last executing test programs: 54.120710507s ago: executing program 1 (id=292): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000040000000400000011"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb63fffffff00000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 54.060871103s ago: executing program 1 (id=293): r0 = syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000580)={'>c9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", '\x00', "0300", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff190008a215016c4a2371", "1d25aaedd22555024b00dc1a", "38a70ed483c99b9f1600d333"]}) 54.060684231s ago: executing program 1 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 53.990849999s ago: executing program 1 (id=295): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x311d01c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, &(0x7f00000000c0)={0xf60, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0x7f, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000400)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x4, 0x0, 0xff}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 53.899783516s ago: executing program 1 (id=296): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000060", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 53.240807556s ago: executing program 1 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) write(r0, &(0x7f00000005c0)="010000000705810240000007058102000200", 0x12) 53.155132299s ago: executing program 32 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) write(r0, &(0x7f00000005c0)="010000000705810240000007058102000200", 0x12) 17.270843978s ago: executing program 0 (id=971): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="64010000100001000400000000000000fc0100000080ff000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2], 0x164}}, 0x0) 17.200746963s ago: executing program 0 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d000000000001000000f0ffff0001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 17.030766937s ago: executing program 0 (id=976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800d0ff00000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000020000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) 17.030183948s ago: executing program 0 (id=978): r0 = syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000580)={'>c9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", '\x00', "03000600", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff190008a215016c4a2371", "1d25aaedd22555024b00dc1a", "38a70ed483c99b9f1600d333"]}) 16.980426025s ago: executing program 0 (id=980): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="f3f20fd9dc694fb0fd03f7a4eb659888d8c929facd50714c3f26ee87a13be9908a6c822ac3e28697ed0304e4bfad975197ef13b43af5ab6f7f3d22", 0x3b}], 0x1) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000340)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["080500000400", "0000000001000400", '\x00', "00d703500200"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0x401, 0x4000000000001, 0x5, 0xfd7, 0xf, 0x7ffe, "7f2c00", 0x1, 0x56, 0x10, 0x5b, 0x9, 0x1}) close(r1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x0, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}], 0x10, 0x1ff}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e6430000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x175) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) socket$nl_netfilter(0x10, 0x3, 0xc) 16.850578103s ago: executing program 0 (id=983): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000000)='GPL\x00', 0x280000, &(0x7f0000000040)={@align=0x7fff, {0x950, 0xbaf, 0x5, 0x7}}, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x3}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x53, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) 2.919323153s ago: executing program 3 (id=1177): socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket(0xa, 0x3, 0x87) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00fc00080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x24040840}, 0x40090) 2.83904236s ago: executing program 3 (id=1180): r0 = syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000580)={'>c9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", '\x00', "03000600", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff190008a215016c4a2371", "1d25aaedd22555024b00dc1a", "38a70ed483c99b9f1600d333"]}) 2.770059566s ago: executing program 3 (id=1181): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="400305"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x41) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000000)={0xc, "a12fa1f55d27040f35f4541331ef08675fdef58880e397cc650b00000600"}}) 1.81008848s ago: executing program 33 (id=983): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000000)='GPL\x00', 0x280000, &(0x7f0000000040)={@align=0x7fff, {0x950, 0xbaf, 0x5, 0x7}}, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x3}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x53, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) 1.370873524s ago: executing program 2 (id=1194): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x43, 0x22, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000600)=""/34, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.169665246s ago: executing program 3 (id=1195): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0xfffffffffffffffc, 0x0}, 0x20) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getpeername(r3, 0x0, &(0x7f0000000080)) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x92002, 0x10e) write(r4, &(0x7f0000000000)='3', 0x4e) unshare(0x62000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e502b2f1c3038ffcc77268bb2774", @ANYRES16=r5, @ANYBLOB="000325bd7000fbdbdf252e0000000c00990005000000490000000800c9006c090000"], 0x28}, 0x1, 0x0, 0x0, 0x404c081}, 0x0) unshare(0x68040080) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x58001, 0x0) close_range(r6, r4, 0x0) 490.816977ms ago: executing program 2 (id=1199): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = syz_ublk_setup_io_uring(0x4b51, &(0x7f00000000c0)={0x0, 0x7b43, 0x0, 0x2, 0x21}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000000240)={0x32, 0x7e7f}, 0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000900)=""/149, 0x95}], 0x1) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close(r1) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 438.571373ms ago: executing program 3 (id=1201): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @remote, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@end]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000060000000001"], 