last executing test programs: 2.791112404s ago: executing program 1 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x1, 'vxcan1\x00', {}, 0x3}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0xdc0, 0xfffffffffffffe39, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000180001002d050000af555c180400000000000000", @ANYRES32=r8, @ANYBLOB="0600150003000000100016800c0001000000000000000000"], 0x3c}}, 0x40000) r9 = socket$xdp(0x2c, 0x3, 0x0) getpeername(r9, 0x0, 0x0) request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000340)='gretap\x00', 0xfffffffffffffffd) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x605, 0xfffffffc, 0x8000083, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x8}]}}}, @IFLA_PHYS_SWITCH_ID={0xb, 0x24, "5720126abaa41f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4050) 2.580678125s ago: executing program 1 (id=591): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7d6, &(0x7f0000001080)=ANY=[@ANYBLOB="06ffffffffff194bcfd89849884700000000000000000000000000000f00000000000000030000000f0000000000fb28809e5993e0bb78df7bdb25c9ea17379e2d238f8bef635c27b0912d8c5b64927aff87856c57a28c0ef0d1f52f23e9e6a3eb3faa0e8f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) 1.976770407s ago: executing program 3 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) (async) write(r0, &(0x7f0000000400)='base', 0x4) (async) r1 = socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000b80)={0x64, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0xb, 0x3}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}, @increfs_done={0x40106308, 0x2}, @enter_looper], 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='F 1 0 0', 0x7) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x1, 0x12c, @pic={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x20, 0xe}}) (async) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000000), 0x8) (async) r4 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?/o\xdc\xea\x95\x9a\\\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000005c0)={0x4, 0x6, "9e0113", 0x4, 0x1}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000600)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000006c0)={0x4, &(0x7f0000000680)=[{0xf3da, 0x9, 0x9, 0x8e}, {0x3, 0xb2, 0xfb, 0x2}, {0x5, 0x8, 0x7f, 0x600000}, {0x12, 0xf, 0x8, 0x2}]}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000700), 0x2000, 0x0) inotify_add_watch(r5, &(0x7f0000000740)='./file0\x00', 0x6400000a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x11, &(0x7f0000000780)=0xe, 0x4) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f00000007c0)) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(r5, &(0x7f0000000800)='./file1\x00', 0x159) syz_usb_connect(0x2, 0x4ef, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0xbb, 0x98, 0x54, 0x20, 0x5d1, 0x2021, 0x5f51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4dd, 0x2, 0x2, 0xfb, 0x20, 0x9, "", [{{0x9, 0x4, 0xf6, 0x3, 0x2, 0x63, 0x21, 0x83, 0xfc, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "94"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x3, 0x40}, {0x6, 0x24, 0x1a, 0x3, 0xc}, [@obex={0x5, 0x24, 0x15, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x4, 0x2}]}, @uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x401, 0x5, "e785c680e5e534"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x8, 0x9, 0x3}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6f, 0xff, 0x5, "676f3f8f09162c1f"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x6, 0x9b400c22da8788ef}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x1, 0x8a, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x40, 0x6, 0xa, 0x8}]}], [{{0x9, 0x5, 0x8c, 0x1, 0x10, 0x40, 0xd9, 0xb0, [@generic={0x53, 0xb, "3bd0ec7e8295c68b6f8360986da262bec030ea70fa912713648ab8b7814b5691fafc02acc17db87f66ae2bd2df3da70041e6d2ca1f80184cc09ffc71360c1e70abed8c90acf5f85b924c6dccfe8210f093"}, @generic={0x69, 0x11, "ab1bcaccd139720ff5c6c8f5ff0a1b71a0518ddd7a9fc72c74e5154e8f8c057569d60a588840b6845aca83350e1156315e357a2d43adbd039fd75883bbe7d2c7550de59c19cbbb3b96270046b4c9ab9e1c3f1cef9cbee49b4082f8283a0ceaa0dc7ce9f679a0f9"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x0, 0xa0, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xb4}, @generic={0x69, 0x21, "1be35ccac287fb1b9769c07ba9b75cd4ccec2524d8ef97cadbf9a1b8977c4149b25d02051fc9a39bd4ac9babcc38873898fbce8e81ce9f90adf6fc90c142e057d87848646a07720b2ffc5707c2e49e432aff992cc521a1fe02535e56142585d69bd4448927bdea"}]}}]}}, {{0x9, 0x4, 0xdb, 0x88, 0x9, 0x3, 0x10, 0x2, 0x90, [@hid_hid={0x9, 0x21, 0x8000, 0x7, 0x1, {0x22, 0x11f}}, @hid_hid={0x9, 0x21, 0x68, 0x80, 0x1, {0x22, 0x9c5}}], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0x9f, 0x0, 0xf}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x0, 0x40, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x2f}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x8, 0x9, 0x6, [@generic={0x3a, 0x1, "a68458c9fbe9bce5269511cf97c81b2c20f2f09288f9b136d3446be2c499431d7e7099c141b59c0d0426f0864b5d6f9b320e0220ab23cb9a"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x34, 0x8, 0x7d}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0xe, 0xf5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x40}, @generic={0x67, 0x1, "49f477f886e55a62a92653c442946e4a76403190801f6e6330da4abb647d9959dc32d518e76004f35d7bd7e875af8fc4feaece7248096deb50a7d8a8f9714d8260faa17435e8fbb15d8b675dd57275f4108fff37a2fd077dd5d3ca48a96745688d404fe658"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xbc, 0x9, 0x80}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x3, 0x67, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4}, @generic={0xc3, 0x30, "912fa863c75664fa0b6d3ab7893824cecb774435eb6750e69e79412e47963fe22383ee1cd670a7695d2d2362525c018c7acf265057e4d3d8aec4ad5174ee439dffe093e11549a8b9960a16a606252a1d26f7aae84b828f5fe62d33f7488da3bda7865864fc84aad8671944e54b84bbb83e0a85a1cc56f6090a922f5541e1cac489845409a90d85efc4d8bd5edfed15690016b1a0238ae68079faa2fde74979b027e63378902106d3c35669b8d4119c951599ceba3361f945235acb22db5cdeb2d9"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0x8, 0xe5}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x8, 0x6, 0x4, [@generic={0xf3, 0xe, "c84d909cce35faaf781c4f80cde9c2fd80f0175837865b21637edea82694732df2d08de6f86e11094a73b732d3b60ce8ce0d44ecd53ff2bda56fda71263b11dbec64e8fac8350f0bc1102152a0208cb6acaf16b30233b0f3011269a646c47950bd8869accc4888a41253c28ee1e9622753cf6597b2170e9ee1b835e742bab5cec9d8cc327ec30a500a5d120bc7bca4a121a261b0ae92679a23920c9a08b865dc28c18c756f46449674dfd05f0b8a8f59cc54639b420ecda9e96591bb0379c9a805eec677df7c37fdf7f3433eb6cd4d13a94d9ac290a567d6b4c89ad3a6b4ff60e32e772a2451478c93f9deab4c9855df56"}, @generic={0x48, 0xf, "f01a21aa0a686ebba4f1e76d457360419f73180b726f555144856cb738a6e1ebe3c2da05e4dd96d4964212595ea22684f96afecd78428ae4a8242b3e946b147493407799d122"}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x140, 0x4, 0x9, 0x0, 0x40, 0x8}, 0xf3, &(0x7f0000000d80)={0x5, 0xf, 0xf3, 0x4, [@generic={0xd9, 0x10, 0x3, "cf063998fb39c3c5d67a60fbe344b0b7680b0cb29db07bf72b157f3f4dfb12ec5a9db9eaca5cf8bac5396ebf4eb03291b2a1b15eb72172a2a33e8c24179d77e564ef8cde772dcbb487f3192da51dd0c5891a95fffbf8d0090fd278dfc2b7cdc30bd6f7212e3d5e9a4d0346c4ca329aea585523eacaaef124c74e2fd60daa06917f10e5015db850e5f89e612a028530ba79c49bd0b4ea144239674ebc1f514d09a343d47a644566d4df1ffc33b51c8c89bdef63148d6d11f9eb5127cf484a50f62167ca41ffc216a7c7fa258c9836cd0a33c27e743bc1"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x5, 0xf9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x41, 0x10, 0xf}, @generic={0x4, 0x10, 0x2, 'a'}]}, 0x7, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x44c}}, {0x102, &(0x7f0000000ec0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x6c03}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x457}}]}) syz_usb_connect$uac2(0x5, 0x100, &(0x7f00000011c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x499, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x3, 0x10, 0x8, {0x8, 0xb, 0x2, 0x0, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffff, 0x5, 0x25, 0xa1}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x3, [0xc, 0x5, 0xb, 0x3, 0x6]}, @sample_rate={0xd, 0x24, 0xd, 0x2, 0x1, 0x4, [0x1, 0x1, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x80, 0x6, "1fbf", "a70798"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x3, 0x5, "d8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x1, 0xb, 0x8}, @as_header={0x10, 0x24, 0x1, 0x7f, 0x5, 0x2, 0x1, 0x3, 0x3, 0x6}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6c, 0x3, 0x0, "0127"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x0, 0x7, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x59, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x1, 0xc, 0x4b, "09f0785689"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xfa}, @as_header={0x10, 0x24, 0x1, 0xa, 0x2, 0x2, 0x1002, 0x4, 0xffffffff, 0xb}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x2, 0x40, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf8, 0x5, 0x4, {0x8, 0x25, 0x1, 0x1, 0xc, 0x80, 0x100}}}}}}}}]}}, &(0x7f0000001380)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x300, 0x6a, 0x6, 0x9, 0x8, 0x4}, 0x17, &(0x7f0000001300)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0x8, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0x6, 0x8, 0x3}]}, 0x1, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x419}}]}) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f00000013c0)={0xfb}) syz_open_dev$sndpcmp(&(0x7f0000001400), 0x4, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8088}, 0x0) syz_usb_connect$uac2(0x2, 0xdc, &(0x7f0000001580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x4, 0x70, 0x10, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb, 0x20, 0xf3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x0, 0x3f, 0x7}, [@selector_unit={0xb, 0x24, 0xb, 0xe, 0x6, "517aa8124a8d"}, @multiply_unit={0x7, 0x24, 0xc, 0x4, 0x1, 0x9, 0x77}, @sample_rate={0x13, 0x24, 0xd, 0x4, 0x0, 0x4, [0x3, 0x1, 0x1, 0x2, 0x2, 0x3]}, @effect_unit={0x11, 0x24, 0x7, 0x4, 0x2, 0x3, [0x0, 0x1, 0x2, 0x2, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x90, 0x8, "68ca"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8a, 0x9, 0x2a, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5d, 0xc, 0x7, {0x8, 0x25, 0x1, 0x1, 0x24, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x81, 0x6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x0, 0x1, "61faba4eae01"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x0, 0xe7, {0x8, 0x25, 0x1, 0x1, 0x30, 0x0, 0x200}}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x310, 0x7f, 0x4, 0x0, 0x20, 0xa}, 0x37, &(0x7f00000016c0)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "147ecd5633d6bde16c8e7c7c7bdd9ed7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x1, 0xe0, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e3c1b47ba427c4250fd43227a288e7d8"}]}, 0x4, [{0xbb, &(0x7f0000001700)=@string={0xbb, 0x3, "aca5c1043b79893b6cdeb34f120abcfa090431ef0035ac30fb9663b88f3edf540d0e429cb2c640545fe52cdaf1086bdf8175f5c3aa59dd6e459120e8cb1c782f437d8cf0851280a14108d4d96de521336b9d2b1622a877dadab2bc63b9a6ff48f9d1f484a4ca6590e07d2aabca1469b46fd4dbf38c45692ac30a6a47f1b43803aba00a8163e5e0e2e985ad1fbeec097417519f4edab43ab28d630b4b13c3747913a75ca82d5681f381272eba9c4c4012de49eec0c2bade45af"}}, {0x6e, &(0x7f00000017c0)=@string={0x6e, 0x3, "79880341e35727f50bda2460c8ce813ae70fc9be65fa7aecd66bc7bc87428982ff7420b808fd7179c1461ee0d083d915a25afd7b21235bfea106e7904614acc28ed3b6c9f1f539c9384e0a90f76035745b3e14dbd4aa2c11c74dfe4d07f000ebe894484e30c15eac7c5b4660"}}, {0xb9, &(0x7f0000001840)=@string={0xb9, 0x3, "a6c3ebfcc30b06a8cc61838ec60d4f19d79a70ec6c6ef64f0b8a9ed03b3af089c77486f71932238a5974a961253f1325606ef550f2211bdeebec46ae61c2368d9194ccd587eb3e290f0c9168bccd978585a30293d89f505833c37bce43cd2871e28884b24e947d99e684dd2cbf2b9fc20f3a4b4b6e96e910b0c2e636f1b29b256e3461555d07cf724e2d721822168a6a9a45bf8ca69569840088ef4cc8fdc347dec36ffaa74194f98abdfb1c24cb5841b98b32cceff420"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x406}}]}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) write$FUSE_GETXATTR(r8, &(0x7f0000003a40)={0x18, 0xffffffffffffffda, 0x0, {0x9}}, 0x18) 980.616216ms ago: executing program 1 (id=619): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x400006, 0x3}, 0x1, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x7}) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x7) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 900.164236ms ago: executing program 1 (id=620): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0xf, 0x300, 0x0, 0x707f, 0xfffffffd, 0xffdfffff}}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x401, 0x4}, {{0x0, 0xea60}, 0x12, 0x2, 0x2}], 0x30) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0xc, &(0x7f0000000000)="26bfd5350e9342f23719317ecc1ebf6fb047df54db59569bf68da8020c3aed456fbc35fc290df256edcd882df5df4d882bbb2c528ae7c7dd642b903f46b87271566afae115046a03e0f980915a586ea7af5250002b9f8779a5f7ae0f9ef591a3f527ed28") 899.591818ms ago: executing program 1 (id=621): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) preadv(0xffffffffffffffff, 0x0, 0x0, 0x94, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="41030501caa6a4bcba92be1d89c9d2eb14ce5343e5555533b2bf4e02c62c32c958df8b88ce896c5248596faa242587c398ba77f8b2f0f826eeeb87b6ae95e9dad2828122390f682fb08c198f4eaf43df213964cb1bab7c630cf3a496d4c24d7da75c338a05c9689f872f68b5514937b0e0f3346e5665b78e9af6fead3afcf94fa02f212bb95e76cb4e50d2d9b9a352bd8dde2e17a47e02d6"], 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96d", 0xe}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000190000977faed4d31fa5a4281ff6500126bd7000fedbdf251c2000d8fd04ff09000c0000140012001700baec13376b33", @ANYRES32=r5, @ANYBLOB="05001a00040000008400130000000000000000000000000000000f000000000000000d00000f0f0000000f00000000000000000000000000000f0f000000000000000f000000000000000000000000000000010000000000000007000000000000000000000002000000000000000000000000000000000000000100000700"/140], 0xc4}, 0x1, 0x0, 0x0, 0x85}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = userfaultfd(0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) close(0x3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$6lowpan_control(r9, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df250200", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0) 670.261152ms ago: executing program 3 (id=622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffa0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004801c0001800a0001007265646972"], 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1000}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="e000000011000100350a979c281900000000000000004015143f4529d72384a65b0f683ca0a21fdf11444d7bbf3bc87e09fb185380504c23d961bdc2e326715baaca5d87ea3a2d0572f6a7882ef366b38649669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a81146b174850d36744c882033716525c995"], 0xe0}], 0x1}, 0x0) 581.261908ms ago: executing program 0 (id=623): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003400)={'wlan0\x00', 0x0}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1dc) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file1\x00', 0x3, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a00), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000006b80)={&(0x7f0000006a40)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xf4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x24000800) 581.062985ms ago: executing program 0 (id=624): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 510.344597ms ago: executing program 2 (id=626): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x18, r1, 0x1, 0xb}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4c4, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x100, 0x70bd2c, 0x9, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) 431.058481ms ago: executing program 2 (id=627): openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540), 0x539543, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cpuset\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, r3, 0xfe12482fe0801d67, 0xfffffffc, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0) (async) r5 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x800) write(r5, &(0x7f0000000280)="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", 0xfffffffffffffdd9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './config/usb_gadget/g1\x00'}) sendmsg$inet(r5, &(0x7f0000001500)={&(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000400)="0bba95980210f0c3330af081aa0ddf48bcb0e64c7a41eb7e895249410b4831da14c06c92de7a88075d66111018ecd96249fb76dc581501b18ed177b10e73d01ce5b708", 