-empty [ 128.435101][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.454196][ T8411] bridge0: port 3(syz_tun) entered disabled state [ 128.457894][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.460974][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.463873][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.488655][ T7734] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 128.493867][ T7734] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input11 [ 128.508679][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.527059][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.538668][ T8417] netlink: 64 bytes leftover after parsing attributes in process `syz.5.795'. [ 128.551654][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.555374][ T8417] syzkaller1: entered promiscuous mode [ 128.558645][ T8417] syzkaller1: entered allmulticast mode [ 128.569784][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.578291][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.584820][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.593219][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.600420][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.607835][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.626936][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.646902][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.661048][ T42] audit: type=1400 audit(1785747946.786:738): avc: denied { create } for pid=8418 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.668108][ T42] audit: type=1400 audit(1785747946.786:739): avc: denied { setopt } for pid=8418 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.680309][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.711233][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.749448][ T7734] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 128.767939][ T7734] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 128.771605][ T7734] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 128.779278][ T7734] usb 8-1: USB disconnect, device number 9 [ 128.842954][ T42] audit: type=1400 audit(1785747946.966:740): avc: denied { append } for pid=8429 comm="syz.0.799" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.157933][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.801'. [ 129.389818][ T8443] kvm: pic: non byte write [ 129.712006][ T8454] netlink: 'syz.3.808': attribute type 13 has an invalid length. [ 129.780804][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.809'. [ 129.786151][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.809'. [ 129.880775][ T8463] netlink: 6 bytes leftover after parsing attributes in process `syz.5.812'. [ 129.932176][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.813'. ÐÓã2#n™êâ÷„L°š>ëÕ‚xžL KY±Þ§ÓŽß?¦Ò:Ÿ>vǬˆçè“Q¹M÷ Lï“ÊKÚ­::xìi½Ã2Ü,ògEØÓÄGÉ &m ‘`H|(?‘˜›8YÕ¯Uºs[ 130.011990][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 130.012011][ T42] audit: type=1400 audit(1785747948.136:743): avc: denied { write } for pid=8470 comm="syz.0.815" name="/" dev="9p" ino=78395403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.212490][ T42] audit: type=1400 audit(1785747948.336:744): avc: denied { read } for pid=8477 comm="syz.5.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.701042][ T42] audit: type=1804 audit(1785747948.826:745): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.823" name="/newroot/97/file0" dev="tmpfs" ino=554 res=1 errno=0 [ 130.771674][ T42] audit: type=1400 audit(1785747948.896:746): avc: denied { write } for pid=8494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.841832][ T42] audit: type=1400 audit(1785747948.966:747): avc: denied { write } for pid=8501 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.893001][ T8504] misc userio: Can't change port extra on an already running userio instance [ 130.893214][ T5448] veth0_vlan: left promiscuous mode [ 130.910246][ T60] veth0_vlan: entered promiscuous mode [ 131.023698][ T42] audit: type=1400 audit(1785747949.146:748): avc: denied { write } for pid=8509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.061806][ T8516] batman_adv: batadv0: Adding interface: dummy0 [ 131.064591][ T8516] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.075016][ T8516] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 131.076521][ T42] audit: type=1400 audit(1785747949.196:749): avc: denied { write } for pid=8514 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.098183][ T42] audit: type=1400 audit(1785747949.226:750): avc: denied { ioctl } for pid=8515 comm="syz.0.829" path="socket:[25502]" dev="sockfs" ino=25502 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.439300][ T42] audit: type=1400 audit(1785747949.566:751): avc: denied { create } for pid=8529 comm="syz.3.835" name="#50" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.447791][ T42] audit: type=1400 audit(1785747949.566:752): avc: denied { link } for pid=8529 comm="syz.3.835" name="#50" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.693974][ T8543] binder: 8542:8543 ioctl c0306201 200000000680 returned -14 [ 132.950116][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952710][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.122995][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 135.123062][ T42] audit: type=1400 audit(1785747953.246:768): avc: denied { mounton } for pid=8616 comm="syz.5.868" path="/proc/222/cgroup" dev="proc" ino=30669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 135.135545][ T42] audit: type=1400 audit(1785747953.246:769): avc: denied { remount } for pid=8616 comm="syz.5.868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 136.201907][ T8647] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 136.526011][ T8659] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 136.526011][ T8659] The task syz.4.880 (8659) triggered the difference, watch for misbehavior. [ 136.596912][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 136.638673][ T8669] netlink: 52 bytes leftover after parsing attributes in process `syz.3.884'. [ 136.655085][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.658709][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.679340][ T8669] netlink: 76 bytes leftover after parsing attributes in process `syz.3.884'. [ 136.683201][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.686384][ T8669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.690994][ T8669] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.693610][ T8669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.697874][ T8669] netlink: 52 bytes leftover after parsing attributes in process `syz.3.884'. [ 136.702098][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.705066][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.073008][ T8705] binder: 8704:8705 ioctl c0306201 200000000080 returned -14 [ 137.078778][ T8705] binder: 8704:8705 ioctl c0306201 2000000003c0 returned -14 [ 137.916828][ T5886] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 138.099927][ T5886] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 138.103706][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.126090][ T5886] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 138.132719][ T5886] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 138.526999][ T8738] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 138.729350][ T8721] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 138.738793][ T60] usb 9-1: USB disconnect, device number 5 [ 138.751351][ T60] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 138.755341][ T60] spcp8x5 9-1:1.0: device disconnected [ 138.934650][ T42] audit: type=1400 audit(1785747957.056:770): avc: denied { ioctl } for pid=8741 comm="syz.3.903" path="socket:[31900]" dev="sockfs" ino=31900 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.279334][ T42] audit: type=1400 audit(1785747957.406:771): avc: denied { accept } for pid=8748 comm="syz.4.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 139.516855][ T42] audit: type=1400 audit(1785747957.636:772): avc: denied { unlink } for pid=8751 comm="syz.3.907" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 139.686062][ T8761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.691887][ T8761] IPv6: NLM_F_CREATE should be set when creating new route [ 139.798889][ T8770] bridge0: port 3(wlan1) entered blocking state [ 139.802231][ T8770] bridge0: port 3(wlan1) entered disabled state [ 139.804701][ T8770] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 139.809231][ T8770] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 139.832668][ T8768] Invalid ioctl command number [0 >= 10] [ 140.068639][ T8783] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 140.159347][ T8795] BIDI support in bsg has been removed. [ 140.159378][ T42] audit: type=1400 audit(1785747958.286:773): avc: denied { cmd } for pid=8793 comm="syz.3.923" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=io_uring permissive=1 [ 140.300023][ T8798] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 140.309167][ T8798] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 140.314318][ T8798] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 140.323296][ T8798] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 140.328792][ T8798] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 140.333859][ T8798] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 140.340816][ T8798] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 140.344726][ T8798] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 140.349927][ T8798] kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 140.772960][ T8817] netlink: 'syz.3.932': attribute type 4 has an invalid length. [ 140.794772][ T8817] netlink: 'syz.3.932': attribute type 4 has an invalid length. [ 141.356951][ T42] audit: type=1400 audit(1785747959.476:774): avc: denied { write } for pid=8830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.422018][ T42] audit: type=1400 audit(1785747959.546:775): avc: denied { write } for pid=8833 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.677416][ T42] audit: type=1400 audit(1785747959.806:776): avc: denied { create } for pid=8838 comm="syz.5.