0xfdef) 329.868261ms ago: executing program 2 (id=1202): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="64010000100001000400000000000000fc010000000000200000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2], 0x164}}, 0x0) 328.940376ms ago: executing program 2 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000d042dbd7000fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="df78d100000100001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000001400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) mkdirat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x1ff) 229.397912ms ago: executing program 2 (id=1204): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0xf0ffff, 0x20041090}, 0x0) 228.895776ms ago: executing program 4 (id=1205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x60}}, 0x0) 228.584852ms ago: executing program 4 (id=1206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000020000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) 170.58155ms ago: executing program 4 (id=1207): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000040000000400000011"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb600b0000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 119.884595ms ago: executing program 4 (id=1208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000018000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 119.202605ms ago: executing program 2 (id=1209): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x404c081}, 0x80) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001e00010029bd7000fbdbdf25e0000001000000000000000000000000000004d502002b00200100000000000000000000000000000f0000000735000008000c000700000081bc30b60129fa4f1243e19366e4489e6a6f430664edc8669565a6fd5aa10862d0fd797f9618776987cf3916f8ae60438f4565b3a895be57831ffc214b9b77d3e1466682dea13de0a3e726db2356795c4ef258c60edf690c"], 0x48}, 0x1, 0x0, 0x0, 0x10000084}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0\n', 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000000080001000100"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x40000105, 0x0, 0x0, 0x3d}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000005a00)=@ethtool_gstrings={0x1b, 0x6, 0x1, "83"}}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='dummy_udc.0', 0xb) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0x43, 0x0, 0x0) 119.098712ms ago: executing program 3 (id=1210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d00000000000100000000001f0001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 60.743204ms ago: executing program 4 (id=1211): socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket(0xa, 0x3, 0x87) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00000008fc11000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x24040840}, 0x40090) 0s ago: executing program 4 (id=1212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) io_setup(0x239f, &(0x7f0000000380)=0x0) r3 = eventfd2(0x0, 0x800) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x9841, r3, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x1, r3}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r3}]) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) dup(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) kernel console output (not intermixed with test programs): SP: 002b:00007f2e3e797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.774504][ T6800] RAX: ffffffffffffffda RBX: 00007f2e3dc25fa0 RCX: 00007f2e3d99e159 [ 70.774511][ T6800] RDX: 0000200000000980 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 70.774518][ T6800] RBP: 00007f2e3da35024 R08: 0000000000000000 R09: 0000000000000000 [ 70.774525][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.774532][ T6800] R13: 00007f2e3dc26038 R14: 00007f2e3dc25fa0 R15: 00007ffdb4bb9908 [ 70.774547][ T6800] [ 70.934459][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034840400: abort rx timeout. Force session deactivation [ 70.941121][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.317'. [ 70.962773][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4 [ 71.138686][ T5813] hsr_slave_0: left promiscuous mode [ 71.142247][ T5813] hsr_slave_1: left promiscuous mode [ 71.152036][ T5813] veth1_macvtap: left promiscuous mode [ 71.154708][ T5813] veth0_macvtap: left promiscuous mode [ 71.154770][ T5813] veth1_vlan: left promiscuous mode [ 71.154826][ T5813] veth0_vlan: left promiscuous mode [ 71.188366][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.188458][ T42] cfg80211: failed to load regulatory.db [ 71.188468][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.393142][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 71.398902][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 71.701812][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.707858][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.707948][ T6768] bridge_slave_0: entered allmulticast mode [ 71.714116][ T6768] bridge_slave_0: entered promiscuous mode [ 71.717666][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.720008][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.722579][ T6768] bridge_slave_1: entered allmulticast mode [ 71.726505][ T6768] bridge_slave_1: entered promiscuous mode [ 71.730187][ T6871] syzkaller0: entered promiscuous mode [ 71.730267][ T6871] syzkaller0: entered allmulticast mode [ 71.736993][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5 [ 71.759718][ T6768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.793659][ T6768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.826634][ T6768] team0: Port device team_slave_0 added [ 71.830439][ T6768] team0: Port device team_slave_1 added [ 71.852651][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.852729][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.852767][ T6768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.855523][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.855533][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.855545][ T6768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.879296][ T6768] hsr_slave_0: entered promiscuous mode [ 71.879786][ T6768] hsr_slave_1: entered promiscuous mode [ 72.014162][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 72.051163][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880351d8400: rx timeout, send abort [ 72.061138][ T6768] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.062459][ T65] Bluetooth: hci1: command tx timeout [ 72.066730][ T6768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.067481][ T6768] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.071491][ T6768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.072047][ T6768] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.077547][ T6768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.078068][ T6768] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.084216][ T6768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.108317][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.108769][ T6768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.108945][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.109022][ T6768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.171811][ T6768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.189247][ T100] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.192853][ T100] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.205883][ T6768] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.213699][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.213772][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.266679][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.268382][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.334982][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.344285][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.445790][ T6899] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 72.447729][ T6899] gretap0: left allmulticast mode [ 72.455928][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.456013][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.483571][ T62] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 72.493958][ T5813] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.512277][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.512396][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.512420][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.550857][ C3] vcan0: j1939_tp_rxtimer: 0xffff888035b99800: rx timeout, send abort [ 72.553682][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880351d8400: abort rx timeout. Force session deactivation [ 72.633315][ T62] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 72.637179][ T62] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 72.637243][ T62] usb 8-1: config 1 has no interface number 0 [ 72.644940][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.644973][ T62] usb 8-1: Product: syz [ 72.645013][ T62] usb 8-1: Manufacturer: syz [ 72.645034][ T62] usb 8-1: SerialNumber: syz [ 72.661560][ T62] usb 8-1: 3:1 : does not exist [ 72.663903][ T62] usb 8-1: 3:2 : does not exist [ 72.777067][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 72.777117][ T43] audit: type=1400 audit(1788549980.463:458): avc: denied { write } for pid=6926 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.781707][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.964396][ T6768] veth0_vlan: entered promiscuous mode [ 72.969882][ T6768] veth1_vlan: entered promiscuous mode [ 72.989505][ T6768] veth0_macvtap: entered promiscuous mode [ 72.995042][ T6768] veth1_macvtap: entered promiscuous mode [ 73.014167][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.017074][ T6949] loop3: detected capacity change from 0 to 7 [ 73.018441][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.021042][ T6949] loop3: p1 p4 [ 73.021062][ T6949] loop3: partition table partially beyond EOD, truncated [ 73.050965][ C3] vcan0: j1939_tp_rxtimer: 0xffff888035b99800: abort rx timeout. Force session deactivation [ 73.072428][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.072503][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.072538][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.072573][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.074659][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 73.075826][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 73.094920][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.094933][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.121557][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.121614][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.189875][ T6959] syzkaller0: entered promiscuous mode [ 73.189927][ T6959] syzkaller0: entered allmulticast mode [ 73.195739][ T6959] tipc: Enabled bearer , priority 0 [ 73.201828][ T6958] tipc: Resetting bearer [ 73.213849][ T43] audit: type=1400 audit(1788549980.903:459): avc: denied { write } for pid=6960 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.243637][ T6958] tipc: Disabling bearer [ 74.027627][ T5698] usb 8-1: USB disconnect, device number 9 [ 74.142322][ T65] Bluetooth: hci1: command tx timeout [ 74.320324][ T6998] loop3: detected capacity change from 0 to 7 [ 74.321304][ T6998] loop3: p1 p4 [ 74.321322][ T6998] loop3: partition table partially beyond EOD, truncated [ 74.365640][ T43] audit: type=1400 audit(1788549982.053:460): avc: denied { connect } for pid=7000 comm="syz.4.363" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.367358][ T7001] cgroup: Unknown subsys name 'cpuset' [ 74.400898][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 74.405713][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 74.504036][ T43] audit: type=1400 audit(1788549982.193:461): avc: denied { create } for pid=7018 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.506668][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 74.513341][ T7019] macvlan3: entered allmulticast mode [ 74.513359][ T7019] gretap0: entered allmulticast mode [ 74.531334][ T43] audit: type=1400 audit(1788549982.213:462): avc: denied { write } for pid=7020 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.419314][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.434733][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'. [ 75.464609][ T7029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.474817][ T43] audit: type=1400 audit(1788549983.163:463): avc: denied { write } for pid=7030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.568998][ T43] audit: type=1400 audit(1788549983.253:464): avc: denied { write } for pid=7043 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.570865][ T43] audit: type=1400 audit(1788549983.253:465): avc: denied { mount } for pid=7044 comm="syz.2.380" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.581303][ T43] audit: type=1400 audit(1788549983.273:466): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.680650][ T43] audit: type=1400 audit(1788549983.363:467): avc: denied { write } for pid=7053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.687331][ T7056] loop3: detected capacity change from 0 to 7 [ 75.691438][ T7056] loop3: p1 p4 [ 75.691527][ T7056] loop3: partition table partially beyond EOD, truncated [ 75.724848][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 