0x43}, {&(0x7f0000000480)="00b6a59eabfb11c50331608235337c4c6913b62a25858b9cc7276d5a7d304e8f90ece4dada182638906ac29caa82963a7ad25da5d78b13de51e9b93072704a43e659a525690e63f9d6ae763c6ef1b1e5aa62e1930111584b30112017b340bcabd1b7d9c4936c839fcc3ac5901b1d0301831cc77a4b4b735f11e375ac924a4dc26bc0a44edba405fb900708d2ce78d402e10a80bcd627807dfec87d4adeb1f6ce2639269f25b946b58e217bfc695242654c94ffb3e85bdac2ca24a104d72921c0eb154fce8c3864a4e8639af09c9182f27e564604c766277aed69a9fb306d774e4db06c4f49c7e494b36345d15715a1372e47b14866fca18442ab2603ffc20a3e22be6d12b0c9423499c91e7f5b956887006c78bfef44557a840a232f535399a4970cea025eeeb37e94742f7c4e30b255c34e0aa72e40a238df14f11300f77e71438dfba523ace869e672905164505d8459476117c841b1533cc8b7962efca67080c475ddb78d47ebfec39365ea81fd7418496c63ceecba890d6d3794cb512475ba601bb08c66b33a1517fca1be4b0da094dc52b52cf7400011bf0e6ed920df0eda5b6998a6b77f9c7cc1a75ef5af24e3c61f0d50670b1df57516bc7d1e9f7883f3461ee54ba9784f54a2f428662ebecae8b9d0640c53ccbd168410c594209f5f0e2e16823d7ce2fe8d83e30da7a730aed266279b4b4643a74637436a1cd71fb90a019d66a9a4a11713559ee91a7aafd9e8f89dd49de86bc278a583b4175ea6584b347668419a5234c340ba0a7ccd948422215e34436936e458a8359c0f2daa3a5d20b51cb8462c7b9a290f67ef580c8023d25f73573120b886cb2a983644eb5e3bfee50c12da07b4849c4aedc9aa48108436ef9a6343290f126c1e119538118e60fd23477cf4244af4cf0ae217618b9f481706f23c9f440423cf486f12098ff4fa3902bcc48ff117af87fc7d5f8b058970bbef6baafe02afae9dd95b9eb25bf69b9fe3a1bdebabe92f3ba7d89a22a0fb9fbbc06a31be088a33ca4e8672b4f1298a8d08ac09124f5dc41f56de3e692280698eebecaabefae1c60bcec2be9d7656e8f9054d5592fbd1c8c233acbd5f3d6b4e0ab485c283676b3bb45a76123b3a9aef37c72a0d028c532612952045995025af91383dcf69153f9e6c3cea77f41ce2358e70a8fc28feea489e7a8cb1b164d9810e691b1959cb6f27c02c0f2afa972f3f90e40f3c9a66b982a44a852e9fcbeccab4bed55168548cbfa8cc9e40634ee01c6f384e8916c1bd8442e96d41488ed5dc6ba552871f2c045fe6e30ada96d3cf2d43bd299f24092b77b320acbf708ee93c5c50cafd76e22edf661e2a7906fc854ee599a6f8f1ea00734102c4dc9c26743f0803b28d7875b95667cf7229bf975a5cbb6b4dd0e4f81da12f6b0dd280558506dd4334a44912601cd38d2ffe1d77fddcd32791a3295a76a36e69c371e3813c75f54a6d59728771e7853f524c35e231b26cf0ff2e3ad3bb0e30ddc0a4d0062354bf9cd37edac0a3d736d82a40e5f85f53c51375b9b267a3c38279e392a8a3ee485c2abcee3fcf45228b099764d16a6fda1e7512c0bb71dec5c6a94689d9d47f28dc6582f8a75ddf5e055862e3d4f71620411d0070a39c17cc7ab2486bd4e871017ba47cb8c0fa1a66b9def99aec82ecf592885d99b49bc62d6f4ed263e716f6a18cb6145bc0dd8ff7a14c57f1abcfc9e8216963a4052a67ca2a53e8d5c21780bc3e80fdea2101fd6d925398fdee2a8771634f80a6b1c26a88614ae7d3b55fdf7262aea7ec15e81bece99f7e16627550be089908c49560c2e81951edbb04a7e7b9cb3ed190a5d908147cc90876cdd91ddc59960758045cb7ac8e5dda74ec3082ec73d621bd37c506855db7507596fa90b15c6ca5e5cd3784c22d151793636662ed3fb1be34b3942eae9144388108fe8be84eaa7f4fea1098075537c7f6a23db97a8ea437962726ad931f3dbb82c474c3b6ef07728585fa83f1f4259efb34f9a6a7597eec6985e23b8409652a3d88b61d007224a0a4b6ab42b9e04690aaffc504fb5eada1b76423c287597e78cdfa175587869cf2aec27a5f3342267af6bc98997da6f6bacbf991ea1097c8934b24a334f0f48c0a13acde853f57ff94e08bc307f316b6d79fd3b522506c6b247da7848d232f8c4eccf54060cf0d965fefa44cb1ac0fd3977ea6c33f280743caf3b78af6cd537237c37aa64d4a1641a6a49c411925df0b237fcdbdb31f7c01879a0c478d3d58c0a705b6546635f16a89d1ca1b006df59110eff82e53584f5d13340b60423515d055e78e2a379c1755b61c0345748032bb03f1d65bf81d47a884fdd9d3ef256a8ed27269e235dd70e0e28c88e7c88353c3854c4528d2baca1e6583f4934d6cbbcf389fd128a6bdfdedf7d3e076ff7a2a2e12df74fbcdcec377aa61156ea02270716d5c2843e88830a00752a1793f32ec0894990ba1d8658ca40a4feed3b9da9ba7665e68115e64c3e033683395a4b0947144ca0dc7443f1e5099816378b9997b734f8c3a9ae3919f3fce0c949d251ad943e80ea98438011b64870abe6e34d31673789ca90e8e6a7cef198d0b3746344e505d58c47814df9dae3e95cf24b27c755fb2d5423846146963d43cfaecbaefecffacbceed14150d47081ec461ad90906fd55a54fba176da93c1818dcf31a0e74e661fbc1973eb36520cb84f52121cd173a13074e8e08877b221c712e5bc062fc8c4c0a3770689295c1557887189925eff8a95384caebffd0e2b2c8e956818c1d7a03ec33ffd73702366f00d16b5f4d24a97dfdf00d0323058a6e4c9ecee92fc7a7089483d6d608c6ec22ccc765302f3a5f8d1a948f93cd8a2aa03e48957b13598810ec41a39567c9ee1dbc1f519616d43416fb7550812585aefb9947677318471d2bb3affc213d0f170cc923ea25abb6ccf2aa8808b87a28955a44a357ecdacad03e712d931e2532103b3d303f273bc0586309374ab76cdf328fca59d717c9334dfe858b6589b2808ee17cc0870fe97c3acba1fd4fa04ee6345f2538f8c7e9dc9d7cfc698fe31eb17430cfa2d2c06d81abaadca20ee255f40cc568c50e4600d93bbae1c501ad848802bc29b8bb991822a392025e9ea55afd1f921f9388868eb600e7a281d8223a5de416bd292c8b965d736192166a9bee8db952724545ec9108279b5459e92a4acb8a8847208ef454bd9a197277b9b347e8a879abb48fe983f2bfabd243674a5eecf0ae94d2960137e29127e115e7619355c1c1fd321fcbc045e7138af7431e449d30101008e78ae389b57953f7988552dd176aae43631c12b44b65fe4b616d441e32e548185d328782312fa7828cf8e20566796fd3d5efbbac052371d17c8ad6bc79b4f2421271923c82d939206ef628f14f9b7519e6a1e92d644874263550bcb36e3f1d946ccbdd5c543a250af7f9600eca023c07e8060fbedf036f54b6ee800433a1948c788bbc608b11fc1a0c1616e85d3fb61673aa8517cf6080d4a0ee7aca7e0bd93a6d918c8c0ca6375c9945cc7775fcf2b0443b007dbe6e2329551e010e583d4893661304cb1c2fe9e26170a66ce8fbb6a2e0f0f0e009a450e2e04c49083d2100c44db5d97c9c122f9c2e661a409eb998ea53221fb1e67e5be1ec1f64cac4c19368926cef6ac3e40497fb6624cf0b7dafdff116518b924afd29cda14b3f00e33113749256714266fa8edf2ef86fbe712ddd93708c0f931d704a17f3c2d0232299c069ebc4f0c20199c252a10f84b812fb5ab52ab8b06736893541ac0640fe18be5f3f9258b5200fd07ddeaf78520db3e275804796ae9bc568b9291d2b714908327b2f23c76822e83bba0b22ceb293fdfa6ca341be0a5f119c62a3bf96a5cad9003e265c27bfe3715ed075efd5ae29a443d101566d2a08080fc740b7f640a8459ec471b2bdab279a10320baa130ed4c10256da67ec3f85fef5eb8fe6f8a92912b3713bf81394720c03ee883b49689b5db4884adc6cd9643e9407bf69c4fe575be3c476ea8092137895c67ddbac1d1d3707d85523751706183dedc24632ae57529d3dd345d4eca404c2b6dd1589f4b8ab97c1fdf885161d15a961d83d1ae91d5243c4dfcb521e37753258acab4984922055b88b2a31ab034df9dce1963f4095c91ae3e599b46d29bb2d22bb94891eaaac5b227c5147a41b1f5b32eb22ceab3756cb3fa707c9c7de4248f4b20b2292eab8db076bebd0cd8b93bab744e1df4767863f0ddd367e41e498310b58cbb1e5403ff3e7df0f8a8c075897932031a244ed4638b09ddfb3c1642e1207c0a1c5c042e44c87cb81709caf96eec7218bae47af684d7ae297c8775182180101a6ce56e8df28261cc010e2f5f3e0a3dd0205c8737497211ad668787f9c9b2d4d8be13afa490c27ff76673e0136a1eae57fea055a65cb6eec59ef9146f0fa9f5d69b21ba90df57e2dc425de90f5e7a202261ec715b96fe576d67421294db1d7c8f37db9a2b53d97e7fe7d389c92561f7710750d452589e7247b94f49007e5f44306664abd44a80cfa362446b727e5fbc307d48a02dbc0d0b4d3c2890a15ad3a61e4928d1c65345faf34175de44e8d60e875dc46b4847945f32fdb93ce24560c595466985a62e0f53795e6e6776dce73b75f0baffdff9f327938c4aa9bd8d675439983b0f7d0bbb9f8338e4e87cde83c24ec120fc875607cab92e99285ea50faeaef3e4244aad4f1bca1a22789ede4bcc0974c992fe81e4e834380f45353c35693b2b12e6db7469978870171818f63dbe543cc897f990e7dd9bd228fd91269ad95f88dbec65dbca6d5d89975903bdb8a855612dc2d5d7f3177405998ea93e46fdd4c8eb924ca42bac1e3afd960bd5571408cf2d414867ab381679090b13159d3fa242d92454dfedf0b9a929a0ccdf5a83a76b5bd9d5b817c51cf23c84b7adec3114dfb8d36999dbdc83aeadf9eb37786787ccdafe05f29132a02524ed217a6390b31f96e67093c056f24dadee0c80137a29894fc617546c58eeb0310a1a5908908417db65c59211c83c1dde0c9f70bc1981244bb07c20f63c1c2fb6c90d0c19a48477efdc7a47dcc677b5f75263fa295dcca37a5c884b7b1273ae286c0baf93d88727c8dd822cffe5d0dd0884ceae7e38735f69f75a668e4792b49669f9496247daa040e6ecc20dafe4959d125c8d98a3844403c2614d89e3e9e50eaf8a93cdd3154acfabb55849bf287224e8bcb37c172e315022ebbec5c902a5c2f75fbeba2fc21c6ed1e21ad7a2ae8a692c7521c3e52e42988f711bbea38fa2bd88a076d5211ed915fcb93d9af4077adb3be321ce1e92f141146a67f14933c5c132d508b407af53570651df61012a83beee128371e49803f3f94f0f0618003196ae6c6bc443d08e35240098141fcb232bb3787a05391dccb7f921d29d6f0464be7f677326ca52aa060203c21bf97d81fe0bb1d30aa0f248d338141e970fb420e2e9a7c4bfbe943629108a879ee470d2059f38e2eb09d94217a8c7855493622b86c6022602b7d0be6ee6f315f6017077ad03387d0bb108fbacc84cf48cb6ce8dcdebb76c3c479778684e6fb05943fe0c5d9d8dd65fd747eeddce2daa308df727c76a24e21cb74231282b9745564e3919bddbfd8d7d0e5c8ab46862d9e87374c7780a430ffb137dfa2efe5b3b791c3d270bc146692f2a923c9bebc4ac551ef990f9747a2a1fa2d78e938db886041f74316bcd182c1cccc6cca4af6e0d17878a238ec203afc31427712858c92cffcfb129e2638dc6ef7baf3c681adc286d3101f", 0x1000}], 0x2, &(0x7f00000014c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x49}}], 0x18}, 0xc054) (async) close_range(r6, 0xffffffffffffffff, 0x0) 320.888371ms ago: executing program 2 (id=628): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x8, 0x80000000, 0x4, 0x5274ef30, 0x7ffffffe, 0x7ff, 0x90b4, 0x9, 0x25], 0x0, 0x1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@polexpire={0x2c8, 0x1b, 0x20, 0x70bd2a, 0x25dfdbfe, {{{@in=@local, @in=@private=0xa010102, 0x4e20, 0x9, 0x4e24, 0x5, 0x2, 0x80, 0xa0, 0x6, 0x0, 0xee01}, {0x7ff, 0x73, 0x8, 0x7, 0x6, 0x4, 0xfffffffffffffffe, 0x81}, {0x8, 0xfffffffffffffffa, 0xffff, 0x800}, 0x7, 0x6e6bb3, 0x1}, 0x2}, [@srcaddr={0x14, 0xd, @in6=@mcast2}, @user_kmaddress={0x2c, 0x13, {@in6=@private2, @in=@rand_addr=0x64010101, 0x0, 0x2}}, @replay_thresh={0x8, 0xb, 0x8}, @algo_aead={0x8c, 0x12, {{'aegis128l-generic\x00'}, 0x200, 0x100, "82472445b16d4efb336168535163bffee6ee897818d5447f1a2ebc7292e8a4d92c73e0dc125a391f590b4586ca77312d42b31a2ede2da016bba3f8f390ab6010"}}, @srcaddr={0x14, 0xd, @in=@multicast2}, @algo_auth_trunc={0x11d, 0x14, {{'sha3-256-generic\x00'}, 0x688, 0x0, "e1eca01894c8f8f148d9135862c8dba5a318e579bed6a5d51f4043a6d63b3379d4c9906a78c39d8ca6e5621f84e282d9f825433f318b35cca387372f771b7ca51b9716b3bf91c34fdf93fa291cc368cc76bb9a0ab6b684203cf2c1efca668e5115ed5141a7d84d12da8bb5a136900b33cbf11c12d4fde08cd5c1115a66b065e6ac9ad592461121a39262381bfbe83b99b5e456dd49a337ba6d2c881ffccd22ec1837741da331ed55d42210634ddb7369449dd954e9635103b0e98b7b6c0a0d69d9771d25c9bf0f58f2f7c6e8beadb39128"}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x880}, 0x0) 320.665755ms ago: executing program 0 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dc0000001a00010029bd7000fcdbdf251c302006fd00ff08000400000800010000000c"], 0xdc}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 317.784397ms ago: executing program 2 (id=630): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000003c0)={{r0, &(0x7f0000000000)='GPL\x00', 0x88400, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x75f2d5ae]}, {0x38, 0xc, 0x1000, 0xa466}}, 0x1, &(0x7f0000000080), &(0x7f0000000200)}, 0x1, &(0x7f0000000380)=[{0x1, 0x1, &(0x7f0000000280)='GPL\x00', &(0x7f00000002c0)="a3274c69caa1f06bc2d6ac11042d05ea8ea66c3a051a11cbf434c44f13cd69612d9bc2cc98cfdd8fec2b4eb61071700a32a9431d1aff397d237df198a4f6abab964a3858b69b0cb42e3823d06c5e687855ce0e602ef0e346ee347833160b0eb93146f480e0b4379adf08c12a5801f01c2adc7c187ed80fc7095a94953613366dfc260724e53a0cd7a411ee4f071228", 0x8f}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x6, 0x0, 0x52, @dev={0xfe, 0x80, '\x00', 0x3d}, @private2, 0x80, 0x80, 0x7, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x2f, 0x5, 0xa, 0x401, 0x8f5906edf240057e, @mcast1, @mcast1, 0x8000, 0x80, 0x5, 0x93e}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000003c0)={{r0, &(0x7f0000000000)='GPL\x00', 0x88400, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x75f2d5ae]}, {0x38, 0xc, 0x1000, 0xa466}}, 0x1, &(0x7f0000000080), &(0x7f0000000200)}, 0x1, &(0x7f0000000380)=[{0x1, 0x1, &(0x7f0000000280)='GPL\x00', &(0x7f00000002c0)="a3274c69caa1f06bc2d6ac11042d05ea8ea66c3a051a11cbf434c44f13cd69612d9bc2cc98cfdd8fec2b4eb61071700a32a9431d1aff397d237df198a4f6abab964a3858b69b0cb42e3823d06c5e687855ce0e602ef0e346ee347833160b0eb93146f480e0b4379adf08c12a5801f01c2adc7c187ed80fc7095a94953613366dfc260724e53a0cd7a411ee4f071228", 0x8f}]}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x6, 0x0, 0x52, @dev={0xfe, 0x80, '\x00', 0x3d}, @private2, 0x80, 0x80, 0x7, 0x3ff}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x2f, 0x5, 0xa, 0x401, 0x8f5906edf240057e, @mcast1, @mcast1, 0x8000, 0x80, 0x5, 0x93e}}) (async) 317.54102ms ago: executing program 0 (id=631): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='1', 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='1', 0x1) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000800)='1', 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSIGACCEPT(r1, 0x5607, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) (async) write(r2, &(0x7f0000000a00)='1', 0x1) (async) 317.053404ms ago: executing program 2 (id=632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf000, 0xc}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x80}, {0x6000, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x1, 0x1}, {0x1fffffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 180.634071ms ago: executing program 2 (id=633): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176673d72656c61746901653a38302d3919"]) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000390423bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="81b8000000000000300012800b000100697036746e6c00"], 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'sit0\x00', r1, 0x80, 0x10, 0x7f, 0x0, {{0x6, 0x4, 0x1, 0x12, 0x18, 0x64, 0x0, 0x6, 0x29, 0x0, @broadcast, @remote, {[@noop]}}}}}) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x9, r2, 0x27, r0}, 0x10) 0s ago: executing program 1 (id=634): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4a6e, &(0x7f0000000140)={0x0, 0x82ec, 0x40000, 0x8000002, 0x16e, 0x0, r0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2217, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x9a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45139' (ED25519) to the list of known hosts. [ 41.941029][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 41.941040][ T42] audit: type=1400 audit(1785611046.344:141): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.950795][ T42] audit: type=1400 audit(1785611046.354:142): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.953860][ T5721] cgroup: Unknown subsys name 'net' [ 41.960622][ T42] audit: type=1400 audit(1785611046.364:143): avc: denied { unmount } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.100838][ T5721] cgroup: Unknown subsys name 'cpuset' [ 42.104600][ T5721] cgroup: Unknown subsys name 'rlimit' [ 42.308793][ T42] audit: type=1400 audit(1785611046.714:144): avc: denied { setattr } for pid=5721 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.315941][ T42] audit: type=1400 audit(1785611046.714:145): avc: denied { create } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.322340][ T42] audit: type=1400 audit(1785611046.714:146): avc: denied { write } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.328811][ T42] audit: type=1400 audit(1785611046.714:147): avc: denied { read } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.335271][ T42] audit: type=1400 audit(1785611046.724:148): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.343031][ T42] audit: type=1400 audit(1785611046.724:149): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.350246][ T42] audit: type=1400 audit(1785611046.724:150): avc: denied { read } for pid=5449 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.369061][ T5727] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.037283][ T5721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.328271][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.329006][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.331931][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.334587][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.335749][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.338970][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.340000][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.342414][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.342451][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.343230][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.343623][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.343876][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.344045][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.345483][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.356393][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.359688][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.361088][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.363430][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.366122][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.373397][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.964263][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.968041][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.970329][ T5737] bridge_slave_0: entered allmulticast mode [ 46.973030][ T5737] bridge_slave_0: entered promiscuous mode [ 46.986859][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.990382][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.993710][ T5736] bridge_slave_0: entered allmulticast mode [ 46.997431][ T5736] bridge_slave_0: entered promiscuous mode [ 47.002152][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.004875][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.007496][ T5743] bridge_slave_0: entered allmulticast mode [ 47.011262][ T5743] bridge_slave_0: entered promiscuous mode [ 47.015066][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.017408][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.019750][ T5743] bridge_slave_1: entered allmulticast mode [ 47.022312][ T5743] bridge_slave_1: entered promiscuous mode [ 47.024875][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.027170][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.029570][ T5735] bridge_slave_0: entered allmulticast mode [ 47.032216][ T5735] bridge_slave_0: entered promiscuous mode [ 47.035403][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.037720][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.040098][ T5735] bridge_slave_1: entered allmulticast mode [ 47.042745][ T5735] bridge_slave_1: entered promiscuous mode [ 47.045309][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.047580][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.049978][ T5737] bridge_slave_1: entered allmulticast mode [ 47.053383][ T5737] bridge_slave_1: entered promiscuous mode [ 47.062994][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.065430][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.067720][ T5736] bridge_slave_1: entered allmulticast mode [ 47.070556][ T5736] bridge_slave_1: entered promiscuous mode [ 47.104203][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.125633][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.130684][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.136519][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.142563][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.147453][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.163318][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.168079][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.183464][ T5737] team0: Port device team_slave_0 added [ 47.186685][ T5737] team0: Port device team_slave_1 added [ 47.219047][ T5743] team0: Port device team_slave_0 added [ 47.221774][ T5736] team0: Port device team_slave_0 added [ 47.224513][ T5735] team0: Port device team_slave_0 added [ 47.232570][ T5743] team0: Port device team_slave_1 added [ 47.235314][ T5736] team0: Port device team_slave_1 added [ 47.238083][ T5735] team0: Port device team_slave_1 added [ 47.240353][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.242568][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.250774][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.261296][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.263530][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.271501][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.303764][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.305949][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.314639][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.324883][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.327098][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.335103][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.339092][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.341319][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.349303][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.356469][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.359714][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.370152][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.375600][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.377933][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.386248][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.405667][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.408166][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.416901][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.439702][ T5737] hsr_slave_0: entered promiscuous mode [ 47.442089][ T5737] hsr_slave_1: entered promiscuous mode [ 47.464151][ T5743] hsr_slave_0: entered promiscuous mode [ 47.466383][ T5743] hsr_slave_1: entered promiscuous mode [ 47.468501][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 47.470364][ T5743] Cannot create hsr debugfs directory [ 47.498644][ T5736] hsr_slave_0: entered promiscuous mode [ 47.500917][ T5736] hsr_slave_1: entered promiscuous mode [ 47.503736][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 47.505550][ T5736] Cannot create hsr debugfs directory [ 47.535908][ T5735] hsr_slave_0: entered promiscuous mode [ 47.538308][ T5735] hsr_slave_1: entered promiscuous mode [ 47.540513][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 47.542318][ T5735] Cannot create hsr debugfs directory [ 47.769422][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.777013][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.779765][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.784314][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.788516][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.793659][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.802181][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.805853][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.848140][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.852769][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.855467][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.860210][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.864056][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.869279][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.871899][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.876110][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.920149][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.923933][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.926603][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.931554][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.934251][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.937979][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.940676][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.944416][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.003443][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.007668][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.010480][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.014410][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.017813][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.022314][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.024870][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.028581][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.034682][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.064071][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.082558][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.085247][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.106438][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.108726][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.116531][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.138237][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.144860][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.149589][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.151869][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.165800][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.168046][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.188734][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.201156][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.210173][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.212968][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.224198][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.226489][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.251647][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.271033][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.273373][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.282332][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.284644][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.359927][ T5748] Bluetooth: hci1: command tx timeout [ 48.428167][ T5748] Bluetooth: hci2: command tx timeout [ 48.429587][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.430118][ T5753] Bluetooth: hci3: command tx timeout [ 48.430125][ T5748] Bluetooth: hci0: command tx timeout [ 48.463080][ T5737] veth0_vlan: entered promiscuous mode [ 48.471636][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.474208][ T5737] veth1_vlan: entered promiscuous mode [ 48.498155][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.510402][ T5743] veth0_vlan: entered promiscuous mode [ 48.514912][ T5737] veth0_macvtap: entered promiscuous mode [ 48.521389][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.525762][ T5737] veth1_macvtap: entered promiscuous mode [ 48.532155][ T5743] veth1_vlan: entered promiscuous mode [ 48.557166][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.566828][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.590443][ T5743] veth0_macvtap: entered promiscuous mode [ 48.597021][ T5735] veth0_vlan: entered promiscuous mode [ 48.606588][ T5743] veth1_macvtap: entered promiscuous mode [ 48.616899][ T5735] veth1_vlan: entered promiscuous mode [ 48.634379][ T5736] veth0_vlan: entered promiscuous mode [ 48.658572][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.673178][ T5736] veth1_vlan: entered promiscuous mode [ 48.677772][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.679225][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.680692][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.705328][ T5735] veth0_macvtap: entered promiscuous mode [ 48.714524][ T5735] veth1_macvtap: entered promiscuous mode [ 48.719578][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.722311][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.735594][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 48.735606][ T42] audit: type=1400 audit(1785611053.134:172): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.737141][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.737572][ T42] audit: type=1400 audit(1785611053.134:173): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.285zAh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.754387][ T42] audit: type=1400 audit(1785611053.134:174): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.761034][ T42] audit: type=1400 audit(1785611053.144:175): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.285zAh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 48.771772][ T42] audit: type=1400 audit(1785611053.144:176): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.285zAh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 48.773541][ T5736] veth0_macvtap: entered promiscuous mode [ 48.779793][ T42] audit: type=1400 audit(1785611053.144:177): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.779817][ T42] audit: type=1400 audit(1785611053.154:178): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 48.779838][ T42] audit: type=1400 audit(1785611053.154:179): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="gadgetfs" ino=8497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 48.779858][ T42] audit: type=1400 audit(1785611053.154:180): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.779907][ T42] audit: type=1400 audit(1785611053.164:181): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 48.784756][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.801728][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.822529][ T5736] veth1_macvtap: entered promiscuous mode [ 48.853272][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.856549][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.858519][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.859898][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.873915][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.911105][ T5891] comedi comedi3: Minor 256 is invalid! [ 48.913598][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.916813][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.928028][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.933556][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.937084][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.005166][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.008599][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.010352][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.014362][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.031013][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.043213][ T5898] Zero length message leads to an empty skb [ 49.058012][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.066335][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.072403][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.089445][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.096411][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.106414][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 49.118000][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.122837][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.159693][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.164520][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.188114][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.193619][ T5906] 0x000000000000-0x000000020000 : "" [ 49.195929][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.225786][ T5906] ftl_cs: FTL header not found. [ 49.298026][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.300947][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.304153][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.306927][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.860008][ T5816] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 50.110013][ T5968] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 50.135153][ T5971] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 50.150665][ T5974] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 50.223974][ T5987] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 50.226200][ T5988] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 50.329066][ T6003] capability: warning: `syz.3.26' uses 32-bit capabilities (legacy support in use) [ 50.353745][ T6007] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.31' sets config #8 [ 50.366766][ T6005] netlink: 'syz.0.32': attribute type 5 has an invalid length. [ 50.429971][ T5753] Bluetooth: hci1: command tx timeout [ 50.508034][ T5753] Bluetooth: hci3: command tx timeout [ 50.518251][ T5749] Bluetooth: hci2: command tx timeout [ 50.519546][ T5753] Bluetooth: hci0: command tx timeout [ 50.628278][ T5824] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 50.668138][ T5831] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 50.758221][ T5824] usb 5-1: device descriptor read/64, error -71 [ 50.839225][ T5831] usb 8-1: Using ep0 maxpacket: 8 [ 50.844435][ T5831] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 50.847990][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.857327][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 50.859868][ T5831] pvrusb2: ********** [ 50.861138][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 50.864265][ T5831] pvrusb2: Important functionality might not be entirely working. [ 50.867270][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 50.871481][ T5831] pvrusb2: ********** [ 50.998103][ T5824] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 51.060924][ T2520] pvrusb2: Invalid write control endpoint [ 51.088645][ T2520] pvrusb2: Invalid write control endpoint [ 51.090985][ T2520] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 51.094279][ T2520] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 51.096593][ T2520] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 51.099922][ T2520] pvrusb2: Device being rendered inoperable [ 51.102965][ T2520] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 51.106399][ T2520] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 51.110853][ T2520] pvrusb2: Attached sub-driver cx25840 [ 51.113057][ T2520] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 51.116450][ T2520] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 51.127998][ T5824] usb 5-1: device descriptor read/64, error -71 [ 51.199626][ T6020] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 51.235852][ T6022] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET) [ 51.238453][ T5824] usb usb5-port1: attempt power cycle [ 51.271940][ T5887] usb 8-1: USB disconnect, device number 3 [ 51.428470][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035187c00: rx timeout, send abort [ 51.432453][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035187c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 51.577995][ T5824] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 51.596666][ T6034] warning: `syz.2.