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.980409][ T42] audit: type=1400 audit(1785747960.106:777): avc: denied { mounton } for pid=8845 comm="syz.5.941" path="/107/file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 141.989659][ T8846] capability: warning: `syz.5.941' uses deprecated v2 capabilities in a way that may be insecure [ 142.537547][ T8857] netlink: 44 bytes leftover after parsing attributes in process `syz.4.945'. [ 142.559483][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.946'. [ 143.408882][ T5847] playstation 0003:054C:05C4.0004: hidraw0: USB HID v0.01 Device [syz1] on syz1 [ 143.426105][ T5847] playstation 0003:054C:05C4.0004: Failed to retrieve feature with reportID 18: -5 [ 143.430754][ T5847] playstation 0003:054C:05C4.0004: Failed to retrieve DualShock4 pairing info: -5 [ 143.434482][ T5847] playstation 0003:054C:05C4.0004: Failed to get MAC address from DualShock4 [ 143.438077][ T5847] playstation 0003:054C:05C4.0004: Failed to create dualshock4. [ 143.446596][ T5847] playstation 0003:054C:05C4.0004: probe with driver playstation failed with error -5 [ 143.455066][ T8885] fido_id[8885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.905677][ T8897] orangefs_devreq_write_iter: failed to copy head. [ 144.161729][ T8911] tipc: Failed to remove unknown binding: 66,0,0/0:3445722279/3445722280 [ 144.192995][ T8911] tipc: Failed to remove unknown binding: 66,0,0/0:3445722279/3445722280 [ 144.244582][ T42] audit: type=1400 audit(1785747962.366:778): avc: denied { setattr } for pid=8913 comm="syz.3.966" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.810359][ T8924] overlayfs: failed to verify origin (121/file1, ino=703, err=-116) [ 144.817741][ T8924] overlayfs: failed to verify origin (121/file1, ino=703, err=-116) [ 144.934825][ T8926] orangefs: client-core tried to read wrong size [ 145.030709][ T42] audit: type=1400 audit(1785747963.156:779): avc: denied { bind } for pid=8932 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.046545][ T42] audit: type=1400 audit(1785747963.156:780): avc: denied { node_bind } for pid=8932 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 147.291268][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 147.380987][ T42] audit: type=1400 audit(1785747965.506:781): avc: denied { write } for pid=8948 comm="syz.4.982" name="raw" dev="proc" ino=4026533025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 148.145876][ T8957] binder: 8956:8957 ioctl c0306201 200000000640 returned -22 [ 148.834004][ T42] audit: type=1400 audit(1785747966.956:782): avc: denied { connect } for pid=8979 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.840736][ T42] audit: type=1400 audit(1785747966.966:783): avc: denied { shutdown } for pid=8979 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.079396][ T42] audit: type=1400 audit(1785747967.206:784): avc: denied { write } for pid=8986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.110305][ T8992] netlink: 'syz.4.997': attribute type 1 has an invalid length. [ 149.119848][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.998'. [ 149.124584][ T8992] bond1: entered promiscuous mode [ 149.126726][ T8992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.134885][ T42] audit: type=1400 audit(1785747967.256:785): avc: denied { write } for pid=8993 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.158950][ T8992] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.163490][ T8992] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 149.167597][ T8992] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 149.177364][ T8992] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 149.206342][ T8999] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.211343][ T8999] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 149.216775][ T42] audit: type=1400 audit(1785747967.336:786): avc: denied { write } for pid=8998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.217299][ T8999] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 149.237834][ T8996] netlink: 1 bytes leftover after parsing attributes in process `syz.0.998'. [ 149.276938][ T42] audit: type=1400 audit(1785747967.396:787): avc: denied { write } for pid=9002 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.290718][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1015'. [ 150.305343][ T9048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.324128][ T9048] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 150.678973][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 150.684153][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 150.729781][ T42] audit: type=1800 audit(1785747968.846:788): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1009" name="/" dev="fuse" ino=1 res=0 errno=0 [ 150.752250][ T42] audit: type=1400 audit(1785747968.856:789): avc: denied { write } for pid=9057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.776012][ T42] audit: type=1400 audit(1785747968.866:790): avc: denied { setopt } for pid=9059 comm="syz.4.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.976824][ T5886] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 152.126750][ T5886] usb 9-1: Using ep0 maxpacket: 16 [ 152.130277][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 152.135630][ T5886] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.138815][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.141739][ T5886] usb 9-1: Product: syz [ 152.143420][ T5886] usb 9-1: Manufacturer: syz [ 152.145181][ T5886] usb 9-1: SerialNumber: syz [ 152.149680][ T5886] usb 9-1: config 0 descriptor?? [ 152.156367][ T5886] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 152.160347][ T5886] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 152.765708][ T5886] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 153.184675][ T5886] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 153.191511][ T5886] em28xx 9-1:0.0: board has no eeprom [ 154.232465][ T9092] em28xx 9-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 154.296752][ T5886] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 154.299449][ T5886] em28xx 9-1:0.0: dvb set to bulk mode. [ 154.301571][ T34] em28xx 9-1:0.0: Binding DVB extension [ 154.328420][ T5886] usb 9-1: USB disconnect, device number 6 [ 154.331415][ T5886] em28xx 9-1:0.0: Disconnecting em28xx [ 154.358142][ T34] em28xx 9-1:0.0: Registering input extension [ 154.360831][ T5886] em28xx 9-1:0.0: Closing input extension [ 154.395465][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 154.395480][ T42] audit: type=1400 audit(1785747972.516:792): avc: denied { append } for pid=9117 comm="syz.3.1030" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 154.448619][ T5886] em28xx 9-1:0.0: Freeing device [ 154.798183][ T9126] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 154.854273][ T9126] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 154.858523][ T9126] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 154.862089][ T9126] pci 0000:00:01.0: BAR 4 [mem 0x80810000-0x80810fff] [ 154.865562][ T9126] pci 0000:00:01.0: ROM [mem 0x80800000-0x8080ffff pref] [ 154.875847][ T9126] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 154.900694][ T9126] pci 0000:00:01.0: Adding to iommu group 1 [ 154.921602][ T9126] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 154.923925][ T9126] pci 0000:00:01.0: vgaarb: bridge control possible [ 154.926289][ T9126] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 154.936299][ T9126] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 154.942287][ T9126] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 154.954716][ T9126] pci 0000:00:1d.0: Adding to iommu group 7 [ 154.956132][ T42] audit: type=1400 audit(1785747973.076:793): avc: denied { write } for pid=9131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.958312][ T9126] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 154.971054][ T9126] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 154.983031][ T9126] pci 0000:00:1d.7: Adding to iommu group 7 [ 154.991516][ T9126] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 154.995655][ T9126] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 155.012354][ T9126] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 155.016150][ T9126] pci 0000:00:1d.7: BAR 0 [mem 0x80801000-0x80801fff]: assigned [ 155.021124][ T9126] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 155.039775][ T42] audit: type=1400 audit(1785747973.166:794): avc: denied { write } for pid=9134 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.109808][ T9126] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 155.112574][ T9126] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 155.117733][ T9126] [drm] features: -virgl +edid -resource_blob -host_visible [ 155.117755][ T9126] [drm] features: -context_init -blob_alignment [ 155.137809][ T9126] [drm] number of scanouts: 1 [ 155.138656][ T42] audit: type=1400 audit(1785747973.266:795): avc: denied { write } for pid=9138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.139866][ T9126] [drm] number of cap sets: 0 [ 155.191497][ T9126] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 155.210729][ T42] audit: type=1400 audit(1785747973.336:796): avc: denied { write } for pid=9143 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.262269][ T9126] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 155.373942][ T9126] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 102795 usecs [ 155.420597][ T9126] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 155.437930][ T9126] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 155.441662][ T9126] uhci_hcd 0000:00:1d.0: detected 2 ports [ 155.458218][ T9126] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 155.475057][ T9126] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 155.481221][ T9126] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 155.486834][ T9126] usb usb1: Product: UHCI Host Controller [ 155.489327][ T9126] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 