75.728374][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 75.758938][ T7052] /dev/sr0: Can't open blockdev [ 75.782230][ T5816] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 75.798299][ T7069] netlink: 156 bytes leftover after parsing attributes in process `syz.2.388'. [ 75.932257][ T5816] usb 9-1: Using ep0 maxpacket: 16 [ 75.939930][ T5816] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 75.945450][ T5816] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.949756][ T5816] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.958911][ T5816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.958966][ T5816] usb 9-1: Product: syz [ 75.959004][ T5816] usb 9-1: Manufacturer: syz [ 75.959031][ T5816] usb 9-1: SerialNumber: syz [ 75.978220][ T5816] r8152-cfgselector 9-1: Unknown version 0x0000 [ 75.982047][ T5816] r8152-cfgselector 9-1: config 0 descriptor?? [ 76.046671][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 76.194806][ T7042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.199350][ T7042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.202507][ T1043] r8152-cfgselector 9-1: USB disconnect, device number 2 [ 76.232238][ T65] Bluetooth: hci1: command tx timeout [ 77.054602][ T7121] overlay: ./file0 is not a directory [ 77.055194][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 77.059553][ T7125] macvlan4: entered allmulticast mode [ 77.120147][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 77.202274][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 77.220145][ T7135] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 77.220219][ T7135] device-mapper: raid: Choosing default region size of 4MiB [ 77.222661][ T7135] device-mapper: table: 248:0: raid: Component device(s) too small (-EINVAL) [ 77.222681][ T7135] device-mapper: ioctl: error adding target to table [ 77.223760][ T7129] SELinux: mls: truncated range [ 77.223767][ T7129] SELinux: error reading MLS range of context [ 77.223771][ T7129] SELinux: invalid ocon [ 77.306542][ T7129] SELinux: failed to load policy [ 77.382211][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 77.383281][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 77.384580][ T9] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.384604][ T9] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.384621][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 77.384645][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.387092][ T9] usb 8-1: config 0 descriptor?? [ 77.393314][ T7144] syzkaller0: entered promiscuous mode [ 77.393326][ T7144] syzkaller0: entered allmulticast mode [ 77.475823][ T7146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.418'. [ 77.543164][ T7146] netlink: 56 bytes leftover after parsing attributes in process `syz.4.418'. [ 77.803727][ T9] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 77.803796][ T9] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 77.803842][ T9] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 77.803867][ T9] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 77.803880][ T9] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 77.804332][ T9] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 78.000712][ T9] usb 8-1: USB disconnect, device number 10 [ 78.302236][ T65] Bluetooth: hci1: command tx timeout [ 78.631230][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 78.637709][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 78.637803][ T43] audit: type=1400 audit(1788549986.323:481): avc: denied { sqpoll } for pid=7177 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.675649][ T43] audit: type=1400 audit(1788549986.363:482): avc: denied { getopt } for pid=7183 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.684844][ T43] audit: type=1400 audit(1788549986.373:483): avc: denied { checkpoint_restore } for pid=7183 comm="syz.2.433" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.864665][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.891994][ T43] audit: type=1400 audit(1788549986.573:484): avc: denied { remount } for pid=7203 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.932492][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 78.938602][ T7207] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 79.006012][ T7216] loop3: detected capacity change from 0 to 7 [ 79.007298][ T7216] loop3: p1 p4 [ 79.007311][ T7216] loop3: partition table partially beyond EOD, truncated [ 79.022673][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 79.026888][ T9] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 79.026973][ T9] usb 5-1: config 1 has no interface number 0 [ 79.040668][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.040704][ T9] usb 5-1: Product: syz [ 79.040760][ T9] usb 5-1: Manufacturer: syz [ 79.040783][ T9] usb 5-1: SerialNumber: syz [ 79.049851][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 79.051217][ T5747] udevd[5747]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 79.065573][ T9] usb 5-1: 3:1 : does not exist [ 79.070752][ T9] usb 5-1: 3:2 : does not exist [ 79.122429][ T7229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.135610][ T7226] bond1: (slave ip6erspan0): making interface the new active one [ 79.143693][ T7226] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 79.272898][ T62] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.346329][ C3] vcan0: j1939_tp_rxtimer: 0xffff888038aca800: rx timeout, send abort [ 79.415613][ T7239] syzkaller1: entered promiscuous mode [ 79.415702][ T7239] syzkaller1: entered allmulticast mode [ 79.442201][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 79.442971][ T62] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 79.443899][ T62] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.443924][ T62] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.443950][ T62] usb 7-1: config 0 interface 0 has no altsetting 0 [ 79.443977][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.459627][ T62] usb 7-1: config 0 descriptor?? [ 79.824615][ T42] usb 5-1: USB disconnect, device number 6 [ 79.846435][ C3] vcan0: j1939_tp_rxtimer: 0xffff888038aca800: abort rx timeout. Force session deactivation [ 79.846573][ C3] vcan0: j1939_tp_rxtimer: 0xffff888038acb400: rx timeout, send abort [ 79.882017][ T62] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 79.886799][ T62] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 79.888826][ T62] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 79.888848][ T62] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 79.888866][ T62] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 79.889383][ T62] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 80.073102][ T62] usb 7-1: USB disconnect, device number 5 [ 80.346696][ C3] vcan0: j1939_tp_rxtimer: 0xffff888038acb400: abort rx timeout. Force session deactivation [ 80.565954][ T7266] __nla_validate_parse: 4 callbacks suppressed [ 80.568949][ T7266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'. [ 80.658200][ T165] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 80.667614][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.667662][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.684434][ T7272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.736125][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 80.768605][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 80.771468][ T7292] macvlan5: entered allmulticast mode [ 80.855922][ T43] audit: type=1400 audit(1788549988.543:485): avc: denied { create } for pid=7296 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.857311][ T43] audit: type=1400 audit(1788549988.543:486): avc: denied { read write } for pid=7296 comm="syz.0.481" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.857338][ T43] audit: type=1400 audit(1788549988.543:487): avc: denied { open } for pid=7296 comm="syz.0.481" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.857576][ T43] audit: type=1400 audit(1788549988.543:488): avc: denied { ioctl } for pid=7296 comm="syz.0.481" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.860193][ T43] audit: type=1400 audit(1788549988.543:489): avc: denied { getopt } for pid=7296 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.892748][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d33c000: rx timeout, send abort [ 80.939627][ T7311] FAULT_INJECTION: forcing a failure. [ 80.939627][ T7311] name failslab, interval 1, probability 0, space 0, times 0 [ 80.939693][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.2.489 Not tainted syzkaller #0 PREEMPT(full) [ 80.939717][ T7311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.939725][ T7311] Call Trace: [ 80.939729][ T7311] [ 80.939733][ T7311] dump_stack_lvl+0x100/0x190 [ 80.939763][ T7311] should_fail_ex.cold+0x5/0xa [ 80.939778][ T7311] should_failslab+0xc2/0x120 [ 80.939796][ T7311] __kmalloc_noprof+0xfc/0x840 [ 80.939807][ T7311] ? tomoyo_encode2+0xfb/0x3c0 [ 80.939821][ T7311] tomoyo_encode2+0xfb/0x3c0 [ 80.939834][ T7311] tomoyo_encode+0x29/0x50 [ 80.939844][ T7311] tomoyo_realpath_from_path+0x18c/0x690 [ 80.939859][ T7311] tomoyo_path_number_perm+0x23c/0x580 [ 80.939875][ T7311] ? tomoyo_path_number_perm+0x22e/0x580 [ 80.939903][ T7311] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.939927][ T7311] ? __lock_acquire+0x4c5/0x1ec0 [ 80.939944][ T7311] ? __fget_files+0x34/0x3d0 [ 80.939958][ T7311] ? find_held_lock+0x2b/0x80 [ 80.939972][ T7311] ? hook_file_ioctl_common+0x140/0x440 [ 80.939988][ T7311] ? __fget_files+0x21f/0x3d0 [ 80.940003][ T7311] security_file_ioctl+0xd3/0x230 [ 80.940020][ T7311] __x64_sys_ioctl+0xb7/0x210 [ 80.940041][ T7311] do_syscall_64+0x123/0x790 [ 80.940064][ T7311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.940075][ T7311] RIP: 0033:0x7f08fc39e159 [ 80.940085][ T7311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.940095][ T7311] RSP: 002b:00007f08fd1c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.940106][ T7311] RAX: ffffffffffffffda RBX: 00007f08fc625fa0 RCX: 00007f08fc39e159 [ 80.940113][ T7311] RDX: 0000200000000580 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 80.940120][ T7311] RBP: 00007f08fd1c6090 R08: 0000000000000000 R09: 0000000000000000 [ 80.940126][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.940132][ T7311] R13: 00007f08fc626038 R14: 00007f08fc625fa0 R15: 00007ffc04be6bb8 [ 80.940147][ T7311] [ 80.942210][ T7311] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.942996][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 80.966773][ T7314] FAULT_INJECTION: forcing a failure. [ 80.966773][ T7314] name failslab, interval 1, probability 0, space 0, times 0 [ 80.966793][ T7314] CPU: 3 UID: 0 PID: 7314 Comm: syz.3.491 Not tainted syzkaller #0 PREEMPT(full) [ 80.966806][ T7314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.966812][ T7314] Call Trace: [ 80.966816][ T7314] [ 80.966820][ T7314] dump_stack_lvl+0x100/0x190 [ 80.966840][ T7314] should_fail_ex.cold+0x5/0xa [ 80.966858][ T7314] should_failslab+0xc2/0x120 [ 80.966884][ T7314] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.966898][ T7314] ? alloc_empty_file+0x5b/0x1c0 [ 80.966916][ T7314] alloc_empty_file+0x5b/0x1c0 [ 80.966931][ T7314] path_openat+0xdb/0x2440 [ 80.966946][ T7314] ? __pfx_path_openat+0x10/0x10 [ 80.966964][ T7314] do_file_open+0x20e/0x430 [ 80.966995][ T7314] ? __pfx_do_file_open+0x10/0x10 [ 80.967021][ T7314] ? _raw_spin_unlock+0x28/0x50 [ 80.967033][ T7314] ? alloc_fd+0x471/0x7a0 [ 80.967051][ T7314] do_sys_openat2+0x10f/0x1e0 [ 80.967066][ T7314] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.967088][ T7314] __x64_sys_openat+0x12d/0x210 [ 80.967103][ T7314] ? __pfx___x64_sys_openat+0x10/0x10 [ 80.967123][ T7314] do_syscall_64+0x123/0x790 [ 80.967136][ T7314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.967149][ T7314] RIP: 0033:0x7fc275b9e159 [ 80.967159][ T7314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.967170][ T7314] RSP: 002b:00007fc276aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.967181][ T7314] RAX: ffffffffffffffda RBX: 00007fc275e25fa0 RCX: 00007fc275b9e159 [ 80.967188][ T7314] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 80.967195][ T7314] RBP: 00007fc275c35024 R08: 0000000000000000 R09: 0000000000000000 [ 80.967201][ T7314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.967207][ T7314] R13: 00007fc275e26038 R14: 00007fc275e25fa0 R15: 00007fff47f89d18 [ 80.967221][ T7314] [ 80.967780][ T7314] netlink: 'syz.3.491': attribute type 20 has an invalid length. [ 81.066250][ T7324] loop3: detected capacity change from 0 to 7 [ 81.080302][ T7324] loop3: p1 p4 [ 81.080315][ T7324] loop3: partition table partially beyond EOD, truncated [ 81.116294][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 81.117434][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 81.171998][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.498'. [ 81.356155][ T7357] netlink: 96 bytes leftover after parsing attributes in process `syz.3.506'. [ 81.392788][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b634800: rx timeout, send abort [ 81.392881][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d33c000: abort rx timeout. Force session deactivation [ 81.458649][ T43] audit: type=1400 audit(1788549989.143:490): avc: denied { listen } for pid=7361 comm="syz.2.509" laddr=172.20.0.1 lport=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.493721][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 81.501486][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 81.505041][ T7373] macvlan6: entered allmulticast mode [ 81.623690][ T7383] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 81.639819][ T7383] lo speed is unknown, defaulting to 1000 [ 81.687510][ T7392] netlink: 14 bytes leftover after parsing attributes in process `syz.3.519'. [ 81.774062][ T7392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7392 comm=syz.3.519 [ 81.783100][ T7392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7392 comm=syz.3.519 [ 81.800022][ T7402] FAULT_INJECTION: forcing a failure. [ 81.800022][ T7402] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.800095][ T7402] CPU: 3 UID: 0 PID: 7402 Comm: syz.0.