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.598458][ T5824] usb 5-1: device descriptor read/8, error -71 [ 51.727707][ T6046] bond1: Removing last arp target with arp_interval on [ 51.773780][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 51.839736][ T5824] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 51.859061][ T5824] usb 5-1: device descriptor read/8, error -71 [ 51.969414][ T5824] usb usb5-port1: unable to enumerate USB device [ 52.088022][ T5887] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 52.257954][ T5887] usb 8-1: Using ep0 maxpacket: 8 [ 52.261223][ T5887] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 52.263905][ T5887] usb 8-1: config 0 has no interface number 0 [ 52.265838][ T5887] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 52.269807][ T5887] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 52.273500][ T5887] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 52.276811][ T5887] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 52.281007][ T5887] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 52.283898][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.287763][ T5887] usb 8-1: config 0 descriptor?? [ 52.296025][ T5887] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 52.445292][ T6068] tun0: tun_chr_ioctl cmd 1074025675 [ 52.447050][ T6068] tun0: persist enabled [ 52.449863][ T6068] tun0: tun_chr_ioctl cmd 1074025675 [ 52.451601][ T6068] tun0: persist enabled [ 52.455301][ T6068] overlay: Unknown parameter 'fsmagic' [ 52.457586][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.46'. [ 52.508107][ T5753] Bluetooth: hci1: command tx timeout [ 52.589794][ T5753] Bluetooth: hci2: command tx timeout [ 52.589805][ T5749] Bluetooth: hci3: command tx timeout [ 52.598043][ T5753] Bluetooth: hci0: command tx timeout [ 52.922930][ T6111] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 52.939127][ T6111] bond2 (unregistering): Released all slaves [ 53.153191][ T6124] syzkaller0: entered promiscuous mode [ 53.155017][ T6124] syzkaller0: entered allmulticast mode [ 53.377576][ T6131] hub 4-0:1.0: USB hub found [ 53.380420][ T6131] hub 4-0:1.0: 2 ports detected [ 53.452238][ T6090] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.594841][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 53.803057][ T42] kauditd_printk_skb: 164 callbacks suppressed [ 53.803069][ T42] audit: type=1400 audit(1785611058.204:346): avc: denied { map } for pid=6146 comm="syz.2.62" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 53.812447][ T42] audit: type=1400 audit(1785611058.204:347): avc: denied { execute } for pid=6146 comm="syz.2.62" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 53.865564][ T42] audit: type=1400 audit(1785611058.264:348): avc: denied { name_bind } for pid=6148 comm="syz.0.63" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.872494][ T42] audit: type=1400 audit(1785611058.264:349): avc: denied { node_bind } for pid=6148 comm="syz.0.63" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.875963][ T6151] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 54.164389][ T42] audit: type=1400 audit(1785611058.564:350): avc: denied { read } for pid=6159 comm="syz.2.66" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.171518][ T42] audit: type=1400 audit(1785611058.564:351): avc: denied { open } for pid=6159 comm="syz.2.66" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.179033][ T42] audit: type=1400 audit(1785611058.574:352): avc: denied { create } for pid=6159 comm="syz.2.66" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.188913][ T42] audit: type=1326 audit(1785611058.594:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.2.66" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94219e019 code=0x7ffc0000 [ 54.197761][ T42] audit: type=1326 audit(1785611058.594:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.2.66" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94219e019 code=0x7ffc0000 [ 54.206758][ T42] audit: type=1326 audit(1785611058.594:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.2.66" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94219e019 code=0x7ffc0000 [ 54.589280][ T5749] Bluetooth: hci1: command tx timeout [ 54.668265][ T5749] Bluetooth: hci0: command tx timeout [ 54.668306][ T5748] Bluetooth: hci3: command tx timeout [ 54.670811][ T5742] Bluetooth: hci2: command tx timeout [ 54.853416][ T5738] usb 8-1: USB disconnect, device number 4 [ 54.866655][ T5738] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 55.002927][ T6176] macvtap1: entered promiscuous mode [ 55.004698][ T6176] macvtap1: entered allmulticast mode [ 55.014578][ T6192] process 'syz.3.75' launched './file1' with NULL argv: empty string added [ 55.080584][ T6204] netlink: 280 bytes leftover after parsing attributes in process `syz.3.79'. [ 55.264015][ T6221] syzkaller0: entered promiscuous mode [ 55.265839][ T6221] syzkaller0: entered allmulticast mode [ 55.281988][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.83'. [ 55.364960][ T6240] netlink: 140 bytes leftover after parsing attributes in process `syz.3.85'. [ 55.366369][ T5831] IPVS: starting estimator thread 0... [ 55.372079][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.85'. [ 55.384478][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'. [ 55.405720][ T6246] bond1: entered allmulticast mode [ 55.468025][ T5742] Bluetooth: hci4: command 0x1003 tx timeout [ 55.468034][ T6241] IPVS: using max 45 ests per chain, 108000 per kthread [ 55.469249][ T5753] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 55.638364][ T5887] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 55.732942][ T6272] syz.1.93 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.817987][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 55.900297][ T6283] netlink: 'syz.1.95': attribute type 32 has an invalid length. [ 55.913069][ T6283] bond1: Setting coupled_control to off (0) [ 55.915144][ T6283] bond1: entered promiscuous mode [ 55.951134][ T6292] netlink: 52 bytes leftover after parsing attributes in process `syz.2.98'. [ 55.958050][ T29] usb 5-1: device descriptor read/64, error -71 [ 55.958932][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.963212][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.974347][ T6292] netlink: 52 bytes leftover after parsing attributes in process `syz.2.98'. [ 56.218069][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.348007][ T29] usb 5-1: device descriptor read/64, error -71 [ 56.458132][ T29] usb usb5-port1: attempt power cycle [ 56.685165][ T6305] tmpfs: Bad value for 'huge' [ 56.741477][ T6314] i2c i2c-0: new_device: Can't parse I2C address [ 56.764239][ T6319] ======================================================= [ 56.764239][ T6319] WARNING: The mand mount option has been deprecated and [ 56.764239][ T6319] and is ignored by this kernel. Remove the mand [ 56.764239][ T6319] option from the mount to silence this warning. [ 56.764239][ T6319] ======================================================= [ 56.779980][ T6319] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 56.828010][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 56.848874][ T6326] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 56.858443][ T29] usb 5-1: device descriptor read/8, error -71 [ 57.128074][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 57.159516][ T29] usb 5-1: device descriptor read/8, error -71 [ 57.268380][ T29] usb usb5-port1: unable to enumerate USB device [ 57.558317][ T6341] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 57.561688][ T6341] netlink: 232 bytes leftover after parsing attributes in process `syz.3.113'. [ 57.564544][ T6341] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 57.575879][ T6341] affs: No valid root block on device nullb0 [ 57.587029][ T6347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.115'. [ 57.683893][ T6358] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 57.821071][ T6371] binder: 6369:6371 ioctl c0306201 200000004a40 returned -22 [ 57.933851][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056bdcc00: rx timeout, send abort [ 58.225076][ T6410] netlink: 830 bytes leftover after parsing attributes in process `syz.3.130'. [ 58.433921][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056bdcc00: abort rx timeout. Force session deactivation [ 58.438834][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056bdd400: rx timeout, send abort [ 58.450613][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888056bdd400: connection exists (fe ff). last cmd: 20 [ 58.700613][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056be4400: rx timeout, send abort [ 59.029208][ T42] kauditd_printk_skb: 262 callbacks suppressed [ 59.029224][ T42] audit: type=1400 audit(1785611063.434:618): avc: denied { read write } for pid=6425 comm="syz.1.133" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.032838][ T5738] hid (null): global environment stack underflow [ 59.038863][ T42] audit: type=1400 audit(1785611063.434:619): avc: denied { open } for pid=6425 comm="syz.1.133" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.053946][ T5738] hid-generic 616F:20C2607D:F72986D9.0002: global environment stack underflow [ 59.058983][ T5738] hid-generic 616F:20C2607D:F72986D9.0002: item 0 1 1 11 parsing failed [ 59.063813][ T5738] hid-generic 616F:20C2607D:F72986D9.0002: probe with driver hid-generic failed with error -22 [ 59.102829][ T6428] xt_l2tp: invalid flags combination: 8 [ 59.112636][ T6430] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 59.116267][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.120020][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.161034][ T42] audit: type=1400 audit(1785611063.564:620): avc: denied { watch watch_reads } for pid=6427 comm="syz.3.134" path="pipe:[12099]" dev="pipefs" ino=12099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 59.165534][ T6428] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 59.170078][ T42] audit: type=1400 audit(1785611063.564:621): avc: denied { setattr } for pid=6431 comm="syz.1.136" name="file0" dev="9p" ino=78395293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.174456][ T6428] overlayfs: missing 'lowerdir' [ 59.181159][ T42] audit: type=1400 audit(1785611063.564:622): avc: denied { append } for pid=6431 comm="syz.1.136" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.190366][ T42] audit: type=1400 audit(1785611063.564:623): avc: denied { write } for pid=6431 comm="syz.1.136" name="/" dev="9p" ino=78395225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.198655][ T42] audit: type=1400 audit(1785611063.564:624): avc: denied { add_name } for pid=6431 comm="syz.1.136" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.203328][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056be4400: abort rx timeout. Force session deactivation [ 59.205952][ T42] audit: type=1400 audit(1785611063.564:625): avc: denied { create } for pid=6431 comm="syz.1.136" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.217616][ T42] audit: type=1400 audit(1785611063.564:626): avc: denied { associate } for pid=6431 comm="syz.1.136" name="blkio.bfq.io_service_bytes_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.225206][ T42] audit: type=1400 audit(1785611063.574:627): avc: denied { read append open } for pid=6431 comm="syz.1.136" path="/36/file0/blkio.bfq.io_service_bytes_recursive" dev="9p" ino=78395415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.241666][ T6435] tmpfs: Cannot enable quota on remount [ 59.352766][ T6449] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.440393][ T6449] openvswitch: netlink: Key type 168 is out of range max 32 [ 59.464506][ T6463] netlink: 'syz.1.137': attribute type 3 has an invalid length. [ 59.464506][ T6465] netlink: 'syz.1.137': attribute type 3 has an invalid length. [ 59.554364][ T6462] kvm: kvm [6461]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 59.561649][ T6469] hid-generic 0003:0627:0001.0001: pid 6469 passed too large report [ 59.571966][ T6462] kvm: kvm [6461]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 59.574808][ T6462] kvm: kvm [6461]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x81 [ 59.585548][ T6462] kvm: kvm [6461]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 59.588564][ T6462] kvm: kvm [6461]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x81 [ 59.808469][ T6508] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 59.815242][ T6508] /dev/nullb0: Can't open blockdev [ 60.171279][ T6533] x_tables: duplicate underflow at hook 1 [ 60.202043][ T6540] __nla_validate_parse: 2 callbacks suppressed [ 60.202053][ T6540] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.168'. [ 60.207205][ T6540] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.168'. [ 60.488041][ T1045] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.638354][ T1045] usb 6-1: Using ep0 maxpacket: 32 [ 60.641313][ T1045] usb 6-1: config 2 has an invalid interface number: 194 but max is 0 [ 60.644037][ T1045] usb 6-1: config 2 has no interface number 0 [ 60.646037][ T1045] usb 6-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 60.649406][ T1045] usb 6-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 60.653129][ T1045] usb 6-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 60.656260][ T1045] usb 6-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 60.659363][ T1045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.665314][ T6544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 60.668031][ T5890] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 60.668034][ T6544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 60.830903][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.841251][ T5890] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 60.843505][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 60.844283][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 60.847251][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 60.849857][ T5890] usb 5-1: Product: syz [ 60.849867][ T5890] usb 5-1: Manufacturer: syz [ 60.854312][ T5890] navman 5-1:1.0: navman converter detected [ 60.865058][ T5890] usb 5-1: navman converter now attached to ttyUSB0 [ 60.878049][ T5816] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.878825][ T6544] Invalid argument reading file caps for ./file0 [ 60.881834][ T5816] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.881867][ T5816] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.881897][ T5816] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.898501][ T6544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6544 comm=syz.1.171 [ 60.908872][ T1045] usb 6-1: string descriptor 0 read error: -71 [ 60.914228][ T1045] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 60.944693][ T6566] loop4: detected capacity change from 0 to 2640 [ 60.947792][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.950635][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.953493][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.955970][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.958885][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.961451][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.963916][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.966335][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.969522][ T6566] ldm_validate_partition_table(): Disk read failed. [ 60.971673][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.974134][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.976589][ T6566] Dev loop4: unable to read RDB block 0 [ 60.979016][ T6566] loop4: unable to read partition table [ 60.980916][ T6566] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 60.992512][ T1045] usb 6-1: USB disconnect, device number 2 [ 61.001089][ T5742] Bluetooth: hci1: command 0x0406 tx timeout [ 61.060656][ T6552] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.069557][ T5890] usb 5-1: USB disconnect, device number 10 [ 61.084710][ T5890] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 61.089154][ T5890] navman 5-1:1.0: device disconnected [ 61.211017][ T6581] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 61.297359][ T6589] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 61.302257][ T6589] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 61.304839][ T6589] netlink: 