155.491792][ T9126] usb usb1: SerialNumber: 0000:00:1d.0 [ 155.522003][ T9126] hub 1-0:1.0: USB hub found [ 155.524144][ T9157] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 155.526082][ T42] audit: type=1400 audit(1785747973.646:797): avc: denied { write } for pid=9156 comm="syz.3.1039" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 155.536253][ T9126] hub 1-0:1.0: 2 ports detected [ 155.538936][ T42] audit: type=1400 audit(1785747973.646:798): avc: denied { open } for pid=9156 comm="syz.3.1039" path="/264/debug/tracing/events/kvm/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 155.644824][ T42] audit: type=1400 audit(1785747973.766:799): avc: denied { read } for pid=9156 comm="syz.3.1039" name="trace_pipe" dev="tracefs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 155.692264][ T9126] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1360 took 111249 usecs [ 155.829538][ T7734] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 156.046916][ T7734] usb 1-1: not running at top speed; connect to a high speed hub [ 156.092140][ T7734] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 156.096575][ T7734] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 156.100537][ T7734] usb 1-1: Product: QEMU USB Tablet [ 156.102365][ T7734] usb 1-1: Manufacturer: QEMU [ 156.104130][ T7734] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 156.219396][ T9175] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 156.336315][ T7734] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0005/input/input14 [ 156.484598][ T7734] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 156.602450][ T139] usb 1-1: USB disconnect, device number 2 [ 157.197067][ T139] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 157.344904][ T139] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 157.389417][ T139] ehci-pci 0000:00:1d.7: irq 19, io mem 0x80801000 [ 157.416064][ T139] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 157.502353][ T139] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 157.514580][ T139] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 157.527258][ T139] usb usb2: Product: EHCI Host Controller [ 157.529769][ T139] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 157.532413][ T139] usb usb2: SerialNumber: 0000:00:1d.7 [ 157.718285][ T139] hub 2-0:1.0: USB hub found [ 157.748961][ T139] hub 2-0:1.0: 6 ports detected [ 158.118369][ T139] hub 3-0:1.0: USB hub found [ 158.131630][ T139] hub 3-0:1.0: 2 ports detected [ 158.233293][ T139] hub 4-0:1.0: USB hub found [ 158.235602][ T139] hub 4-0:1.0: 2 ports detected [ 158.256986][ T10] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 158.260551][ T9183] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1046'. [ 158.302640][ T139] hub 1-0:1.0: USB hub found [ 158.306063][ T139] hub 1-0:1.0: 2 ports detected [ 158.418943][ T42] audit: type=1400 audit(1785747976.546:800): avc: denied { name_bind } for pid=9192 comm="syz.4.1051" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 158.441476][ T10] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 158.444637][ T10] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 158.447699][ T10] usb 2-1: Product: QEMU USB Tablet [ 158.450013][ T10] usb 2-1: Manufacturer: QEMU [ 158.451777][ T10] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 158.497197][ T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0006/input/input15 [ 158.567366][ T10] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 158.650196][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 158.800976][ T9210] binder: 9209:9210 ioctl c0306201 200000000080 returned -14 [ 158.805883][ T9210] binder: 9209:9210 ioctl c0306201 2000000003c0 returned -14 [ 158.819582][ T42] audit: type=1400 audit(1785747976.946:801): avc: denied { write } for pid=9208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.394810][ T9237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.405378][ T9237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.461662][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.469910][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.473751][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.480735][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.483775][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.493942][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.497670][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.501345][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.515561][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.519091][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.636589][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 159.639752][ T42] audit: type=1400 audit(1785747977.756:807): avc: denied { execmod } for pid=9247 comm="syz.3.1068" path="/276/bus/memory.events" dev="overlay" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.701975][ T42] audit: type=1400 audit(1785747977.826:808): avc: denied { bind } for pid=9251 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.943993][ T9238] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.946240][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.949117][ T9238] bridge_slave_0: entered allmulticast mode [ 159.952336][ T9238] bridge_slave_0: entered promiscuous mode [ 159.956254][ T9238] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.959188][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.962036][ T9238] bridge_slave_1: entered allmulticast mode [ 159.965387][ T9238] bridge_slave_1: entered promiscuous mode [ 159.992022][ T9238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.998861][ T9238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.035509][ T9238] team0: Port device team_slave_0 added [ 160.040003][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.040628][ T9238] team0: Port device team_slave_1 added [ 160.043892][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.048287][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.052040][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.054880][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.064694][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.068045][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.077899][ T9238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.083776][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.086527][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.096885][ T9238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.193571][ T7560] syz_tun (unregistering): left allmulticast mode [ 160.196202][ T7560] syz_tun (unregistering): left promiscuous mode [ 160.199572][ T7560] bridge0: port 3(syz_tun) entered disabled state [ 160.239172][ T9238] hsr_slave_0: entered promiscuous mode [ 160.242465][ T9238] hsr_slave_1: entered promiscuous mode [ 160.244956][ T9238] debugfs: 'hsr0' already exists in 'hsr' [ 160.246901][ T9238] Cannot create hsr debugfs directory [ 160.475823][ T7671] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.544024][ T9238] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 160.552867][ T9238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.556051][ T9238] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 160.566265][ T9238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.570032][ T9238] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 160.574148][ T9238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.577239][ T9238] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 160.581350][ T9238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.608446][ T7671] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.708131][ T7671] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.765721][ T9238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.769388][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.771666][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.773986][ T9272] bridge_slave_0: entered allmulticast mode [ 160.776520][ T9272] bridge_slave_0: entered promiscuous mode [ 160.780040][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.782452][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.784608][ T9272] bridge_slave_1: entered allmulticast mode [ 160.787192][ T9272] bridge_slave_1: entered promiscuous mode [ 160.813350][ T7671] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.835607][ T9272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.841109][ T9272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.868835][ T9272] team0: Port device team_slave_0 added [ 160.877036][ T9238] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.882346][ T9272] team0: Port device team_slave_1 added [ 160.905144][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.908006][ T9101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.923455][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.925747][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.936888][ T9272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.941415][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.943588][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.951699][ T9272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.975215][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.977964][ T9101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.993941][ T9272] hsr_slave_0: entered promiscuous mode [ 160.996828][ T9272] hsr_slave_1: entered promiscuous mode [ 160.999412][ T9272] debugfs: 'hsr0' already exists in 'hsr' [ 161.001657][ T9272] Cannot create hsr debugfs directory [ 161.115178][ T7671] bridge_slave_1: left allmulticast mode [ 161.117196][ T7671] bridge_slave_1: left promiscuous mode [ 161.119120][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.127857][ T7671] bridge_slave_0: left allmulticast mode [ 161.129950][ T7671] bridge_slave_0: left promiscuous mode [ 161.132072][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.143962][ T7671] bond_slave_0: left promiscuous mode [ 161.146056][ T7671] bond_slave_1: left promiscuous mode [ 161.281112][ T7671] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 161.287877][ T7671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.292630][ T7671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.296397][ T7671] bond0 (unregistering): Released all slaves [ 161.302339][ T7671] bond1 (unregistering): Released all slaves [ 161.410231][ T42] audit: type=1400 audit(1785747979.536:809): avc: denied { write } for pid=9303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.494262][ T42] audit: type=1400 audit(1785747979.616:810): avc: denied { write } for pid=9306 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.551523][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 161.567180][ T9272] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 161.585369][ T42] audit: type=1400 audit(1785747979.706:811): avc: denied { watch watch_reads } for pid=9307 comm="syz.4.1075" path="/174/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 161.596869][ T5741] Bluetooth: hci1: command tx timeout [ 161.601646][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.610300][ T7671] hsr_slave_0: left promiscuous mode [ 161.613061][ T7671] hsr_slave_1: left promiscuous mode [ 161.615797][ T7671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.619073][ T7671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.623176][ T7671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.625938][ T7671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.641530][ T7671] veth1_macvtap: left promiscuous mode [ 161.643686][ T7671] veth0_macvtap: left promiscuous mode [ 161.645873][ T7671] veth1_vlan: left promiscuous mode [ 161.648508][ T7671] veth0_vlan: left promiscuous mode [ 161.723328][ T7671] team0 (unregistering): Port device vlan2 removed [ 161.876565][ T7671] team0 (unregistering): Port device team_slave_1 removed [ 161.887560][ T7671] team0 (unregistering): Port device team_slave_0 removed [ 161.967585][ T9272] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 161.977540][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.981441][ T9272] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 161.989437][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.994482][ T9272] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 162.002183][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.093764][ T9272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.105854][ T9272] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.110537][ T42] audit: type=1400 audit(1785747980.236:812): avc: denied { write } for pid=9323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.120620][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.122971][ T9101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.132338][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.135077][ T9101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.156750][ T5741] Bluetooth: hci4: command tx timeout [ 162.203332][ T42] audit: type=1400 audit(1785747980.326:813): avc: denied { write } for pid=9329 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.228369][ T9238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.282602][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 162.373675][ T7671] IPVS: stop unused estimator thread 0... [ 162.376152][ T42] audit: type=1400 audit(1785747980.496:814): avc: denied { write } for pid=9341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.429798][ T9238] veth0_vlan: entered promiscuous mode [ 162.436273][ T9238] veth1_vlan: entered promiscuous mode [ 162.444055][ T42] audit: type=1400 audit(1785747980.566:815): avc: denied { write } for pid=9349 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.469459][ T9238] veth0_macvtap: entered promiscuous mode [ 162.475975][ T9238] veth1_macvtap: entered promiscuous mode [ 162.490550][ T9272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.493696][ T9238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.499435][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 162.515064][ T9238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.540590][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.544120][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.579774][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.596381][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.637739][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.640284][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.656466][ T42] audit: type=1400 audit(1785747980.776:816): avc: denied { write } for pid=9357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.669383][ T8681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.672339][ T8681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.759318][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 162.775358][ T9272] veth0_vlan: entered promiscuous mode [ 162.787333][ T9272] veth1_vlan: entered promiscuous mode [ 162.816197][ T9272] veth0_macvtap: entered promiscuous mode [ 162.821384][ T9272] veth1_macvtap: entered promiscuous mode [ 162.835794][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.850103][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.937634][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.953610][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.968481][ T9080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.976718][ T9080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.990330][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.992791][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.037294][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.042458][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.337029][ T9382] netlink: 'syz.4.1078': attribute type 1 has an invalid length. [ 163.419467][ T9382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.432047][ T9382] bond3: (slave bond4): making interface the new active one [ 163.435841][ T9382] bond3: (slave bond4): Enslaving as an active interface with an up link [ 163.452303][ T9393] tipc: Started in network mode [ 163.454223][ T9393] tipc: Node identity 1000001, cluster identity 4369 [ 163.457328][ T9393] tipc: Node number set to 16777217 [ 163.460802][ T9393] tipc: Cannot configure node identity twice [ 163.468708][ T9395] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 163.478471][ T9393] tipc: New replicast peer: 127.0.0.1 [ 163.483477][ T9393] tipc: Enabled bearer , priority 10 [ 163.496509][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1078'. [ 163.505037][ T9382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.534413][ T9398] loop5: detected capacity change from 0 to 7 [ 163.613512][ T9404] syzkaller0: entered promiscuous mode [ 163.615985][ T9404] syzkaller0: entered allmulticast mode [ 163.629584][ T9404] tipc: Enabled bearer , priority 0 [ 163.634353][ T9403] tipc: Resetting bearer [ 163.667413][ T5741] Bluetooth: hci1: command tx timeout [ 163.682786][ T9403] tipc: Disabling bearer [ 163.704262][ T9408] tipc: Started in network mode [ 163.706280][ T9408] tipc: Node identity 8a09459d76fd, cluster identity 4711 [ 163.710032][ T9408] tipc: Enabled bearer , priority 0 [ 163.746071][ T9408] syzkaller0: entered promiscuous mode [ 163.749062][ T9408] syzkaller0: entered allmulticast mode [ 163.751884][ T9408] tipc: Resetting bearer [ 163.780674][ T9407] tipc: Resetting bearer [ 164.118791][ T9423] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.227766][ T5741] Bluetooth: hci4: command tx timeout [ 165.443385][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 165.443461][ T42] audit: type=1400 audit(1785747983.566:819): avc: denied { write } for pid=9443 comm="syz.7.1098" name="core" dev="configfs" ino=5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.455631][ T42] audit: type=1400 audit(1785747983.576:820): avc: denied { write } for pid=9443 comm="syz.7.1098" name="rd_mcp_0" dev="configfs" ino=40006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.532666][ T42] audit: type=1400 audit(1785747983.656:821): avc: denied { write } for pid=9443 comm="syz.7.1098" name="rd_mcp_0" dev="configfs" ino=40006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.559361][ T42] audit: type=1400 audit(1785747983.676:822): avc: denied { remove_name } for pid=9443 comm="syz.7.1098" name="dev0" dev="configfs" ino=37190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.567453][ T42] audit: type=1400 audit(1785747983.686:823): avc: denied { rmdir } for pid=9443 comm="syz.7.1098" name="dev0" dev="configfs" ino=37190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.757214][ T5741] Bluetooth: hci1: command tx timeout [ 166.019758][ T9407] tipc: Disabling bearer [ 166.039230][ T5888] tipc: Node number set to 4243867037 [ 166.064976][ T9449] syzkaller0: entered promiscuous mode [ 166.066985][ T9449] syzkaller0: entered allmulticast mode [ 166.308513][ T5741] Bluetooth: hci4: command tx timeout [ 166.313355][ T9460] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 5429, magic 54 != 6b] [ 166.338037][ T9458] kvm: pic: non byte write [ 167.038577][ T24] IPVS: starting estimator thread 0... [ 167.145855][ T9476] binder: 9475:9476 ioctl c0306201 200000000080 returned -14 [ 167.153077][ T9476] binder: 9475:9476 ioctl c0306201 2000000003c0 returned -14 [ 167.167306][ T9472] IPVS: using max 41 ests per chain, 98400 per kthread [ 167.345501][ T9488] binder: 9487:9488 ioctl c0306201 200000000080 returned -14 [ 167.350195][ T9488] binder: 9487:9488 ioctl c0306201 2000000003c0 returned -14 [ 167.837463][ T5741] Bluetooth: hci1: command tx timeout [ 168.391133][ T5741] Bluetooth: hci4: command tx timeout [ 168.585294][ T9505] binder_alloc: 9504: binder_alloc_buf size -16 failed, no address space [ 168.592772][ T9505] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 168.681223][ T9514] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 168.722409][ T42] audit: type=1400 audit(1785747986.846:824): avc: denied { watch } for pid=9518 comm="syz.6.1121" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 168.732420][ T42] audit: type=1400 audit(1785747986.846:825): avc: denied { watch_sb watch_reads } for pid=9518 comm="syz.6.1121" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 168.740844][ T42] audit: type=1400 audit(1785747986.856:826): avc: denied { ioctl } for pid=9522 comm="syz.4.1122" path="socket:[40148]" dev="sockfs" ino=40148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.755153][ T9521] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.759735][ T9521] block device autoloading is deprecated and will be removed. [ 168.773624][ T9511] md: md130 stopped. [ 168.896136][ T9527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.090532][ T42] audit: type=1400 audit(1785747987.216:827): avc: denied { accept } for pid=9537 comm="syz.4.