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.800122][ T7402] Tainted: [L]=SOFTLOCKUP [ 81.800127][ T7402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.800133][ T7402] Call Trace: [ 81.800137][ T7402] [ 81.800142][ T7402] dump_stack_lvl+0x100/0x190 [ 81.800170][ T7402] should_fail_ex.cold+0x5/0xa [ 81.800186][ T7402] _copy_from_user+0x2e/0xd0 [ 81.800207][ T7402] cec_ioctl+0x5ab/0x2990 [ 81.800225][ T7402] ? __pfx_cec_ioctl+0x10/0x10 [ 81.800237][ T7402] ? tomoyo_path_number_perm+0x188/0x580 [ 81.800259][ T7402] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.800273][ T7402] ? do_vfs_ioctl+0x226/0x13e0 [ 81.800290][ T7402] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 81.800305][ T7402] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 81.800317][ T7402] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 81.800330][ T7402] ? __fget_files+0x34/0x3d0 [ 81.800360][ T7402] ? selinux_file_ioctl+0x13b/0x290 [ 81.800371][ T7402] ? selinux_file_ioctl+0xb6/0x290 [ 81.800381][ T7402] ? __pfx_cec_ioctl+0x10/0x10 [ 81.800395][ T7402] __x64_sys_ioctl+0x18e/0x210 [ 81.800413][ T7402] do_syscall_64+0x123/0x790 [ 81.800430][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.800441][ T7402] RIP: 0033:0x7f2e3d99e159 [ 81.800451][ T7402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.800462][ T7402] RSP: 002b:00007f2e3e797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.800473][ T7402] RAX: ffffffffffffffda RBX: 00007f2e3dc25fa0 RCX: 00007f2e3d99e159 [ 81.800480][ T7402] RDX: 0000200000000580 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 81.800487][ T7402] RBP: 00007f2e3e797090 R08: 0000000000000000 R09: 0000000000000000 [ 81.800493][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.800499][ T7402] R13: 00007f2e3dc26038 R14: 00007f2e3dc25fa0 R15: 00007ffdb4bb9908 [ 81.800513][ T7402] [ 81.860526][ T7407] /dev/net/tun: Can't lookup blockdev [ 81.892904][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b634800: abort rx timeout. Force session deactivation [ 82.197904][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 82.273657][ T7444] macvlan6: entered allmulticast mode [ 82.370804][ T7447] FAULT_INJECTION: forcing a failure. [ 82.370804][ T7447] name failslab, interval 1, probability 0, space 0, times 0 [ 82.370881][ T7447] CPU: 3 UID: 0 PID: 7447 Comm: syz.2.540 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.370909][ T7447] Tainted: [L]=SOFTLOCKUP [ 82.370915][ T7447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.370921][ T7447] Call Trace: [ 82.370926][ T7447] [ 82.370931][ T7447] dump_stack_lvl+0x100/0x190 [ 82.370952][ T7447] should_fail_ex.cold+0x5/0xa [ 82.370970][ T7447] should_failslab+0xc2/0x120 [ 82.370990][ T7447] __kmalloc_noprof+0xfc/0x840 [ 82.371002][ T7447] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 82.371017][ T7447] kernfs_fop_write_iter+0x26a/0x5f0 [ 82.371030][ T7447] vfs_write+0x6af/0x1050 [ 82.371042][ T7447] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 82.371055][ T7447] ? __pfx_vfs_write+0x10/0x10 [ 82.371064][ T7447] ? find_held_lock+0x2b/0x80 [ 82.371091][ T7447] ksys_write+0x12a/0x250 [ 82.371101][ T7447] ? __pfx_ksys_write+0x10/0x10 [ 82.371117][ T7447] do_syscall_64+0x123/0x790 [ 82.371132][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.371144][ T7447] RIP: 0033:0x7f08fc39e159 [ 82.371154][ T7447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.371165][ T7447] RSP: 002b:00007f08fd1c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.371176][ T7447] RAX: ffffffffffffffda RBX: 00007f08fc625fa0 RCX: 00007f08fc39e159 [ 82.371184][ T7447] RDX: 0000000000000005 RSI: 0000200000000600 RDI: 0000000000000003 [ 82.371191][ T7447] RBP: 00007f08fd1c6090 R08: 0000000000000000 R09: 0000000000000000 [ 82.371198][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.371204][ T7447] R13: 00007f08fc626038 R14: 00007f08fc625fa0 R15: 00007ffc04be6bb8 [ 82.371219][ T7447] [ 82.442313][ T35] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 82.531995][ T7451] binder: 7450:7451 ioctl c018620c 200000000040 returned -22 [ 82.597144][ T35] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 82.598732][ T35] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.598756][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 82.598775][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 82.601225][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.601246][ T35] usb 8-1: Product: syz [ 82.601258][ T35] usb 8-1: Manufacturer: syz [ 82.601270][ T35] usb 8-1: SerialNumber: syz [ 82.604207][ T35] usb 8-1: config 0 descriptor?? [ 82.604692][ T7439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.662246][ T35] rc_core: IR keymap rc-streamzap not found [ 82.662303][ T35] Registered IR keymap rc-empty [ 82.663185][ T35] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 82.663984][ T35] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input12 [ 83.047432][ T7485] loop3: detected capacity change from 0 to 7 [ 83.050138][ T7485] loop3: p1 p4 [ 83.050994][ T7485] loop3: partition table partially beyond EOD, truncated [ 83.080703][ T7482] team0: entered allmulticast mode [ 83.080751][ T7482] team_slave_0: entered allmulticast mode [ 83.080803][ T7482] team_slave_1: entered allmulticast mode [ 83.097395][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 83.101682][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 83.409453][ T42] usb 8-1: USB disconnect, device number 11 [ 83.510319][ T7527] macvlan7: entered allmulticast mode [ 83.647331][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 83.647393][ T43] audit: type=1400 audit(1788549991.333:518): avc: denied { write } for pid=7543 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.648315][ T7545] FAULT_INJECTION: forcing a failure. [ 83.648315][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.648334][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.2.