192 bytes leftover after parsing attributes in process `syz.3.187'. [ 61.307961][ T6589] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 61.310390][ T6589] netlink: 29 bytes leftover after parsing attributes in process `syz.3.187'. [ 61.340533][ T6591] netlink: 64 bytes leftover after parsing attributes in process `syz.3.188'. [ 61.343529][ T6591] tipc: Started in network mode [ 61.344956][ T6591] tipc: Node identity 9, cluster identity 1 [ 61.348050][ T6591] tipc: Node number set to 9 [ 61.455918][ T6593] tmpfs: User quota inode hardlimit too large. [ 61.469433][ T5738] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.512757][ T6599] netlink: 59 bytes leftover after parsing attributes in process `syz.3.190'. [ 61.515827][ T6600] netlink: 59 bytes leftover after parsing attributes in process `syz.3.190'. [ 61.521026][ T6599] netlink: 'syz.3.190': attribute type 3 has an invalid length. [ 61.523467][ T6599] netlink: 92 bytes leftover after parsing attributes in process `syz.3.190'. [ 61.619372][ T5738] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 61.626541][ T5738] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.633045][ T5738] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.635797][ T5738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.641972][ T5738] usb 7-1: config 0 descriptor?? [ 61.842748][ T6633] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 61.891375][ T6639] netlink: 'syz.1.201': attribute type 5 has an invalid length. [ 61.900807][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6641 comm=syz.0.202 [ 61.960837][ T6647] xt_nat: multiple ranges no longer supported [ 62.040555][ T6657] netlink: 'syz.0.209': attribute type 2 has an invalid length. [ 62.052295][ T6657] : entered promiscuous mode [ 62.072608][ T5738] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 62.082218][ T5738] usb 7-1: USB disconnect, device number 2 [ 62.113060][ T6664] fido_id[6664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 62.271455][ T5831] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 62.429643][ T5831] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 62.432865][ T5831] usb 6-1: config 0 interface 0 has no altsetting 0 [ 62.436902][ T5831] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 62.440011][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 62.442633][ T5831] usb 6-1: Product: syz [ 62.443964][ T5831] usb 6-1: Manufacturer: syz [ 62.445425][ T5831] usb 6-1: SerialNumber: syz [ 62.452588][ T5831] usb 6-1: config 0 descriptor?? [ 62.459428][ T5831] usb 6-1: selecting invalid altsetting 0 [ 62.660662][ T5887] usb 6-1: USB disconnect, device number 3 [ 62.663742][ T6655] openvswitch: netlink: Flow key attribute not present in set flow. [ 71.232079][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.235385][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.360523][ T56] cfg80211: failed to load regulatory.db [ 79.807658][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 79.807670][ T42] audit: type=1400 audit(1785611084.204:669): avc: denied { create } for pid=6672 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 79.822030][ T6673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=6673 comm=syz.0.212 [ 79.827584][ T6673] __nla_validate_parse: 4 callbacks suppressed [ 79.827593][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 79.830835][ T42] audit: type=1400 audit(1785611084.224:670): avc: denied { ioctl } for pid=6672 comm="syz.0.212" path="socket:[15451]" dev="sockfs" ino=15451 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 79.834510][ T6673] scsi_nl_rcv_msg: discarding partial skb [ 79.841806][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 79.858849][ T42] audit: type=1400 audit(1785611084.224:671): avc: denied { ioctl } for pid=6672 comm="syz.0.212" path="socket:[14840]" dev="sockfs" ino=14840 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.885883][ T6695] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 79.887537][ T42] audit: type=1400 audit(1785611084.234:672): avc: denied { write } for pid=6672 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 79.890385][ T6697] netlink: 6060 bytes leftover after parsing attributes in process `syz.3.218'. [ 79.900208][ T42] audit: type=1400 audit(1785611084.254:673): avc: denied { write } for pid=6691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.908409][ T42] audit: type=1400 audit(1785611084.304:674): avc: denied { write } for pid=6698 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.917102][ T6695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.935928][ T6695] bond2: (slave gretap1): making interface the new active one [ 79.942697][ T6695] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 79.960095][ T6695] bond2 (unregistering): (slave gretap1): Releasing active interface [ 79.967084][ T6695] bond2 (unregistering): Released all slaves [ 79.976048][ T42] audit: type=1400 audit(1785611084.374:675): avc: denied { lock } for pid=6706 comm="syz.3.220" path="socket:[15467]" dev="sockfs" ino=15467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 80.019317][ T42] audit: type=1400 audit(1785611084.424:676): avc: denied { create } for pid=6712 comm="syz.3.222" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.030590][ T6711] capability: warning: `syz.0.221' uses deprecated v2 capabilities in a way that may be insecure [ 80.032823][ T42] audit: type=1400 audit(1785611084.424:677): avc: denied { read } for pid=6712 comm="syz.3.222" name="file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.054501][ T42] audit: type=1400 audit(1785611084.424:678): avc: denied { open } for pid=6712 comm="syz.3.222" path="/51/file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.028754][ T6678] syzkaller0: entered promiscuous mode [ 81.030554][ T6678] syzkaller0: entered allmulticast mode [ 81.069070][ T6678] random: crng reseeded on system resumption [ 86.984467][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 86.984479][ T42] audit: type=1400 audit(1785611091.384:690): avc: denied { write } for pid=6743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.023969][ T42] audit: type=1400 audit(1785611091.424:691): avc: denied { write } for pid=6746 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.338537][ T6752] netlink: 56 bytes leftover after parsing attributes in process `syz.0.224'. [ 87.386412][ T42] audit: type=1400 audit(1785611091.784:692): avc: denied { create } for pid=6763 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.403249][ T42] audit: type=1400 audit(1785611091.794:693): avc: denied { connect } for pid=6762 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.413443][ T42] audit: type=1400 audit(1785611091.794:694): avc: denied { ioctl } for pid=6763 comm="syz.1.229" path="socket:[12820]" dev="sockfs" ino=12820 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.420702][ T6764] overlayfs: upper fs does not support file handles, falling back to index=off. [ 87.423183][ T42] audit: type=1400 audit(1785611091.824:695): avc: denied { getopt } for pid=6763 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.428834][ T6764] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 87.556043][ T6786] netlink: 56 bytes leftover after parsing attributes in process `syz.2.236'. [ 87.602881][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.238'. [ 87.613080][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.238'. [ 87.654298][ T42] audit: type=1400 audit(1785611092.054:696): avc: denied { bind } for pid=6794 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.712492][ T42] audit: type=1400 audit(1785611092.114:697): avc: denied { bind } for pid=6794 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.722079][ T42] audit: type=1400 audit(1785611092.114:698): avc: denied { write } for pid=6794 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.724368][ T6802] xt_hashlimit: size too large, truncated to 1048576 [ 87.730283][ T42] audit: type=1400 audit(1785611092.124:699): avc: denied { write } for pid=6799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.881889][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 87.881891][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 87.901881][ T6816] bond1: entered allmulticast mode [ 87.907442][ T6815] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 87.911568][ T6815] bond1: (slave vti0): Error -95 calling set_mac_address [ 88.013876][ T6824] program syz.3.243 is using a deprecated SCSI ioctl, please convert it to SG_IO qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 88.482462][ T6859] trusted_key: encrypted_key: insufficient parameters specified [ 88.540560][ T6855] netlink: 68 bytes leftover after parsing attributes in process `syz.3.247'. [ 88.545803][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 88.589256][ T6863] netlink: 'syz.0.250': attribute type 3 has an invalid length. [ 88.596762][ T6863] netlink: 'syz.0.250': attribute type 1 has an invalid length. [ 88.599334][ T6863] netlink: 224 bytes leftover after parsing attributes in process `syz.0.250'. [ 88.602197][ T6863] NCSI netlink: No device for ifindex 0 [ 88.646500][ T6869] loop4: detected capacity change from 0 to 2640 [ 88.655332][ T6740] buffer_io_error: 129 callbacks suppressed [ 88.655344][ T6740] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.668807][ T6869] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.672299][ T6740] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.674921][ T6869] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.678754][ T6740] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.682153][ T6869] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.685950][ T6740] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.692128][ T6740] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.693844][ T6872] trusted_key: encrypted_key: master key parameter is missing [ 88.695731][ T6869] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.700888][ T6874] binder: 6868:6874 ioctl c0306201 200000000040 returned -22 [ 88.701234][ T6871] trusted_key: encrypted_key: master key parameter is missing [ 88.714936][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.252'. [ 88.715040][ T6869] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.723027][ T6869] ldm_validate_partition_table(): Disk read failed. [ 88.725249][ T6869] Dev loop4: unable to read RDB block 0 [ 88.727182][ T6869] loop4: unable to read partition table [ 88.730033][ T6869] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 88.789186][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 88.839979][ T6881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.845946][ T6880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.938174][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 88.943768][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 88.947320][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.966081][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 88.976345][ T9] pvrusb2: ********** [ 88.977728][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 88.985406][ T9] pvrusb2: Important functionality might not be entirely working. [ 88.992642][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 88.999037][ T9] pvrusb2: ********** [ 89.160840][ T2520] pvrusb2: Invalid write control endpoint [ 89.209857][ T2520] pvrusb2: Invalid write control endpoint [ 89.211682][ T2520] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 89.218815][ T2520] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 89.223285][ T2520] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 89.229611][ T2520] pvrusb2: Device being rendered inoperable [ 89.233975][ T2520] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 89.240328][ T2520] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 89.243794][ T2520] pvrusb2: Attached sub-driver cx25840 [ 89.245512][ T2520] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 89.254127][ T2520] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 89.520393][ T6913] bond2: Removing last ns target with arp_interval on [ 89.538803][ T6913] Invalid logical block size (-1) [ 89.713657][ T6922] batadv_slave_1: entered promiscuous mode [ 89.750022][ T5831] usb 7-1: USB disconnect, device number 3 [ 89.764678][ T6923] batadv_slave_1: left promiscuous mode [ 89.901086][ T6930] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 89.915333][ T6931] netlink: 'syz.0.270': attribute type 1 has an invalid length. [ 90.562934][ T6961] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.587093][ T6961] vcan0 speed is unknown, defaulting to 1000 [ 90.599070][ T6961] vcan0 speed is unknown, defaulting to 1000 [ 90.604529][ T6961] vcan0 speed is unknown, defaulting to 1000 [ 90.730477][ T6975] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 90.766029][ T5824] vcan0 speed is unknown, defaulting to 1000 [ 90.769743][ T6961] infiniband syz1: set active [ 90.772765][ T6961] infiniband syz1: added vcan0 [ 90.782134][ T6961] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 90.786906][ T6961] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 90.792650][ T6961] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 90.863447][ T6989] tmpfs: Bad value for 'mpol' [ 90.865536][ T6961] RDS/IB: syz1: added [ 90.867093][ T6961] smc: adding ib device syz1 with port count 1 [ 90.873015][ T6989] netlink: 'syz.2.285': attribute type 4 has an invalid length. [ 90.875754][ T6961] smc: ib device syz1 port 1 has no pnetid [ 90.883657][ T5824] vcan0 speed is unknown, defaulting to 1000 [ 90.895039][ T6961] vcan0 speed is unknown, defaulting to 1000 [ 91.045792][ T6961] vcan0 speed is unknown, defaulting to 1000 [ 91.159242][ T6961] vcan0 speed is unknown, defaulting to 1000 [ 91.282669][ T6961] vcan0 speed is unknown, defaulting to 1000 [ 91.716817][ T7024] vcan0 speed is unknown, defaulting to 1000 [ 91.915461][ T7030] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 91.922296][ T7030] cramfs: wrong magic [ 92.030071][ T7031] netlink: 'syz.2.296': attribute type 32 has an invalid length. [ 92.164413][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 92.164423][ T42] audit: type=1400 audit(1785611096.564:753): avc: denied { mount } for pid=7060 comm="syz.3.298" name="/" dev="ramfs" ino=17155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.197788][ T42] audit: type=1400 audit(1785611096.594:754): avc: denied { unmount } for pid=7060 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.266670][ T7072] team0: Port device team_slave_0 removed [ 92.448757][ T42] audit: type=1400 audit(1785611096.854:755): avc: denied { relabelfrom } for pid=7091 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 92.455661][ T42] audit: type=1400 audit(1785611096.854:756): avc: denied { relabelto } for pid=7091 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 92.458710][ T7101] syzkaller0: entered promiscuous mode [ 92.465337][ T7101] syzkaller0: entered allmulticast mode [ 92.472597][ T42] audit: type=1400 audit(1785611096.874:757): avc: denied { read write } for pid=7098 comm="syz.1.306" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 92.473142][ T7099] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 92.482073][ T42] audit: type=1400 audit(1785611096.874:758): avc: denied { open } for pid=7098 comm="syz.1.306" path="/82/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 92.484477][ T7099] __nla_validate_parse: 6 callbacks suppressed [ 92.484486][ T7099] netlink: 224 bytes leftover after parsing attributes in process `syz.1.306'. [ 92.493954][ T42] audit: type=1400 audit(1785611096.874:759): avc: denied { ioctl } for pid=7098 comm="syz.1.306" path="/82/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 92.597532][ T7107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.307'. [ 92.602374][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 92.606920][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 92.610472][ T7107] syzkaller0: entered promiscuous mode [ 92.612316][ T7107] syzkaller0: entered allmulticast mode [ 92.615428][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.619638][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.640419][ T42] audit: type=1400 audit(1785611097.044:760): avc: denied { write } for pid=7113 comm="syz.3.309" name="configs" dev="configfs" ino=16894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.642794][ T7114] Mass Storage Function, version: 2009/09/11 [ 92.647387][ T42] audit: type=1400 audit(1785611097.044:761): avc: denied { write } for pid=7113 comm="syz.3.309" name="functions" dev="configfs" ino=16893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.660948][ T7114] LUN: removable file: (no medium) [ 92.666763][ T42] audit: type=1800 