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.392146][ T9548] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.040616][ T9570] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 170.150499][ T9577] binder: 9576:9577 ioctl c0306201 200000000180 returned -14 [ 170.363556][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'. [ 170.556114][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'. [ 170.622362][ T9589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9589 comm=syz.3.1146 [ 170.686793][ T7734] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 170.848539][ T7734] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.854692][ T7734] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.866002][ T7734] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 170.870898][ T7734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.874269][ T7734] usb 9-1: Product: syz [ 170.876008][ T7734] usb 9-1: Manufacturer: syz [ 170.881531][ T7734] usb 9-1: SerialNumber: syz [ 170.895232][ T7734] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 170.904213][ T7734] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 170.919406][ T7734] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 170.935575][ T9593] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1148'. [ 170.945593][ T5823] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 171.003039][ T9597] netlink: 'syz.6.1150': attribute type 39 has an invalid length. [ 171.120858][ T5823] usb 8-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 171.125563][ T5823] usb 8-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 171.133356][ T5823] usb 8-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00 [ 171.137655][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.141016][ T5823] usb 8-1: Product: syz [ 171.142909][ T5823] usb 8-1: Manufacturer: syz [ 171.145001][ T5823] usb 8-1: SerialNumber: syz [ 171.322408][ T5823] usb 8-1: reset high-speed USB device number 10 using dummy_hcd [ 171.347453][ T42] audit: type=1400 audit(1785747989.466:828): avc: denied { bind } for pid=9604 comm="syz.7.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.356395][ T42] audit: type=1400 audit(1785747989.476:829): avc: denied { setopt } for pid=9604 comm="syz.7.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.365057][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1152'. [ 171.665739][ T9618] syzkaller0: entered promiscuous mode [ 171.668694][ T9618] syzkaller0: entered allmulticast mode [ 171.682446][ T9618] tipc: Enabled bearer , priority 0 [ 171.688952][ T9617] tipc: Resetting bearer [ 171.709513][ T9617] tipc: Disabling bearer [ 171.798579][ T9620] syzkaller0: entered promiscuous mode [ 171.804036][ T9620] syzkaller0: entered allmulticast mode [ 171.879270][ T9623] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 172.119941][ T9628] kvm: pic: level sensitive irq not supported [ 172.720280][ T9648] 0: reclassify loop, rule prio 0, protocol 03 [ 172.830551][ T5741] Bluetooth: hci4: Malformed LE Event: 0x1d [ 172.869218][ T9650] Bluetooth: (null): Invalid header checksum [ 173.151203][ T9659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9659 comm=syz.3.1173 [ 173.159832][ T9659] netlink: 'syz.3.1173': attribute type 3 has an invalid length. [ 173.163304][ T9659] netlink: 'syz.3.1173': attribute type 3 has an invalid length. [ 173.185750][ T5823] usb 8-1: [UEAGLE-ATM] urb submission failed with error -19 [ 173.189389][ T5823] ueagle-atm 8-1:1.0: usbatm_usb_probe: bind failed: -19! [ 173.189450][ T9587] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 173.197560][ T9587] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 173.200594][ T9587] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 173.204312][ T9587] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 173.206324][ T5823] usb 8-1: USB disconnect, device number 10 [ 173.224053][ T5787] usb 9-1: USB disconnect, device number 7 [ 173.241274][ T5787] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 173.255231][ T5787] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 173.260455][ T5787] ti_usb_3410_5052 9-1:2.0: device disconnected [ 173.430371][ T42] audit: type=1400 audit(1785747991.556:830): avc: denied { write } for pid=9666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.492555][ T42] audit: type=1400 audit(1785747991.616:831): avc: denied { write } for pid=9671 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.602815][ T42] audit: type=1400 audit(1785747991.726:832): avc: denied { write } for pid=9676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.681771][ T42] audit: type=1400 audit(1785747991.806:833): avc: denied { write } for pid=9680 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.043749][ T42] audit: type=1400 audit(1785747992.166:834): avc: denied { write } for pid=9691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.073425][ T9696] syzkaller0: entered promiscuous mode [ 174.076221][ T9696] syzkaller0: entered allmulticast mode [ 174.150466][ T42] audit: type=1400 audit(1785747992.276:835): avc: denied { write } for pid=9700 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.224194][ T9707] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 174.299661][ T42] audit: type=1400 audit(1785747992.426:836): avc: denied { read write } for pid=9711 comm="syz.7.1187" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 174.301304][ T9707] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.321689][ T42] audit: type=1400 audit(1785747992.426:837): avc: denied { open } for pid=9711 comm="syz.7.1187" path="/23/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 174.342542][ T9714] binder_alloc: 9713: binder_alloc_buf size 24560 failed, no address space [ 174.350706][ T9714] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 174.415427][ T9707] vlan3: entered allmulticast mode [ 174.417869][ T9707] macsec0: entered allmulticast mode [ 174.420148][ T9707] veth1_macvtap: entered allmulticast mode [ 174.423685][ T9707] bond4: (slave vlan3): Error -34 calling dev_set_mtu [ 174.766983][ T9733] kvm: pic: non byte read [ 174.769903][ T9733] kvm: pic: non byte read [ 174.772492][ T9733] kvm: pic: non byte read [ 174.776734][ T9733] kvm: pic: non byte read [ 174.779165][ T9733] kvm: pic: non byte read [ 174.782388][ T9733] kvm: pic: non byte read [ 175.815929][ T9781] bridge1: port 1(macvlan2) entered blocking state [ 175.818946][ T9781] bridge1: port 1(macvlan2) entered disabled state [ 175.821891][ T9781] macvlan2: entered allmulticast mode [ 176.072036][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.076486][ T9789] batadv_slave_1: entered promiscuous mode [ 176.160310][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1214'. [ 176.222890][ T9795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9795 comm=syz.4.1214 [ 176.415902][ T9805] netlink: 'syz.4.1218': attribute type 1 has an invalid length. [ 176.434844][ T9805] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.454450][ T9805] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 176.783524][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 176.783539][ T42] audit: type=1800 audit(1785747994.906:846): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1211" name="/" dev="fuse" ino=4 res=0 errno=0 [ 177.096820][ T7734] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 177.278351][ T7734] usb 9-1: Using ep0 maxpacket: 8 [ 177.285907][ T7734] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 177.291231][ T7734] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 177.301257][ T7734] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 177.305890][ T7734] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.311510][ T7734] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.315544][ T7734] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.320992][ T7734] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 177.327086][ T7734] usb 9-1: config 168 interface 0 has no altsetting 0 [ 177.331111][ T7734] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 177.334193][ T7734] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 177.338487][ T7734] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 177.342798][ T7734] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.346429][ T7734] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.350214][ T7734] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.354471][ T42] audit: type=1400 audit(1785747995.476:847): avc: denied { mounton } for pid=9830 comm="syz.3.1227" path="/317/file0" dev="tmpfs" ino=1778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 177.354503][ T7734] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 177.369546][ T7734] usb 9-1: config 168 interface 0 has no altsetting 0 [ 177.373228][ T7734] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 177.375736][ T7734] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 177.380024][ T7734] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 177.384377][ T7734] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.388405][ T7734] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.393274][ T7734] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.398071][ T7734] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 177.403528][ T7734] usb 9-1: config 168 interface 0 has no altsetting 0 [ 177.420262][ T7734] usb 9-1: string descriptor 0 read error: -22 [ 177.425706][ T7734] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 177.429548][ T7734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.444243][ T7734] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 177.803374][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 178.022556][ T42] audit: type=1400 audit(1785747996.146:848): avc: denied { append } for pid=9862 comm="syz.3.1237" name="cec0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.310297][ T9875] binder: 9873:9875 ioctl c0306201 200000004a40 returned -22 [ 178.393415][ T42] audit: type=1400 audit(1785747996.516:849): avc: denied { create } for pid=9877 comm="syz.4.