audit(1785611097.064:762): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.309" name="cdrom" dev="configfs" ino=17177 res=0 errno=0 [ 92.679313][ T7114] Config c1/1 of g1 needs at least one function. [ 92.682294][ T7114] udc dummy_udc.0: failed to start g1: -22 [ 92.684164][ T7114] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 92.691122][ T7114] UDC core: g1: couldn't find an available UDC or it's busy [ 92.833991][ T7130] loop2: detected capacity change from 0 to 3 [ 92.843704][ T7130] ldm_validate_privheads(): Disk read failed. [ 92.847512][ T7130] Dev loop2: unable to read RDB block 3 [ 92.849536][ T7130] loop2: unable to read partition table [ 92.851510][ T7130] loop2: partition table beyond EOD, truncated [ 92.853493][ T7130] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 92.936843][ T7133] ip6erspan0: entered promiscuous mode [ 93.127621][ T7150] exFAT-fs (loop3): unable to read boot sector [ 93.132515][ T7150] exFAT-fs (loop3): failed to read boot sector [ 93.135132][ T7150] exFAT-fs (loop3): failed to recognize exfat type [ 93.138330][ T7150] exFAT-fs (loop3): unable to read boot sector [ 93.140736][ T7150] exFAT-fs (loop3): failed to read boot sector [ 93.142835][ T7150] exFAT-fs (loop3): failed to recognize exfat type [ 93.182870][ T7152] Mount JFS Failure: -5 [ 93.186626][ T7152] jfs_mount failed w/return code = -5 [ 93.804808][ T7170] team0: entered allmulticast mode [ 93.806969][ T7170] team_slave_0: entered allmulticast mode [ 93.809662][ T6066] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 93.811907][ T7170] team_slave_1: entered allmulticast mode [ 93.970647][ T6066] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 93.974389][ T6066] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.977682][ T6066] usb 8-1: Product: syz [ 93.980296][ T6066] usb 8-1: Manufacturer: syz [ 93.982203][ T6066] usb 8-1: SerialNumber: syz [ 94.126439][ T224] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.130549][ T224] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.231218][ T6066] rtl8150 8-1:1.0: couldn't reset the device [ 94.240854][ T6066] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 94.252665][ T6066] usb 8-1: USB disconnect, device number 5 [ 94.368877][ T7192] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.047463][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 95.421974][ T7236] nfs: Unknown parameter 'fscracefs_dir/trace_marker' [ 95.425772][ T7233] kernel read not supported for file /file0 (pid: 7233 comm: syz.3.343) [ 95.828705][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 95.834299][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 96.187998][ T5753] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 96.188026][ T5742] Bluetooth: hci4: command 0xfc11 tx timeout [ 96.619609][ T7272] Cannot find add_set index 0 as target [ 96.647143][ T7278] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 96.659365][ T7278] CIFS: Attempting to mount //127.0.0.1/share [ 96.665368][ T7278] CIFS: VFS: Error connecting to socket. Aborting operation. [ 96.668055][ T7278] CIFS: VFS: cifs_mount failed w/return code = -111 [ 96.770866][ T7291] bridge_slave_0: left allmulticast mode [ 96.772791][ T7291] bridge_slave_0: left promiscuous mode [ 96.776469][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.782951][ T7291] bridge_slave_1: left allmulticast mode [ 96.784858][ T7291] bridge_slave_1: left promiscuous mode [ 96.786739][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.792066][ T7291] bond0: (slave bond_slave_0): Releasing backup interface [ 96.796487][ T7291] bond0: (slave bond_slave_1): Releasing backup interface [ 96.801928][ T7291] team_slave_0: left allmulticast mode [ 96.805562][ T7291] team0: Port device team_slave_0 removed [ 96.808002][ T7291] team_slave_1: left allmulticast mode [ 96.812037][ T7291] team0: Port device team_slave_1 removed [ 96.814342][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.816710][ T7291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.823953][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.826312][ T7291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.830155][ T7291] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 96.845129][ T7292] team0: Mode changed to "loadbalance" [ 96.852687][ T7291] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 96.980358][ T7300] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 97.075937][ T5753] Bluetooth: hci0: link tx timeout [ 97.078555][ T5753] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.115818][ T7312] binder: 7301:7312 ioctl c0306201 200000000080 returned -14 [ 97.119446][ T7312] binder: 7301:7312 ioctl c0306201 2000000003c0 returned -14 [ 97.172163][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 97.175030][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 97.333572][ T7315] syzkaller0: entered promiscuous mode [ 97.335326][ T7315] syzkaller0: entered allmulticast mode [ 97.439996][ T7320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.521312][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 97.623528][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 97.623541][ T42] audit: type=1400 audit(1785611102.024:787): avc: denied { mount } for pid=7331 comm="syz.1.374" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.657231][ T7334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'. [ 97.660486][ T7334] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 97.686768][ T42] audit: type=1400 audit(1785611102.084:788): avc: denied { ioctl } for pid=7337 comm="syz.1.377" path="socket:[17792]" dev="sockfs" ino=17792 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.702829][ T7338] vcan0 speed is unknown, defaulting to 1000 [ 97.721686][ T42] audit: type=1400 audit(1785611102.124:789): avc: denied { cmd } for pid=7339 comm="syz.0.378" path="socket:[20177]" dev="sockfs" ino=20177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.780864][ T7344] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.380'. [ 97.836366][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 97.848015][ T7348] netlink: zone id is out of range [ 97.849707][ T7348] netlink: del zone limit has 8 unknown bytes [ 97.935398][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 97.942188][ T42] audit: type=1400 audit(1785611102.344:790): avc: denied { setopt } for pid=7355 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.984762][ T42] audit: type=1400 audit(1785611102.384:791): avc: denied { ioctl } for pid=7350 comm="syz.0.384" path="socket:[17854]" dev="sockfs" ino=17854 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.151362][ T7369] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 98.274230][ T7372] netlink: 76 bytes leftover after parsing attributes in process `syz.3.390'. [ 98.412665][ T42] audit: type=1400 audit(1785611102.814:792): avc: denied { append } for pid=7379 comm="syz.3.393" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.550132][ T7380] input: syz0 as /devices/virtual/input/input7 [ 98.582967][ T7380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7380 comm=syz.3.393 [ 99.157984][ T5742] Bluetooth: hci0: command 0x0406 tx timeout [ 99.219045][ T7365] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 99.263533][ T42] audit: type=1400 audit(1785611103.664:793): avc: denied { bind } for pid=7389 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.269795][ T42] audit: type=1400 audit(1785611103.664:794): avc: denied { name_bind } for pid=7389 comm="syz.2.395" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 99.276373][ T42] audit: type=1400 audit(1785611103.664:795): avc: denied { node_bind } for pid=7389 comm="syz.2.395" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 99.277616][ T7394] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 99.366453][ T42] audit: type=1400 audit(1785611103.764:796): avc: denied { setattr } for pid=7405 comm="syz.0.398" name="HCI" dev="sockfs" ino=17904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.404557][ T7412] openvswitch: netlink: IP tunnel dst address not specified [ 99.506616][ T7418] f2fs: Unknown parameter ';ڙSC&~' [ 99.556820][ T7428] wireguard0: entered promiscuous mode [ 99.686484][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.408'. [ 99.688777][ T7440] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.719178][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 99.739863][ T7441] md: loop0 has zero or unknown size, marking faulty! [ 99.830322][ T7444] md: loop0 has zero or unknown size, marking faulty! [ 100.466342][ T7457] input: syz0 as /devices/virtual/input/input8 [ 100.574980][ T7459] netlink: 'syz.1.415': attribute type 3 has an invalid length. [ 100.577485][ T7459] netlink: 64 bytes leftover after parsing attributes in process `syz.1.415'. [ 100.666793][ T7464] Bluetooth: MGMT ver 1.23 [ 100.668193][ T5887] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 100.819819][ T5887] usb 8-1: unable to get BOS descriptor or descriptor too short [ 100.822812][ T5887] usb 8-1: not running at top speed; connect to a high speed hub [ 100.826190][ T5887] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 100.829216][ T5887] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 100.831930][ T5887] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 100.835301][ T5887] usb 8-1: config 14 has no interface number 0 [ 100.837350][ T5887] usb 8-1: config 14 has no interface number 1 [ 100.840140][ T5887] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 100.843647][ T5887] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 100.847407][ T5887] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.851256][ T5887] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 100.854823][ T5887] usb 8-1: config 14 interface 57 has no altsetting 0 [ 100.857092][ T5887] usb 8-1: config 14 interface 228 has no altsetting 0 [ 100.861316][ T5887] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 100.864271][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.866876][ T5887] usb 8-1: Product: syz [ 100.868556][ T5887] usb 8-1: Manufacturer: syz [ 100.870205][ T5887] usb 8-1: SerialNumber: syz [ 101.082515][ T5887] legousbtower 8-1:14.57: interrupt endpoints not found [ 101.404188][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 101.490956][ T5887] legousbtower 8-1:14.228: get version request failed: -32 [ 101.493480][ T5887] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -32 [ 101.524644][ T7496] xt_l2tp: v2 tid > 0xffff: 2031748 [ 101.585676][ T7498] affs: No valid root block on device sr0 [ 101.622540][ T7500] IPv6: Can't replace route, no match found [ 101.693605][ T7507] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 101.853107][ T7513] dummy0: entered allmulticast mode [ 102.215689][ T5887] usb 8-1: USB disconnect, device number 7 [ 102.231194][ T7528] evm: overlay not supported [ 102.295613][ T7531] input: syz1 as /devices/virtual/input/input10 [ 102.395840][ T7539] nftables ruleset with unbound set [ 102.518133][ T6066] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 102.535816][ T7543] netlink: 'syz.3.444': attribute type 3 has an invalid length. [ 102.538409][ T7543] __nla_validate_parse: 5 callbacks suppressed [ 102.538418][ T7543] netlink: 64 bytes leftover after parsing attributes in process `syz.3.444'. [ 102.679242][ T6066] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 102.686704][ T6066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.687990][ T5890] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 102.699652][ T6066] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 102.706585][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 102.706594][ T42] audit: type=1400 audit(1785611107.104:808): avc: denied { write } for pid=7546 comm="syz.0.447" name="functions" dev="configfs" ino=16893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.718424][ T6066] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 102.722744][ T42] audit: type=1400 audit(1785611107.124:809): avc: denied { write } for pid=7546 comm="syz.0.447" name="target" dev="configfs" ino=1695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.728336][ T6066] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 102.735952][ T42] audit: type=1400 audit(1785611107.124:810): avc: denied { write } for pid=7546 comm="syz.0.447" name="usb_gadget" dev="configfs" ino=18067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.748288][ T7550] se_device not configured yet, cannot port link [ 102.750172][ T42] audit: type=1400 audit(1785611107.124:811): avc: denied { write } for pid=7546 comm="syz.0.447" name="naa.1234567890abcdef" dev="configfs" ino=18069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.757772][ T42] audit: type=1400 audit(1785611107.134:812): avc: denied { firmware_load } for pid=6066 comm="kworker/1:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 102.764753][ T42] audit: type=1400 audit(1785611107.134:813): avc: denied { write } for pid=7546 comm="syz.0.447" name="core" dev="configfs" ino=1696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.772127][ T42] audit: type=1400 audit(1785611107.134:814): avc: denied { write } for pid=7546 comm="syz.0.447" name="rd_mcp_0" dev="configfs" ino=18079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.779727][ T42] audit: type=1400 audit(1785611107.144:815): avc: denied { write } for pid=7546 comm="syz.0.447" name="lun" dev="configfs" ino=18073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.786714][ T42] audit: type=1400 audit(1785611107.144:816): avc: denied { write } for pid=7546 comm="syz.0.447" name="lun_0" dev="configfs" ino=18092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.795751][ T42] audit: type=1400 audit(1785611107.144:817): avc: denied { create } for pid=7546 comm="syz.0.447" name="virtual_lun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 102.841155][ T7557] Illegal XDP return value 3949022916 on prog (id 43) dev N/A, expect packet loss! [ 102.858793][ T5890] usb 7-1: not running at top speed; connect to a high speed hub [ 102.862163][ T5890] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 102.867410][ T5890] usb 7-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 102.870614][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.873226][ T5890] usb 7-1: Product: syz [ 102.874624][ T5890] usb 7-1: Manufacturer: syz [ 102.876235][ T5890] usb 7-1: SerialNumber: syz [ 102.877657][ T7560] rdma_rxe: rxe_newlink: failed to add vcan0 [ 102.919608][ T7530] loop5: detected capacity change from 0 to 2640 [ 102.923375][ T7530] buffer_io_error: 11 callbacks suppressed [ 102.923385][ T7530] Buffer I/O error on dev loop5, logical block 0, async page read [ 102.928022][ T7530] Buffer I/O error on dev loop5, logical block 0, async page read [ 102.930631][ T7530] Buffer I/O error on dev loop5, logical block 0, async page read [ 102.931202][ T6066] usb 6-1: emi26_load_firmware - request_firmware() failed [ 102.933218][ T7530] Buffer I/O error on dev loop5, logical block 0, async page read [ 102.938107][ T7530] Buffer I/O error on dev loop5, logical block 0, async page read [ 102.940690][ T7530] Buffer I/O error on dev loop5, logical block 0, async page read [ 102.943239][ T7530] Buffer I/O error on dev loop5, logical block 0, async page read [ 102.945764][ T7530] Buffer I/O error on dev loop5, logical block 0, async page read [ 102.947983][ T6066] usb 6-1: emi26_load_firmware - error loading firmware: error = -12 [ 102.949034][ T7530] ldm_validate_partition_table(): Disk read failed. [ 102.951342][ T6066] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 102.953094][ T7530] Buffer I/O error on dev loop5, logical block 0, async page read [ 102.958951][ T7530] Buffer I/O error on dev loop5, logical block 0, async page read [ 102.961506][ T7530] Dev loop5: unable to read RDB block 0 [ 102.963425][ T7530] loop5: unable to read partition table [ 102.965357][ T7530] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 103.086938][ T5824] usb 6-1: USB disconnect, device number 4 [ 103.098721][ T5890] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.104423][ T5890] usb 7-1: MIDIStreaming interface descriptor not found [ 103.156155][ T5890] usb 7-1: USB disconnect, device number 4 [ 103.620319][ T7574] option changes via remount are deprecated (pid=7573 comm=syz.1.455) [ 103.652969][ T7576] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 103.659484][ T7578] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 103.661558][ T7576] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 103.759525][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 103.868326][ T5838] syzkaller0: tun_net_xmit 76 [ 103.872962][ T5838] syzkaller0: tun_net_xmit 48 [ 103.898114][ T5890] syzkaller0: tun_net_xmit 76 [ 104.053721][ T7600] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 104.065026][ T7600] PKCS7: Only support pkcs7_signedData type [ 104.164335][ T7603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54036 sclass=netlink_route_socket pid=7603 comm=syz.0.466 [ 105.036238][ T7621] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.136060][ T7632] zero sized request [ 105.158592][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.472'. [ 105.354417][ T7657] netlink: 'syz.2.481': attribute type 28 has an invalid length. [ 105.358609][ T7657] netlink: 'syz.2.481': attribute type 3 has an invalid length. [ 105.365393][ T7657] netlink: 132 bytes leftover after parsing attributes in process `syz.2.481'. [ 105.462791][ T7675] hashlimit_mt_check_common: 1 callbacks suppressed [ 105.462803][ T7675] xt_hashlimit: size too large, truncated to 1048576 [ 105.534067][ T7681] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 105.605557][ T7685] sctp: [Deprecated]: syz.3.489 (pid 7685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.605557][ T7685] Use struct sctp_sack_info instead [ 105.755651][ T7701] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 105.793750][ T7706] netlink: 'syz.3.496': attribute type 12 has an invalid length. [ 105.798572][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.803069][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.814232][ T7705] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 105.848253][ T7711] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 106.038024][ T5742] Bluetooth: hci0: command 0x0406 tx timeout [ 106.040299][ T5753] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 106.787825][ T7745] syzkaller0: entered promiscuous mode [ 106.792354][ T7745] syzkaller0: entered allmulticast mode [ 106.803677][ T7745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.071140][ T7768] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 107.144498][ T7768] syzkaller0: entered promiscuous mode [ 107.146311][ T7768] syzkaller0: entered allmulticast mode [ 107.248451][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 107.304557][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 107.779816][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 107.779826][ T42] audit: type=1400 audit(1785611112.184:856): avc: denied { create } for pid=7781 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 107.808621][ T7782] netlink: 'syz.3.516': attribute type 25 has an invalid length. [ 107.820312][ T7782] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 107.852749][ T42] audit: type=1400 audit(1785611112.254:857): avc: denied { ioctl } for pid=7784 comm="syz.3.517" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.966842][ T7792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.093820][ T7795] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 108.096224][ T7795] netlink: 132 bytes leftover after parsing attributes in process `syz.3.520'. [ 108.150760][ T42] audit: type=1400 audit(1785611112.544:858): avc: denied { map } for pid=7794 comm="syz.3.520" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.304348][ T7798] netlink: 'syz.1.521': attribute type 3 has an invalid length. [ 108.309285][ T7795] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.411943][ T5753] Bluetooth: Unexpected continuation frame (len 112) [ 108.440484][ T7813] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 108.444218][ T7813] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.450934][ T7818] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 108.452670][ T7820] 9p: Bad value for 'wfdno' [ 108.458010][ T42] audit: type=1400 audit(1785611112.854:859): avc: denied { ioctl } for pid=7819 comm="syz.0.528" path="ipc:[4026532871]" dev="nsfs" ino=4026532871 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.513649][ T42] audit: type=1400 audit(1785611112.914:860): avc: denied { mounton } for pid=7823 comm="syz.2.530" path="/file0" dev="autofs" ino=22966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 108.585459][ T6066] libceph: connect (1)[c::]:6789 error -101 [ 108.591042][ T6066] libceph: mon0 (1)[c::]:6789 connect error [ 108.612101][ T7835] netlink: 96 bytes leftover after parsing attributes in process `syz.2.530'. [ 108.703054][ T9] libceph: connect (1)[c::]:6789 error -101 [ 108.705111][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 108.861057][ T6066] libceph: connect (1)[c::]:6789 error -101 [ 108.868428][ T6066] libceph: mon0 (1)[c::]:6789 connect error [ 108.968914][ T9] libceph: connect (1)[c::]:6789 error -101 [ 108.973072][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 109.367130][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'. [ 109.381471][ T6066] libceph: connect (1)[c::]:6789 error -101 [ 109.383436][ T7841] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.387586][ T6066] libceph: mon0 (1)[c::]:6789 connect error [ 109.422974][ T7841] macvlan2: entered promiscuous mode [ 109.424799][ T7841] macvlan2: entered allmulticast mode [ 109.429685][ T7841] bond3: (slave macvlan2): Opening slave failed [ 109.460113][ T7836] ceph: No mds server is up or the cluster is laggy [ 109.461607][ T7832] ceph: No mds server is up or the cluster is laggy [ 109.491484][ T9] libceph: connect (1)[c::]:6789 error -101 [ 109.495528][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 109.612037][ T42] audit: type=1400 audit(1785611114.014:861): avc: denied { bpf } for pid=7846 comm="syz.1.535" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.709998][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 109.765677][ T42] audit: type=1400 audit(1785611114.164:862): avc: denied { module_request } for pid=7866 comm="syz.0.542" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.810030][ T42] audit: type=1400 audit(1785611114.214:863): avc: denied { perfmon } for pid=7869 comm="syz.1.543" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.841238][ T7873] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 110.550407][ T42] audit: type=1400 audit(1785611114.954:864): avc: denied { ioctl } for pid=7881 comm="syz.2.547" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 110.683603][ T7885] netlink: 'syz.2.548': attribute type 5 has an invalid length. [ 110.933247][ T7904] netlink: 216 bytes leftover after parsing attributes in process `syz.2.553'. [ 110.936664][ T42] audit: type=1400 audit(1785611115.334:865): avc: denied { read } for pid=7903 comm="syz.2.553" name="nullb" dev="configfs" ino=790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.950941][ T7904] overlayfs: missing 'lowerdir' [ 110.959531][ T7904] null_blk: nullb1: using native zone append [ 110.998567][ T7904] null_blk: disk nullb1 created [ 111.038185][ T7910] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 111.268025][ T5824] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.403586][ T7923] overlayfs: failed to get inode (-116) [ 111.406361][ T7923] overlayfs: failed to get inode (-116) [ 111.418046][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 111.424757][ T5824] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 111.430801][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.437313][ T7925] fuse: Bad value for 'fd' [ 111.437968][ T5824] usb 6-1: Product: syz [ 111.442575][ T5824] usb 6-1: Manufacturer: syz [ 111.444067][ T5824] usb 6-1: SerialNumber: syz [ 111.449733][ T5824] usb 6-1: config 0 descriptor?? [ 111.778682][ T6066] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 111.865029][ T5824] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 111.879617][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.886143][ T5824] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 111.889754][ T5824] usb 6-1: media controller created [ 111.899987][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.908960][ T7943] ipt_REJECT: TCP_RESET invalid for non-tcp [ 111.928175][ T6066] usb 8-1: Using ep0 maxpacket: 16 [ 111.933548][ T6066] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 111.938931][ T6066] usb 8-1: config 0 has no interface number 0 [ 111.943175][ T6066] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 111.946158][ T6066] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.949040][ T6066] usb 8-1: Product: syz [ 111.950414][ T6066] usb 8-1: Manufacturer: syz [ 111.951928][ T6066] usb 8-1: SerialNumber: syz [ 111.957409][ T6066] usb 8-1: config 0 descriptor?? [ 111.960533][ T6066] hub 8-1:0.132: bad descriptor, ignoring hub [ 111.963740][ T6066] hub 8-1:0.132: probe with driver hub failed with error -5 [ 111.972002][ T6066] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input12 [ 111.979308][ T7947] x_tables: duplicate underflow at hook 1 [ 111.988818][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 112.065826][ T5824] zl10353_read_register: readreg error (reg=127, ret==0) [ 112.068660][ T5824] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 112.071408][ T5824] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 112.172852][ T7930] random: crng reseeded on system resumption [ 112.182262][ T7958] netlink: 'syz.2.572': attribute type 12 has an invalid length. [ 112.261024][ T5738] usb 8-1: USB disconnect, device number 8 [ 112.282005][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 112.286366][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 112.374831][ T7965] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 112.378912][ T7965] netlink: 'syz.2.574': attribute type 21 has an invalid length. [ 112.651637][ T4354] usb 6-1: USB disconnect, device number 5 [ 112.678760][ T4354] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 112.956232][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 112.956245][ T42] audit: type=1400 audit(1785611117.354:879): avc: denied { associate } for pid=7978 comm="syz.2.579" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.961275][ T7979] openvswitch: netlink: IP tunnel dst address not specified [ 112.971088][ T42] audit: type=1326 audit(1785611117.374:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.2.579" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff94219e019 code=0x0 [ 113.073739][ T7985] NILFS (nbd0): device size too small [ 113.090914][ T7996] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 113.240420][ T42] audit: type=1400 audit(1785611117.644:881): avc: denied { create } for pid=8007 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 113.255595][ T42] audit: type=1400 audit(1785611117.644:882): avc: denied { bind } for pid=8007 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 113.412208][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 113.448833][ T8019] hsr_slave_1 (unregistering): left promiscuous mode [ 113.563745][ T8022] overlayfs: empty lowerdir [ 113.838173][ T6066] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 113.999437][ T6066] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 114.002678][ T42] audit: type=1400 audit(1785611118.404:883): avc: denied { write } for pid=8027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.003944][ T6066] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 114.015975][ T6066] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 114.019252][ T6066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.021864][ T6066] usb 6-1: Product: syz [ 114.023267][ T6066] usb 6-1: Manufacturer: syz [ 114.024825][ T6066] usb 6-1: SerialNumber: syz [ 114.029729][ T6066] usb 6-1: config 0 descriptor?? [ 114.036770][ T6066] hub 6-1:0.0: bad descriptor, ignoring hub [ 114.041620][ T6066] hub 6-1:0.0: probe with driver hub failed with error -5 [ 114.044706][ T42] audit: type=1400 audit(1785611118.444:884): avc: denied { write } for pid=8030 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.046138][ T6066] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input13 [ 114.126668][ T42] audit: type=1400 audit(1785611118.524:885): avc: denied { write } for pid=8032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.180087][ T42] audit: type=1400 audit(1785611118.584:886): avc: denied { write } for pid=8037 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.199822][ T42] audit: type=1400 audit(1785611118.594:887): avc: denied { read } for pid=8038 comm="syz.2.594" dev="nsfs" ino=4026532964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 114.214494][ T42] audit: type=1400 audit(1785611118.594:888): avc: denied { open } for pid=8038 comm="syz.2.594" path="net:[4026532964]" dev="nsfs" ino=4026532964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 114.225680][ T8049] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 114.231581][ T8049] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.235269][ T8049] overlayfs: failed to set uuid (158/file1, err=-13); falling back to uuid=null. [ 114.355092][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 114.517465][ T8080] overlayfs: maximum fs stacking depth exceeded [ 114.520652][ T8083] [U]  [ 114.525913][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 114.563606][ T8087] loop5: detected capacity change from 0 to 7 [ 114.568646][ T8087] loop5: p1 < > p3 p4 [ 114.570099][ T8087] loop5: partition table partially beyond EOD, truncated [ 114.577768][ T8087] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 114.607852][ T6740] udevd[6740]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 114.609781][ T6771] udevd[6771]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 114.614036][ T6768] udevd[6768]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 114.662533][ T8092] CacheFiles: No cache directory specified [ 114.678151][ T6066] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 114.694215][ T8094] syz.0.613: attempt to access beyond end of device [ 114.694215][ T8094] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 114.700306][ T8094] gfs2: error -5 reading superblock [ 114.708495][ T8094] netlink: 140 bytes leftover after parsing attributes in process `syz.0.613'. [ 114.762328][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 114.784654][ T8101] team0: Port device team_slave_0 removed [ 114.838884][ T6066] usb 7-1: Using ep0 maxpacket: 8 [ 114.845648][ T6066] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 114.848933][ T6066] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.851768][ T6066] usb 7-1: Product: syz [ 114.853143][ T6066] usb 7-1: Manufacturer: syz [ 114.855435][ T6066] usb 7-1: SerialNumber: syz [ 114.866824][ T6066] usb 7-1: config 0 descriptor?? [ 114.873074][ T6066] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 114.875861][ T6066] pctv452e: pctv452e_power_ctrl: 1 [ 114.875861][ T6066] [ 114.878538][ T6066] usb 7-1: selecting invalid altsetting 3 [ 114.880831][ T6066] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 114.880831][ T6066] [ 114.885415][ T6066] dvb-usb: bulk message failed: -22 (5/0) [ 114.894099][ T6066] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.898936][ T6066] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 114.902406][ T6066] usb 7-1: media controller created [ 114.905088][ T6066] dvb-usb: bulk message failed: -22 (8/0) [ 114.907689][ T6066] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 114.911657][ T8105] --map-set only usable from mangle table [ 114.917575][ T8107] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 114.922777][ T6066] dvb-usb: MAC address reading failed. [ 114.933357][ T6066] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.971144][ T6066] DVB: Unable to find symbol stb0899_attach() [ 114.973249][ T6066] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 114.998937][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.002656][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.006056][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.014696][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.021985][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.025540][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.038214][ T6066] rc_core: IR keymap rc-tt-1500 not found [ 115.040078][ T6066] Registered IR keymap rc-empty [ 115.042979][ T6066] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 115.047449][ T6066] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input14 [ 115.052901][ T6066] dvb-usb: schedule remote query interval to 100 msecs. [ 115.055156][ T6066] pctv452e: pctv452e_power_ctrl: 0 [ 115.055156][ T6066] [ 115.057461][ T6066] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 115.075816][ T8068] dvb-usb: bulk message failed: -22 (7/0) [ 115.080579][ T8068] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 115.089157][ T24] usb 7-1: USB disconnect, device number 5 [ 115.122600][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 115.470458][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 115.473589][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 115.642781][ T8128] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.625'. [ 115.799217][ T8136] netlink: 36 bytes leftover after parsing attributes in process `syz.0.624'. [ 115.830538][ T8140] netlink: 184 bytes leftover after parsing attributes in process `syz.0.629'. [ 115.949447][ T8152] tmpfs: Bad value for 'mpol' [ 116.005388][ T8153] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 116.035079][ T8153] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 116.037746][ T8153] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 116.041591][ T8153] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 116.044958][ T8153] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 116.047879][ T8153] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 116.062924][ T8153] pci 0000:00:01.0: Adding to iommu group 1 [ 116.069319][ T8153] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 116.071563][ T8153] pci 0000:00:01.0: vgaarb: bridge control possible [ 116.073618][ T8153] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 116.086487][ T8153] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 116.095242][ T8153] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 116.108548][ T8153] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 116.164707][ T8153] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 116.167125][ T8153] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 116.171948][ T8153] [drm] features: -virgl +edid -resource_blob -host_visible [ 116.171965][ T8153] [drm] features: -context_init -blob_alignment [ 116.197404][ T8153] ------------[ cut here ]------------ [ 116.199435][ T8153] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 116.202108][ T8153] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa6/0x420, CPU#0: syz.0.631/8153 [ 116.205767][ T8153] Modules linked in: [ 116.207825][ T8153] CPU: 0 UID: 0 PID: 8153 Comm: syz.0.