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 178.416506][ T42] audit: type=1400 audit(1785747996.536:850): avc: denied { write } for pid=9879 comm="syz.7.1244" name="configs" dev="configfs" ino=8724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.423727][ T42] audit: type=1400 audit(1785747996.546:851): avc: denied { write } for pid=9879 comm="syz.7.1244" name="functions" dev="configfs" ino=8723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.701149][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1249'. [ 179.035562][ T42] audit: type=1400 audit(1785747997.156:852): avc: denied { mount } for pid=9915 comm="syz.4.1256" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 179.048512][ T42] audit: type=1400 audit(1785747997.176:853): avc: denied { unmount } for pid=7027 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 179.216872][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1258'. [ 179.308483][ T9927] binder: 9926:9927 ioctl c0306201 200000000180 returned -14 [ 179.586929][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 179.736738][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 179.739814][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 179.744671][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 179.749179][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.752984][ T24] usb 8-1: Product: syz [ 179.754496][ T24] usb 8-1: Manufacturer: syz [ 179.766803][ T24] usb 8-1: SerialNumber: syz [ 179.770728][ T24] usb 8-1: config 0 descriptor?? [ 179.774855][ T24] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 179.780470][ T24] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 179.857586][ T9943] syzkaller0: entered promiscuous mode [ 179.860106][ T9943] syzkaller0: entered allmulticast mode [ 180.001297][ T9950] binder: 9949:9950 ioctl c0306201 200000000080 returned -14 [ 180.006570][ T9950] binder: 9949:9950 ioctl c0306201 2000000003c0 returned -14 [ 180.387552][ T24] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 180.396807][ T5888] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 180.548835][ T5888] usb 12-1: config index 0 descriptor too short (expected 28277, got 36) [ 180.551902][ T5888] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.555864][ T5888] usb 12-1: config 0 has no interfaces? [ 180.558034][ T5888] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 180.561059][ T5888] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.567785][ T5888] usb 12-1: config 0 descriptor?? [ 180.798573][ T24] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 180.802583][ T24] em28xx 8-1:0.0: board has no eeprom [ 180.809329][ T5888] usb 12-1: string descriptor 0 read error: -71 [ 180.817196][ T5888] usb 12-1: USB disconnect, device number 3 [ 180.830878][ T42] audit: type=1400 audit(1785747998.956:854): avc: denied { map } for pid=9962 comm="syz.6.1274" path="socket:[43119]" dev="sockfs" ino=43119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.838445][ T42] audit: type=1400 audit(1785747998.956:855): avc: denied { read write } for pid=9962 comm="syz.6.1274" path="socket:[43119]" dev="sockfs" ino=43119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.967044][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1275'. [ 180.970181][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1275'. [ 181.935488][ T42] audit: type=1400 audit(1785748000.056:856): avc: denied { write } for pid=9981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.968057][ T24] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 181.971412][ T24] em28xx 8-1:0.0: dvb set to bulk mode. [ 181.974799][ T5787] em28xx 8-1:0.0: Binding DVB extension [ 181.992296][ T24] usb 8-1: USB disconnect, device number 11 [ 181.998556][ T9985] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1281'. [ 182.004412][ T42] audit: type=1400 audit(1785748000.126:857): avc: denied { write } for pid=9986 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.005600][ T24] em28xx 8-1:0.0: Disconnecting em28xx [ 182.042583][ T5787] em28xx 8-1:0.0: Registering input extension [ 182.045667][ T24] em28xx 8-1:0.0: Closing input extension [ 182.068488][ T24] em28xx 8-1:0.0: Freeing device [ 182.089547][ T9985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9985 comm=syz.6.1281 [ 182.096679][ T42] audit: type=1400 audit(1785748000.216:858): avc: denied { write } for pid=9990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.147522][ T42] audit: type=1400 audit(1785748000.276:859): avc: denied { write } for pid=9995 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.239675][ T42] audit: type=1400 audit(1785748000.366:860): avc: denied { write } for pid=9999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.301843][ T42] audit: type=1400 audit(1785748000.426:861): avc: denied { write } for pid=10004 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.462367][T10013] netlink: 'syz.6.1287': attribute type 1 has an invalid length. [ 182.494756][T10013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.552422][T10013] bond1: (slave veth5): Enslaving as an active interface with a down link [ 182.600955][T10013] bond1: (slave dummy0): making interface the new active one [ 182.607496][T10013] dummy0: entered promiscuous mode [ 182.609487][T10013] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 182.620054][T10013] netlink: 'syz.6.1287': attribute type 10 has an invalid length. [ 182.622566][T10013] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1287'. [ 182.639841][T10013] bond1: (slave dummy0): Releasing active interface [ 182.724427][T10023] binder: 10022:10023 ioctl c0306201 2000000004c0 returned -14 [ 182.811930][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 182.816241][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 182.874494][T10026] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.810833][ T42] audit: type=1400 audit(1785748001.936:862): avc: denied { listen } for pid=10048 comm="syz.3.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.827080][ T42] audit: type=1400 audit(1785748001.936:863): avc: denied { accept } for pid=10048 comm="syz.3.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.603293][ T42] audit: type=1400 audit(1785748002.726:864): avc: denied { create } for pid=10063 comm="syz.4.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 184.612474][ T42] audit: type=1400 audit(1785748002.736:865): avc: denied { setopt } for pid=10063 comm="syz.4.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 184.680635][T10065] i2c i2c-0: delete_device: Can't find device in list [ 184.784879][T10069] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.891696][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1307'. [ 184.927793][T10072] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.964156][T10072] bond5: (slave veth0_to_bond): Releasing backup interface [ 184.976043][T10072] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 185.046157][T10077] tipc: Failed to remove unknown binding: 66,0,0/0:1864487980/1864487982 [ 185.059308][T10077] tipc: Failed to remove unknown binding: 66,0,0/0:1864487980/1864487981 [ 185.065562][T10077] tipc: Failed to remove unknown binding: 66,0,0/0:1864487980/1864487982 [ 185.081342][T10077] tipc: Failed to remove unknown binding: 66,0,0/0:1864487980/1864487981 [ 185.475912][T10104] ip6gre1: entered promiscuous mode [ 185.480141][T10104] ip6gre1: entered allmulticast mode [ 186.329526][T10135] bridge0: port 3(syz_tun) entered disabled state [ 186.350032][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.353356][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.460112][T10145] fuse: fd is not a fuse device [ 186.492589][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.509589][T10135] batadv_slave_1: left promiscuous mode [ 186.665268][T10135] bond1: left promiscuous mode [ 186.709153][T10135] ip6gre1: left promiscuous mode [ 186.714125][T10135] ip6gre1: left allmulticast mode [ 186.733734][T10152] syzkaller0: entered promiscuous mode [ 186.740048][T10152] syzkaller0: entered allmulticast mode [ 186.766986][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.789958][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.826967][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.834297][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.943995][T10162] syz_tun: entered allmulticast mode [ 186.958435][T10162] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 186.962305][T10162] mroute: pending queue full, dropping entries [ 186.990111][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 186.993705][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1340'. [ 187.047219][T10167] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10167 comm=syz.4.1343 [ 187.053654][T10167] netlink: 'syz.4.1343': attribute type 12 has an invalid length. [ 187.060104][T10167] netlink: 'syz.4.1343': attribute type 29 has an invalid length. [ 187.062861][T10167] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1343'. [ 187.069262][T10167] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 187.072533][T10167] netlink: 'syz.4.1343': attribute type 2 has an invalid length. [ 187.075799][T10167] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1343'. [ 187.131303][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 187.131325][ T42] audit: type=1400 audit(1785748005.256:870): avc: denied { map } for pid=10174 comm="syz.4.1345" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 187.197760][T10178] netlink: 'syz.7.1347': attribute type 1 has an invalid length. [ 187.307719][T10184] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 187.381192][T10178] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 187.486593][T10188] binder: 10187:10188 ioctl c0306201 0 returned -14 [ 188.035286][T10198] gfs2: error -5 reading superblock [ 188.525196][T10205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.752384][T10223] fuse: fd is not a fuse device [ 189.382786][T10249] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1373'. [ 189.544920][T10255] fuse: fd is not a fuse device [ 189.738813][T10266] fuse: fd is not a fuse device [ 190.228290][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.3.1386 [ 190.233895][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.3.1386 [ 190.239506][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.3.1386 [ 190.244965][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.3.1386 [ 190.250867][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.3.1386 [ 190.256045][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.3.1386 [ 190.261675][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.3.1386 [ 190.267638][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.3.1386 [ 190.273070][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.3.1386 [ 190.278993][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.3.1386 [ 190.348605][T10293] gadgetfs: bound to dummy_udc driver [ 190.600726][T10300] fsl-ehci serial8250: No platform data for serial8250. [ 190.806916][ T1044] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 190.988080][ T1044] usb 12-1: no configurations [ 190.990146][ T1044] usb 12-1: can't read configurations, error -22 [ 191.299491][T10316] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 191.551010][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'. [ 191.583935][T10336] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.750622][T10343] mmap: syz.6.1399 (10343) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 191.814722][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1407'. [ 191.821465][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1407'. [ 192.038563][T10356] lo: Caught tx_queue_len zero misconfig [ 192.041028][T10356] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 192.537243][T10377] binder: 10376:10377 ioctl c0306201 200000000080 returned -14 [ 192.871089][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'. [ 192.905653][T10392] bridge2: port 1(veth7) entered blocking state [ 192.907864][T10392] bridge2: port 1(veth7) entered disabled state [ 192.910154][T10392] veth7: entered allmulticast mode [ 192.913023][T10392] veth7: entered promiscuous mode [ 192.936417][T10392] bridge2: port 2(veth0_to_bond) entered blocking state [ 192.944682][T10392] bridge2: port 2(veth0_to_bond) entered disabled state [ 192.947922][T10392] veth0_to_bond: entered allmulticast mode [ 192.954968][T10392] veth0_to_bond: entered promiscuous mode [ 193.749917][T10419] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1429'. [ 193.755243][T10419] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1429'. [ 193.760771][T10419] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1429'. [ 193.776803][T10419] bridge0: port 3(veth0) entered blocking state [ 193.779349][T10419] bridge0: port 3(veth0) entered disabled state [ 193.783826][T10419] veth0: entered allmulticast mode [ 193.791179][T10419] veth0: entered promiscuous mode [ 193.805364][T10419] bridge0: port 3(veth0) entered blocking state [ 193.808264][T10419] bridge0: port 3(veth0) entered forwarding state [ 193.824934][T10419] bridge0: port 4(veth1) entered blocking state [ 193.827992][T10419] bridge0: port 4(veth1) entered disabled state [ 193.830477][T10419] veth1: entered allmulticast mode [ 193.833233][T10419] veth1: entered promiscuous mode [ 193.835353][T10419] bridge0: port 4(veth1) entered blocking state [ 193.837577][T10419] bridge0: port 4(veth1) entered forwarding state [ 194.056755][ T42] audit: type=1400 audit(1785748012.176:871): avc: denied { ioctl } for pid=10430 comm="syz.7.1434" path="socket:[45319]" dev="sockfs" ino=45319 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 194.244049][ T42] audit: type=1804 audit(1785748012.366:872): pid=10450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1439" name="file0" dev="tmpfs" ino=2131 res=1 errno=0 [ 194.255512][T10450] uprobe: syz.3.1439:10450 failed to unregister, leaking uprobe [ 194.321898][ T42] audit: type=1400 audit(1785748012.446:873): avc: denied { create } for pid=10447 comm="syz.7.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 194.387159][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 194.391094][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 194.391582][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394969][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 194.399547][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.401131][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 194.407183][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 194.411382][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 194.416077][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 194.421244][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 194.425790][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 194.430470][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 194.445081][T10456] netlink: 'syz.3.1441': attribute type 1 has an invalid length. [ 194.491802][T10456] 8021q: adding VLAN 0 to HW filter on device bond6 [ 194.506779][T10456] bond5: (slave bond6): making interface the new active one [ 194.510583][T10456] bond5: (slave bond6): Enslaving as an active interface with an up link [ 194.542255][T10456] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 194.708001][T10462] vlan3: entered promiscuous mode [ 194.710236][T10462] hsr0: entered promiscuous mode [ 194.712624][T10462] vlan3: entered allmulticast mode [ 194.714922][T10462] hsr0: entered allmulticast mode [ 194.716532][T10462] hsr_slave_0: entered allmulticast mode [ 194.718510][T10462] hsr_slave_1: entered allmulticast mode [ 194.860401][ T42] audit: type=1400 audit(1785748012.986:874): avc: denied { bind } for pid=10465 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.932672][T10467] xt_CT: No such helper "netbios-ns" [ 195.144030][T10481] tipc: New replicast peer: 255.255.255.255 [ 195.147446][T10481] tipc: Enabled bearer , priority 10 [ 199.396773][ C3] net_ratelimit: 14164 callbacks suppressed [ 199.396795][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 199.399399][T10525] syzkaller0: entered promiscuous mode [ 199.404911][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 199.406827][T10525] syzkaller0: entered allmulticast mode [ 199.411867][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 199.418866][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 199.423941][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 199.429149][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 199.434279][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 199.439143][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 199.444319][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 199.449623][ C3] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 199.790375][T10535] syz_tun: entered allmulticast mode [ 199.796573][T10535] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 199.821663][T10534] syz_tun: left allmulticast mode [ 200.055249][ T42] audit: type=1400 audit(1785748018.106:875): avc: denied { write } for pid=10531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.107570][ T42] audit: type=1400 audit(1785748018.176:876): avc: denied { write } for pid=10540 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.165636][T10546] fuse: fd is not a fuse device [ 200.232199][ T42] audit: type=1400 audit(1785748018.356:877): avc: denied { write } for pid=10547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.342324][T10552] syzkaller0: entered promiscuous mode [ 200.344468][T10552] syzkaller0: entered allmulticast mode [ 200.415267][ T42] audit: type=1400 audit(1785748018.536:878): avc: denied { write } for pid=10554 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.522298][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1472'. [ 200.536196][ T42] audit: type=1400 audit(1785748018.656:879): avc: denied { write } for pid=10559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.596209][T10561] tipc: Enabling of bearer rejected, already enabled [ 200.650790][ T42] audit: type=1400 audit(1785748018.776:880): avc: denied { write } for pid=10563 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.806233][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1479'. [ 200.835357][T10575] vlan4: entered promiscuous mode [ 200.842669][T10575] syz_tun: entered promiscuous mode [ 200.918091][ T42] audit: type=1400 audit(1785748019.046:881): avc: denied { write } for pid=10578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.026367][ T42] audit: type=1400 audit(1785748019.146:882): avc: denied { write } for pid=10588 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.068906][T10592] syz_tun: entered allmulticast mode [ 201.073347][T10592] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 201.111783][ T42] audit: type=1400 audit(1785748019.236:883): avc: denied { write } for pid=10594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.189491][ T42] audit: type=1400 audit(1785748019.316:884): avc: denied { write } for pid=10604 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.257096][ T1044] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 201.436938][ T1044] usb 11-1: Using ep0 maxpacket: 16 [ 201.441420][ T1044] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.446024][ T1044] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.451439][ T1044] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 201.456132][ T1044] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.462713][ T1044] usb 11-1: config 0 descriptor?? [ 201.719858][T10623] syz.3.1490 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 201.777562][ T1044] usbhid 11-1:0.0: can't add hid device: -71 [ 201.780544][ T1044] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 201.787912][ T1044] usb 11-1: USB disconnect, device number 2 [ 202.263115][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.269938][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.336454][T10632] binder_alloc: 10631: pid 10631 spamming oneway? 