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.213499][ T8153] Tainted: [L]=SOFTLOCKUP [ 116.215310][ T8153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.219538][ T8153] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 116.222093][ T8153] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 c5 40 5e 09 85 c0 75 e0 48 8d 3d 1a 39 ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 45 42 5e 09 48 85 c0 0f [ 116.231353][ T8153] RSP: 0018:ffffc90003756f58 EFLAGS: 00010246 [ 116.233970][ T8153] RAX: 0000000000000000 RBX: ffff8881022c7680 RCX: fffff520006eadc6 [ 116.236872][ T8153] RDX: 0000000000000000 RSI: ffffffff8c6f8d40 RDI: ffffffff91275ec0 [ 116.240180][ T8153] RBP: ffffffff8c6f8d40 R08: 0000000000000000 R09: fffffbfff22450fa [ 116.243492][ T8153] R10: ffffc90003756f58 R11: 0000000000000000 R12: 0000000000000000 [ 116.246729][ T8153] R13: ffffc90003756fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 116.249868][ T8153] FS: 00007ff54a2676c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 116.252630][ T8153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.254666][ T8153] CR2: 00007ff54a266ff8 CR3: 000000002666b000 CR4: 0000000000352ef0 [ 116.257200][ T8153] Call Trace: [ 116.258342][ T8153] [ 116.259359][ T8153] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 116.261083][ T8153] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 116.263269][ T8153] ? vp_modern_set_queue_enable+0x43/0x90 [ 116.265636][ T8153] ? iowrite16+0x33/0xb0 [ 116.267463][ T8153] ? vp_modern_find_vqs+0xd2/0x100 [ 116.269970][ T8153] virtio_gpu_init.cold+0x51c/0x126e [ 116.272229][ T8153] ? lockdep_hardirqs_on+0x78/0x100 [ 116.274411][ T8153] ? __pfx_virtio_gpu_init+0x10/0x10 [ 116.276636][ T8153] ? console_unlock+0x1c9/0x260 [ 116.278769][ T8153] ? __pfx_console_unlock+0x10/0x10 [ 116.280934][ T8153] ? con_is_bound+0x141/0x190 [ 116.282891][ T8153] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 116.285212][ T8153] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 116.287641][ T8153] ? vga_remove_vgacon+0x21/0x30 [ 116.289816][ T8153] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 116.292679][ T8153] virtio_gpu_probe+0x21c/0x360 [ 116.294733][ T8153] virtio_dev_probe+0x6a2/0xbe0 [ 116.296800][ T8153] ? __pfx_virtio_dev_probe+0x10/0x10 [ 116.298977][ T8153] ? kernfs_create_link+0x1bd/0x240 [ 116.300639][ T8153] ? kernfs_put+0x3f/0x60 [ 116.302000][ T8153] ? sysfs_do_create_link_sd+0xbb/0x140 [ 116.303790][ T8153] ? sysfs_create_link+0x68/0xc0 [ 116.305326][ T8153] ? __pfx_virtio_dev_probe+0x10/0x10 [ 116.307049][ T8153] really_probe+0x241/0xa60 [ 116.308579][ T8153] __driver_probe_device+0x20e/0x450 [ 116.310222][ T8153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.312064][ T8153] driver_probe_device+0x4a/0x140 [ 116.313662][ T8153] __device_attach_driver+0x1df/0x320 [ 116.315342][ T8153] ? __pfx___device_attach_driver+0x10/0x10 [ 116.317311][ T8153] bus_for_each_drv+0x159/0x1e0 [ 116.318904][ T8153] ? __pfx_bus_for_each_drv+0x10/0x10 [ 116.320608][ T8153] ? lockdep_hardirqs_on+0x78/0x100 [ 116.322253][ T8153] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.324034][ T8153] __device_attach+0x1e4/0x4d0 [ 116.325559][ T8153] ? __pfx___device_attach+0x10/0x10 [ 116.327344][ T8153] ? do_raw_spin_unlock+0x145/0x1e0 [ 116.329106][ T8153] device_initial_probe+0xaf/0xd0 [ 116.330689][ T8153] bus_probe_device+0x64/0x160 [ 116.332216][ T8153] device_add+0x121d/0x1970 [ 116.333661][ T8153] ? __pfx_device_add+0x10/0x10 [ 116.335197][ T8153] ? __pfx___might_resched+0x10/0x10 [ 116.336842][ T8153] ? __init_waitqueue_head+0xca/0x150 [ 116.339193][ T8153] ? ioread8+0x8f/0xd0 [ 116.340698][ T8153] register_virtio_device+0x4f0/0x5d0 [ 116.342402][ T8153] ? __pfx_register_virtio_device+0x10/0x10 [ 116.344258][ T8153] ? __pfx_pcibios_set_master+0x10/0x10 [ 116.345994][ T8153] ? __raw_spin_lock_init+0x3a/0x110 [ 116.347719][ T8153] ? __pfx_virtio_pci_probe+0x10/0x10 [ 116.349475][ T8153] virtio_pci_probe+0x255/0x410 [ 116.351010][ T8153] local_pci_probe+0xdd/0x1b0 [ 116.352512][ T8153] pci_call_probe+0x176/0x800 [ 116.354005][ T8153] ? __pfx_pci_call_probe+0x10/0x10 [ 116.355654][ T8153] ? find_held_lock+0x2b/0x80 [ 116.357257][ T8153] ? pci_match_device+0x450/0x5f0 [ 116.359341][ T8153] ? pci_match_device+0x450/0x5f0 [ 116.360944][ T8153] ? pci_match_id+0x34d/0x3f0 [ 116.362435][ T8153] ? pci_match_device+0xb4/0x5f0 [ 116.363999][ T8153] pci_device_probe+0x1cd/0x370 [ 116.365535][ T8153] ? __pfx_pci_device_probe+0x10/0x10 [ 116.367356][ T8153] really_probe+0x241/0xa60 [ 116.368869][ T8153] __driver_probe_device+0x20e/0x450 [ 116.370529][ T8153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.372405][ T8153] driver_probe_device+0x4a/0x140 [ 116.373995][ T8153] __device_attach_driver+0x1df/0x320 [ 116.375687][ T8153] ? __pfx___device_attach_driver+0x10/0x10 [ 116.377648][ T8153] bus_for_each_drv+0x159/0x1e0 [ 116.379246][ T8153] ? __pfx_bus_for_each_drv+0x10/0x10 [ 116.380928][ T8153] ? lockdep_hardirqs_on+0x78/0x100 [ 116.382576][ T8153] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.384447][ T8153] __device_attach+0x1e4/0x4d0 [ 116.385962][ T8153] ? __pfx___device_attach+0x10/0x10 [ 116.387677][ T8153] ? do_raw_spin_unlock+0x145/0x1e0 [ 116.389375][ T8153] device_initial_probe+0xaf/0xd0 [ 116.390952][ T8153] pci_bus_add_device+0xc5/0x100 [ 116.392532][ T8153] pci_bus_add_devices+0x9a/0x1f0 [ 116.394115][ T8153] pci_rescan_bus+0x2a/0x40 [ 116.395559][ T8153] rescan_store+0xfb/0x130 [ 116.396968][ T8153] ? __pfx_rescan_store+0x10/0x10 [ 116.398621][ T8153] ? sysfs_file_kobj+0xe4/0x290 [ 116.400162][ T8153] ? __pfx_rescan_store+0x10/0x10 [ 116.401744][ T8153] bus_attr_store+0x74/0xb0 [ 116.403206][ T8153] ? __pfx_bus_attr_store+0x10/0x10 [ 116.404841][ T8153] sysfs_kf_write+0xf2/0x150 [ 116.406309][ T8153] kernfs_fop_write_iter+0x3e0/0x5f0 [ 116.408046][ T8153] ? __pfx_sysfs_kf_write+0x10/0x10 [ 116.409686][ T8153] vfs_write+0x6ac/0x1050 [ 116.411076][ T8153] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 116.412902][ T8153] ? __pfx_vfs_write+0x10/0x10 [ 116.414436][ T8153] ksys_write+0x12a/0x250 [ 116.415822][ T8153] ? __pfx_ksys_write+0x10/0x10 [ 116.417365][ T8153] do_syscall_64+0x115/0x870 [ 116.418894][ T8153] ? clear_bhb_loop+0x40/0x90 [ 116.420558][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.422402][ T8153] RIP: 0033:0x7ff54939e019 [ 116.423846][ T8153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.429999][ T8153] RSP: 002b:00007ff54a267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.432592][ T8153] RAX: ffffffffffffffda RBX: 00007ff549626180 RCX: 00007ff54939e019 [ 116.435084][ T8153] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000005 [ 116.437537][ T8153] RBP: 00007ff54943500c R08: 0000000000000000 R09: 0000000000000000 [ 116.440049][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.442500][ T8153] R13: 00007ff549626218 R14: 00007ff549626180 R15: 00007fff36de8598 [ 116.444966][ T8153] [ 116.445956][ T8153] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.448437][ T8153] CPU: 0 UID: 0 PID: 8153 Comm: syz.0.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.451724][ T8153] Tainted: [L]=SOFTLOCKUP [ 116.453089][ T8153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.456198][ T8153] Call Trace: [ 116.457289][ T8153] [ 116.458225][ T8153] dump_stack_lvl+0x100/0x190 [ 116.459730][ T8153] vpanic+0x552/0x970 [ 116.460989][ T8153] ? __pfx_vpanic+0x10/0x10 [ 116.462421][ T8153] panic+0xd1/0xe0 [ 116.463614][ T8153] ? __pfx_panic+0x10/0x10 [ 116.465024][ T8153] ? check_panic_on_warn+0x1f/0x90 [ 116.466634][ T8153] check_panic_on_warn.cold+0x19/0x34 [ 116.468343][ T8153] ? __kmem_cache_create_args+0xa6/0x420 [ 116.470097][ T8153] __warn.cold+0x191/0x318 [ 116.471517][ T8153] __report_bug+0x30f/0x440 [ 116.472957][ T8153] ? __kmem_cache_create_args+0xa6/0x420 [ 116.474717][ T8153] ? __pfx___report_bug+0x10/0x10 [ 116.476304][ T8153] ? __mutex_lock+0x26d/0x1bd0 [ 116.477833][ T8153] ? __kmem_cache_create_args+0x44/0x420 [ 116.479605][ T8153] report_bug_entry+0xe1/0x290 [ 116.481109][ T8153] ? __kmem_cache_create_args+0xa9/0x420 [ 116.482844][ T8153] handle_bug+0x1cd/0x2a0 [ 116.484214][ T8153] exc_invalid_op+0x17/0x50 [ 116.485649][ T8153] asm_exc_invalid_op+0x1a/0x20 [ 116.487317][ T8153] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 116.489543][ T8153] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 c5 40 5e 09 85 c0 75 e0 48 8d 3d 1a 39 ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 45 42 5e 09 48 85 c0 0f [ 116.495508][ T8153] RSP: 0018:ffffc90003756f58 EFLAGS: 00010246 [ 116.497600][ T8153] RAX: 0000000000000000 RBX: ffff8881022c7680 RCX: fffff520006eadc6 [ 116.500170][ T8153] RDX: 0000000000000000 RSI: ffffffff8c6f8d40 RDI: ffffffff91275ec0 [ 116.502629][ T8153] RBP: ffffffff8c6f8d40 R08: 0000000000000000 R09: fffffbfff22450fa [ 116.505085][ T8153] R10: ffffc90003756f58 R11: 0000000000000000 R12: 0000000000000000 [ 116.507731][ T8153] R13: ffffc90003756fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 116.510163][ T8153] ? __kmem_cache_create_args+0x9b/0x420 [ 116.511926][ T8153] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 116.513610][ T8153] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 116.515480][ T8153] ? vp_modern_set_queue_enable+0x43/0x90 [ 116.517426][ T8153] ? iowrite16+0x33/0xb0 [ 116.518795][ T8153] ? vp_modern_find_vqs+0xd2/0x100 [ 116.520409][ T8153] virtio_gpu_init.cold+0x51c/0x126e [ 116.522212][ T8153] ? lockdep_hardirqs_on+0x78/0x100 [ 116.523971][ T8153] ? __pfx_virtio_gpu_init+0x10/0x10 [ 116.525613][ T8153] ? console_unlock+0x1c9/0x260 [ 116.527169][ T8153] ? __pfx_console_unlock+0x10/0x10 [ 116.528799][ T8153] ? con_is_bound+0x141/0x190 [ 116.530275][ T8153] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 116.532033][ T8153] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 116.533866][ T8153] ? vga_remove_vgacon+0x21/0x30 [ 116.535457][ T8153] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 116.537684][ T8153] virtio_gpu_probe+0x21c/0x360 [ 116.539228][ T8153] virtio_dev_probe+0x6a2/0xbe0 [ 116.540762][ T8153] ? __pfx_virtio_dev_probe+0x10/0x10 [ 116.542438][ T8153] ? kernfs_create_link+0x1bd/0x240 [ 116.544071][ T8153] ? kernfs_put+0x3f/0x60 [ 116.545435][ T8153] ? sysfs_do_create_link_sd+0xbb/0x140 [ 116.547145][ T8153] ? sysfs_create_link+0x68/0xc0 [ 116.548700][ T8153] ? __pfx_virtio_dev_probe+0x10/0x10 [ 116.550376][ T8153] really_probe+0x241/0xa60 [ 116.551816][ T8153] __driver_probe_device+0x20e/0x450 [ 116.553474][ T8153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.555328][ T8153] driver_probe_device+0x4a/0x140 [ 116.556947][ T8153] __device_attach_driver+0x1df/0x320 [ 116.558788][ T8153] ? __pfx___device_attach_driver+0x10/0x10 [ 116.560641][ T8153] bus_for_each_drv+0x159/0x1e0 [ 116.562177][ T8153] ? __pfx_bus_for_each_drv+0x10/0x10 [ 116.563866][ T8153] ? lockdep_hardirqs_on+0x78/0x100 [ 116.565527][ T8153] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.567470][ T8153] __device_attach+0x1e4/0x4d0 [ 116.569057][ T8153] ? __pfx___device_attach+0x10/0x10 [ 116.570656][ T8153] ? do_raw_spin_unlock+0x145/0x1e0 [ 116.572305][ T8153] device_initial_probe+0xaf/0xd0 [ 116.573893][ T8153] bus_probe_device+0x64/0x160 [ 116.575409][ T8153] device_add+0x121d/0x1970 [ 116.576878][ T8153] ? __pfx_device_add+0x10/0x10 [ 116.578410][ T8153] ? __pfx___might_resched+0x10/0x10 [ 116.580072][ T8153] ? __init_waitqueue_head+0xca/0x150 [ 116.581751][ T8153] ? ioread8+0x8f/0xd0 [ 116.583055][ T8153] register_virtio_device+0x4f0/0x5d0 [ 116.584731][ T8153] ? __pfx_register_virtio_device+0x10/0x10 [ 116.586574][ T8153] ? __pfx_pcibios_set_master+0x10/0x10 [ 116.588336][ T8153] ? __raw_spin_lock_init+0x3a/0x110 [ 116.590031][ T8153] ? __pfx_virtio_pci_probe+0x10/0x10 [ 116.591707][ T8153] virtio_pci_probe+0x255/0x410 [ 116.593240][ T8153] local_pci_probe+0xdd/0x1b0 [ 116.594712][ T8153] pci_call_probe+0x176/0x800 [ 116.596200][ T8153] ? __pfx_pci_call_probe+0x10/0x10 [ 116.597875][ T8153] ? find_held_lock+0x2b/0x80 [ 116.599334][ T8153] ? pci_match_device+0x450/0x5f0 [ 116.600903][ T8153] ? pci_match_device+0x450/0x5f0 [ 116.602427][ T8153] ? pci_match_id+0x34d/0x3f0 [ 116.603837][ T8153] ? pci_match_device+0xb4/0x5f0 [ 116.605302][ T8153] pci_device_probe+0x1cd/0x370 [ 116.606758][ T8153] ? __pfx_pci_device_probe+0x10/0x10 [ 116.608536][ T8153] really_probe+0x241/0xa60 [ 116.609969][ T8153] __driver_probe_device+0x20e/0x450 [ 116.611629][ T8153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.613486][ T8153] driver_probe_device+0x4a/0x140 [ 116.615074][ T8153] __device_attach_driver+0x1df/0x320 [ 116.616757][ T8153] ? __pfx___device_attach_driver+0x10/0x10 [ 116.618640][ T8153] bus_for_each_drv+0x159/0x1e0 [ 116.620182][ T8153] ? __pfx_bus_for_each_drv+0x10/0x10 [ 116.621857][ T8153] ? lockdep_hardirqs_on+0x78/0x100 [ 116.623489][ T8153] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.625379][ T8153] __device_attach+0x1e4/0x4d0 [ 116.626918][ T8153] ? __pfx___device_attach+0x10/0x10 [ 116.628582][ T8153] ? do_raw_spin_unlock+0x145/0x1e0 [ 116.630240][ T8153] device_initial_probe+0xaf/0xd0 [ 116.631827][ T8153] pci_bus_add_device+0xc5/0x100 [ 116.633410][ T8153] pci_bus_add_devices+0x9a/0x1f0 [ 116.634985][ T8153] pci_rescan_bus+0x2a/0x40 [ 116.636380][ T8153] rescan_store+0xfb/0x130 [ 116.637807][ T8153] ? __pfx_rescan_store+0x10/0x10 [ 116.639399][ T8153] ? sysfs_file_kobj+0xe4/0x290 [ 116.640924][ T8153] ? __pfx_rescan_store+0x10/0x10 [ 116.642499][ T8153] bus_attr_store+0x74/0xb0 [ 116.643937][ T8153] ? __pfx_bus_attr_store+0x10/0x10 [ 116.645561][ T8153] sysfs_kf_write+0xf2/0x150 [ 116.647101][ T8153] kernfs_fop_write_iter+0x3e0/0x5f0 [ 116.648755][ T8153] ? __pfx_sysfs_kf_write+0x10/0x10 [ 116.650396][ T8153] vfs_write+0x6ac/0x1050 [ 116.651768][ T8153] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 116.653591][ T8153] ? __pfx_vfs_write+0x10/0x10 [ 116.655105][ T8153] ksys_write+0x12a/0x250 [ 116.656468][ T8153] ? __pfx_ksys_write+0x10/0x10 [ 116.658026][ T8153] do_syscall_64+0x115/0x870 [ 116.659481][ T8153] ? clear_bhb_loop+0x40/0x90 [ 116.660956][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.662809][ T8153] RIP: 0033:0x7ff54939e019 [ 116.664213][ T8153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.670311][ T8153] RSP: 002b:00007ff54a267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.672907][ T8153] RAX: ffffffffffffffda RBX: 00007ff549626180 RCX: 00007ff54939e019 [ 116.675364][ T8153] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000005 [ 116.677832][ T8153] RBP: 00007ff54943500c R08: 0000000000000000 R09: 0000000000000000 [ 116.680346][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.682783][ T8153] R13: 00007ff549626218 R14: 00007ff549626180 R15: 00007fff36de8598 [ 116.685226][ T8153] [ 116.686800][ T8153] Kernel Offset: disabled [ 116.688189][ T8153] Rebooting in 86400 seconds..