1 buffers allocated for a total size of 4096 [ 202.841325][T10647] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 202.845688][T10647] @0Ù: renamed from bond_slave_1 [ 203.090653][T10652] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 203.398413][T10667] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1505'. [ 203.412618][T10667] ip6gre1: entered promiscuous mode [ 203.416466][T10667] ip6gre1: entered allmulticast mode [ 203.432713][T10667] netlink: 'syz.6.1505': attribute type 6 has an invalid length. [ 203.435872][T10667] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1505'. [ 203.716178][T10689] fuse: fd is not a fuse device [ 204.175790][T10714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.182050][T10714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.193507][T10716] veth0: left allmulticast mode [ 204.195429][T10716] veth0: left promiscuous mode [ 204.198813][T10716] bridge0: port 3(veth0) entered disabled state [ 204.203454][T10716] veth1: left allmulticast mode [ 204.205139][T10716] veth1: left promiscuous mode [ 204.209103][T10716] bridge0: port 4(veth1) entered disabled state [ 204.213847][T10716] bridge_slave_0: left allmulticast mode [ 204.215727][T10716] bridge_slave_0: left promiscuous mode [ 204.218496][T10716] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.223813][T10716] bridge_slave_1: left allmulticast mode [ 204.225635][T10716] bridge_slave_1: left promiscuous mode [ 204.228255][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.239812][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1524'. [ 204.249249][T10716] bond0: (slave bond_slave_0): Releasing backup interface [ 204.256788][T10716] bond0: (slave bond_slave_1): Releasing backup interface [ 204.279504][T10716] team0: Port device team_slave_0 removed [ 204.288546][T10716] team0: Port device team_slave_1 removed [ 204.291971][T10716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.295239][T10716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.299904][T10716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.303180][T10716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.319614][T10717] hsr_slave_0: left promiscuous mode [ 204.323403][T10717] hsr_slave_1: left promiscuous mode [ 204.508883][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1527'. [ 205.078263][T10746] syzkaller0: entered promiscuous mode [ 205.080774][T10746] syzkaller0: entered allmulticast mode [ 205.137142][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 205.137170][ T42] audit: type=1804 audit(1785748023.256:889): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1537" name="file0" dev="tmpfs" ino=2344 res=1 errno=0 [ 205.147932][T10751] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 205.148083][T10751] ref_ctr increment failed for inode: 0x928 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888047d672c0 [ 205.148978][T10751] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 205.161864][T10751] ref_ctr decrement failed for inode: 0x928 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888047d672c0 [ 205.166317][T10751] uprobe: syz.3.1537:10751 failed to unregister, leaking uprobe [ 205.308324][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 205.377692][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 205.651289][ T42] audit: type=1400 audit(1785748023.776:890): avc: denied { read write } for pid=10763 comm="syz.6.1542" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 205.675044][ T42] audit: type=1400 audit(1785748023.776:891): avc: denied { open } for pid=10763 comm="syz.6.1542" path="/108/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 205.694192][ T42] audit: type=1400 audit(1785748023.816:892): avc: denied { mount } for pid=10765 comm="syz.7.1543" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 205.703692][ T42] audit: type=1400 audit(1785748023.826:893): avc: denied { read } for pid=10765 comm="syz.7.1543" name="nullb" dev="configfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 205.712583][ T42] audit: type=1400 audit(1785748023.826:894): avc: denied { read open } for pid=10765 comm="syz.7.1543" path="/103/my_configfs/nullb" dev="configfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 205.722934][ T42] audit: type=1400 audit(1785748023.826:895): avc: denied { write } for pid=10765 comm="syz.7.1543" name="nullb" dev="configfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 206.237962][T10764] smpboot: CPU 1 is now offline [ 206.617799][T10766] null_blk: nullb1: using native zone append [ 206.734949][T10766] workqueue: Failed to create a rescuer kthread for wq "nullb1_zwplugs": -EINTR [ 206.821111][ T42] audit: type=1400 audit(1785748024.946:896): avc: denied { unmount } for pid=9272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 206.940285][T10767] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 206.945567][ T0] Disabled fast string operations [ 206.947874][ T0] ------------[ cut here ]------------ [ 206.950271][ T0] alternatives_patched [ 206.950284][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 206.956228][ T0] Modules linked in: [ 206.957970][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 206.961480][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 206.963639][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.967968][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 206.970462][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 db 71 0f 31 ff 89 ee e8 c8 c6 59 00 85 ed 0f 84 7d fd ff ff e8 4b cc 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 35 cc 59 00 8b [ 206.977806][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 206.980493][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 206.983947][ T0] RDX: ffff88801eaea540 RSI: ffffffff81b095d5 RDI: ffff88801eaea540 [ 206.987332][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 206.990804][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 206.994142][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 206.996854][ T0] FS: 0000000000000000(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 207.000405][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.002670][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0 [ 207.005767][ T0] Call Trace: [ 207.007200][ T0] [ 207.008374][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 207.010470][ T0] ? _printk+0xcf/0x110 [ 207.012131][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 207.014260][ T0] ? early_init_intel.cold+0x129/0x1eb [ 207.016366][ T0] early_init_intel.cold+0x13f/0x1eb [ 207.018658][ T0] init_intel+0x1c/0x7b0 [ 207.020392][ T0] identify_cpu+0x8b0/0x1c30 [ 207.022216][ T0] ? __pfx_cpu_init+0x10/0x10 [ 207.023839][ T0] identify_secondary_cpu+0x178/0x270 [ 207.025754][ T0] start_secondary+0xcf/0x2d0 [ 207.027451][ T0] ? __pfx_start_secondary+0x10/0x10 [ 207.029396][ T0] common_startup_64+0x13e/0x158 [ 207.031115][ T0] [ 207.032237][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 207.035001][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 207.039167][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 207.041832][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.046184][ T0] Call Trace: [ 207.047702][ T0] [ 207.049062][ T0] dump_stack_lvl+0x100/0x190 [ 207.051317][ T0] vpanic+0x552/0x970 [ 207.053140][ T0] ? __pfx_vpanic+0x10/0x10 [ 207.055218][ T0] panic+0xd1/0xe0 [ 207.056874][ T0] ? __pfx_panic+0x10/0x10 [ 207.058782][ T0] ? check_panic_on_warn+0x1f/0x90 [ 207.060825][ T0] check_panic_on_warn.cold+0x19/0x34 [ 207.062639][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 207.064521][ T0] __warn.cold+0x191/0x318 [ 207.066415][ T0] __report_bug+0x30f/0x440 [ 207.068119][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 207.069790][ T0] ? __pfx___report_bug+0x10/0x10 [ 207.071683][ T0] ? prb_read_valid+0x78/0xa0 [ 207.073502][ T0] ? __pfx_prb_read_valid+0x10/0x10 [ 207.075356][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 207.077170][ T0] report_bug+0xb2/0x220 [ 207.079032][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 207.081165][ T0] handle_bug+0x16a/0x2a0 [ 207.083075][ T0] exc_invalid_op+0x17/0x50 [ 207.085046][ T0] asm_exc_invalid_op+0x1a/0x20 [ 207.087169][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 207.089584][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 db 71 0f 31 ff 89 ee e8 c8 c6 59 00 85 ed 0f 84 7d fd ff ff e8 4b cc 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 35 cc 59 00 8b [ 207.097478][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 207.100072][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 207.103176][ T0] RDX: ffff88801eaea540 RSI: ffffffff81b095d5 RDI: ffff88801eaea540 [ 207.106485][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 207.109785][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 207.112662][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 207.115443][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 207.117263][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 207.119141][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 207.121004][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 207.122901][ T0] ? _printk+0xcf/0x110 [ 207.124635][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 207.127025][ T0] ? early_init_intel.cold+0x129/0x1eb [ 207.129392][ T0] early_init_intel.cold+0x13f/0x1eb [ 207.131678][ T0] init_intel+0x1c/0x7b0 [ 207.133562][ T0] identify_cpu+0x8b0/0x1c30 [ 207.135578][ T0] ? __pfx_cpu_init+0x10/0x10 [ 207.137644][ T0] identify_secondary_cpu+0x178/0x270 [ 207.139937][ T0] start_secondary+0xcf/0x2d0 [ 207.141974][ T0] ? __pfx_start_secondary+0x10/0x10 [ 207.144156][ T0] common_startup_64+0x13e/0x158 [ 207.146279][ T0] [ 207.148396][ T0] Kernel Offset: disabled [ 207.150299][ T0] Rebooting in 86400 seconds..