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.648349][ T7545] Tainted: [L]=SOFTLOCKUP [ 83.648353][ T7545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.648359][ T7545] Call Trace: [ 83.648363][ T7545] [ 83.648368][ T7545] dump_stack_lvl+0x100/0x190 [ 83.648387][ T7545] should_fail_ex.cold+0x5/0xa [ 83.648403][ T7545] _copy_from_iter+0x1f4/0x1690 [ 83.648423][ T7545] ? __pfx__copy_from_iter+0x10/0x10 [ 83.648440][ T7545] ? trace_kmalloc+0xeb/0x110 [ 83.648453][ T7545] ? __kasan_kmalloc+0xaa/0xb0 [ 83.648465][ T7545] ? __kmalloc_noprof+0x350/0x840 [ 83.648476][ T7545] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 83.648492][ T7545] kernfs_fop_write_iter+0x186/0x5f0 [ 83.648505][ T7545] vfs_write+0x6af/0x1050 [ 83.648516][ T7545] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 83.648528][ T7545] ? __pfx_vfs_write+0x10/0x10 [ 83.648537][ T7545] ? find_held_lock+0x2b/0x80 [ 83.648561][ T7545] ksys_write+0x12a/0x250 [ 83.648571][ T7545] ? __pfx_ksys_write+0x10/0x10 [ 83.648585][ T7545] do_syscall_64+0x123/0x790 [ 83.648600][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.648611][ T7545] RIP: 0033:0x7f08fc39e159 [ 83.648620][ T7545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.648631][ T7545] RSP: 002b:00007f08fd1c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.648642][ T7545] RAX: ffffffffffffffda RBX: 00007f08fc625fa0 RCX: 00007f08fc39e159 [ 83.648649][ T7545] RDX: 0000000000000005 RSI: 0000200000000600 RDI: 0000000000000003 [ 83.648655][ T7545] RBP: 00007f08fd1c6090 R08: 0000000000000000 R09: 0000000000000000 [ 83.648662][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.648668][ T7545] R13: 00007f08fc626038 R14: 00007f08fc625fa0 R15: 00007ffc04be6bb8 [ 83.648682][ T7545] [ 83.708992][ T7548] lo speed is unknown, defaulting to 1000 [ 83.732584][ T1043] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.746649][ T43] audit: type=1400 audit(1788549991.433:519): avc: denied { listen } for pid=7547 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.751743][ T43] audit: type=1400 audit(1788549991.433:520): avc: denied { accept } for pid=7547 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.763374][ T43] audit: type=1400 audit(1788549991.453:521): avc: denied { write } for pid=7550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.811093][ T43] audit: type=1400 audit(1788549991.493:522): avc: denied { write } for pid=7558 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.892233][ T1043] usb 5-1: Using ep0 maxpacket: 8 [ 83.892944][ T1043] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.893823][ T1043] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 83.893848][ T1043] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 83.893864][ T1043] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 83.893877][ T1043] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 83.893892][ T1043] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 83.893909][ T1043] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.893929][ T1043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.086622][ T7578] bridge1: entered allmulticast mode [ 84.104116][ T1043] usb 5-1: GET_CAPABILITIES returned 0 [ 84.104174][ T1043] usbtmc 5-1:16.0: can't read capabilities [ 84.305924][ T43] audit: type=1400 audit(1788549991.993:523): avc: denied { write } for pid=7523 comm="syz.0.566" name="usbtmc0" dev="devtmpfs" ino=3140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.308284][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 84.308428][ T7524] usbtmc 5-1:16.0: Unable to send data, error -71 [ 84.309697][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.309904][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.363620][ T7590] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 84.864892][ T43] audit: type=1400 audit(1788549992.553:524): avc: denied { create } for pid=7592 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.865552][ T43] audit: type=1400 audit(1788549992.553:525): avc: denied { bind } for pid=7592 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.917169][ T43] audit: type=1400 audit(1788549992.603:526): avc: denied { setopt } for pid=7592 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.928745][ T43] audit: type=1400 audit(1788549992.613:527): avc: denied { read } for pid=7592 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.078828][ T65] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 85.078878][ T65] CPU: 0 UID: 0 PID: 65 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.078905][ T65] Tainted: [L]=SOFTLOCKUP [ 85.078910][ T65] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.078918][ T65] Workqueue: hci1 hci_rx_work [ 85.078941][ T65] Call Trace: [ 85.078945][ T65] [ 85.078950][ T65] dump_stack_lvl+0x100/0x190 [ 85.079065][ T65] sysfs_warn_dup.cold+0x1c/0x28 [ 85.079083][ T65] sysfs_create_dir_ns+0x24b/0x2b0 [ 85.079098][ T65] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 85.079111][ T65] ? find_held_lock+0x2b/0x80 [ 85.079125][ T65] ? kobject_add_internal+0x25f/0x930 [ 85.079142][ T65] ? kobject_add_internal+0x25f/0x930 [ 85.079159][ T65] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.079174][ T65] kobject_add_internal+0x2c8/0x930 [ 85.079194][ T65] kobject_add+0x16a/0x1e0 [ 85.079209][ T65] ? __pfx_kobject_add+0x10/0x10 [ 85.079223][ T65] ? class_to_subsys+0x10f/0x150 [ 85.079240][ T65] ? kobject_put+0xb9/0x640 [ 85.079254][ T65] ? _raw_spin_unlock+0x28/0x50 [ 85.079269][ T65] device_add+0x294/0x1970 [ 85.079330][ T65] ? __pfx_dev_set_name+0x10/0x10 [ 85.079348][ T65] ? __pfx_device_add+0x10/0x10 [ 85.079362][ T65] ? mgmt_send_event_skb+0x2fb/0x460 [ 85.079379][ T65] hci_conn_add_sysfs+0x1a3/0x260 [ 85.079396][ T65] le_conn_complete_evt+0x122f/0x2130 [ 85.079418][ T65] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 85.079436][ T65] ? hci_event_packet+0x186/0xcd0 [ 85.079456][ T65] hci_le_conn_complete_evt+0x23c/0x3a0 [ 85.079474][ T65] ? skb_pull_data+0x15f/0x1e0 [ 85.079489][ T65] hci_le_meta_evt+0x34a/0x5f0 [ 85.079501][ T65] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 85.079520][ T65] hci_event_packet+0x51c/0xcd0 [ 85.079537][ T65] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 85.079549][ T65] ? __pfx_hci_event_packet+0x10/0x10 [ 85.079569][ T65] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.079584][ T65] hci_rx_work+0x451/0xfc0 [ 85.079603][ T65] process_one_work+0xac7/0x1b10 [ 85.079626][ T65] ? __pfx_process_one_work+0x10/0x10 [ 85.079642][ T65] ? lock_acquire+0x1d1/0x380 [ 85.079657][ T65] ? __pfx_hci_rx_work+0x10/0x10 [ 85.079675][ T65] worker_thread+0x5ef/0xe50 [ 85.079696][ T65] ? kthread+0x13a/0x450 [ 85.079710][ T65] ? __pfx_worker_thread+0x10/0x10 [ 85.079725][ T65] kthread+0x373/0x450 [ 85.079739][ T65] ? __pfx_kthread+0x10/0x10 [ 85.079756][ T65] ret_from_fork+0x730/0xd60 [ 85.079768][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 85.079781][ T65] ? __switch_to+0x800/0x10f0 [ 85.079796][ T65] ? __pfx_kthread+0x10/0x10 [ 85.079811][ T65] ret_from_fork_asm+0x1a/0x30 [ 85.079831][ T65] [ 85.081673][ T65] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 85.081699][ T65] Bluetooth: hci1: failed to register connection device [ 85.273584][ T42] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 85.302255][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 85.424853][ T65] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 85.424933][ T65] Bluetooth: hci3: Injecting HCI hardware error event [ 85.425874][ T65] Bluetooth: hci3: hardware error 0x00 [ 85.442598][ T42] usb 8-1: Using ep0 maxpacket: 8 [ 85.443906][ T42] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.452218][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 85.453682][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 85.455150][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 85.455169][ T9] usb 7-1: config 179 has no interface number 0 [ 85.455199][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 85.455220][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 85.455241][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.455260][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 85.455282][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 85.455314][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.457822][ T42] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.457849][ T42] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.457867][ T42] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.457893][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.464586][ T7607] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 85.470783][ T42] usb 8-1: config 0 descriptor?? [ 85.702475][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input13 [ 85.885955][ T42] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 85.886012][ T42] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 85.886046][ T42] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 85.886059][ T42] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 85.886071][ T42] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 85.886387][ T42] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 85.919052][ T9] usb 7-1: USB disconnect, device number 6 [ 85.919164][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.919186][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 86.084063][ T50] usb 8-1: USB disconnect, device number 12 [ 86.124324][ T7645] __nla_validate_parse: 4 callbacks suppressed [ 86.124551][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 86.496597][ T7667] loop0: detected capacity change from 0 to 128 [ 86.507978][ T9] usb 5-1: USB disconnect, device number 7 [ 86.569447][ T7667] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.723864][ T7684] lo speed is unknown, defaulting to 1000 [ 86.936749][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 86.990816][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'. [ 87.018125][ T7706] FAULT_INJECTION: forcing a failure. [ 87.018125][ T7706] name failslab, interval 1, probability 0, space 0, times 0 [ 87.018176][ T7706] CPU: 3 UID: 0 PID: 7706 Comm: syz.4.618 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.018206][ T7706] Tainted: [L]=SOFTLOCKUP [ 87.018211][ T7706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.018219][ T7706] Call Trace: [ 87.018223][ T7706] [ 87.018228][ T7706] dump_stack_lvl+0x100/0x190 [ 87.018260][ T7706] should_fail_ex.cold+0x5/0xa [ 87.018276][ T7706] should_failslab+0xc2/0x120 [ 87.018293][ T7706] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 87.018307][ T7706] ? debugfs_create_symlink+0x29/0x1f0 [ 87.018327][ T7706] kstrdup+0x51/0xe0 [ 87.018344][ T7706] debugfs_create_symlink+0x29/0x1f0 [ 87.018359][ T7706] ref_tracker_dir_symlink+0x257/0x3b0 [ 87.018374][ T7706] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 87.018400][ T7706] ? rcu_is_watching+0x13/0xc0 [ 87.018415][ T7706] ? ida_alloc_range+0x70d/0x830 [ 87.018432][ T7706] ? kfree+0x1e5/0x6d0 [ 87.018446][ T7706] ? xas_nomem+0x189/0x2c0 [ 87.018461][ T7706] ? __pfx_net_ns_net_init+0x10/0x10 [ 87.018478][ T7706] net_ns_net_init+0xd2/0x120 [ 87.018490][ T7706] ops_init+0x1e2/0x5f0 [ 87.018518][ T7706] setup_net+0x118/0x3a0 [ 87.018535][ T7706] ? __pfx_setup_net+0x10/0x10 [ 87.018552][ T7706] copy_net_ns+0x345/0x7a0 [ 87.018567][ T7706] create_new_namespaces+0x3ea/0xac0 [ 87.018585][ T7706] unshare_nsproxy_namespaces+0xf2/0x220 [ 87.018600][ T7706] ksys_unshare+0x4a2/0xa70 [ 87.018614][ T7706] ? __pfx_ksys_unshare+0x10/0x10 [ 87.018633][ T7706] __x64_sys_unshare+0x31/0x40 [ 87.018647][ T7706] do_syscall_64+0x123/0x790 [ 87.018661][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.018673][ T7706] RIP: 0033:0x7feae399e159 [ 87.018682][ T7706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.018693][ T7706] RSP: 002b:00007feae1bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.018704][ T7706] RAX: ffffffffffffffda RBX: 00007feae3c25fa0 RCX: 00007feae399e159 [ 87.018711][ T7706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062000000 [ 87.018718][ T7706] RBP: 00007feae3a35024 R08: 0000000000000000 R09: 0000000000000000 [ 87.018724][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.018730][ T7706] R13: 00007feae3c26038 R14: 00007feae3c25fa0 R15: 00007ffc8f718968 [ 87.018745][ T7706] [ 87.038325][ T7706] lo speed is unknown, defaulting to 1000 [ 87.118263][ T7715] syzkaller0: entered promiscuous mode [ 87.118329][ T7715] syzkaller0: entered allmulticast mode [ 87.126082][ T7715] tipc: Enabled bearer , priority 0 [ 87.129236][ T7714] tipc: Resetting bearer [ 87.164589][ T7714] tipc: Disabling bearer [ 87.502217][ T65] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 87.524014][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 87.532291][ T35] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 87.552516][ T7735] gretap0: entered promiscuous mode [ 87.555352][ T7735] macvlan2: entered allmulticast mode [ 87.555724][ T7735] gretap0: entered allmulticast mode [ 87.582227][ T62] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 87.611533][ T7737] lo speed is unknown, defaulting to 1000 [ 87.702230][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 87.704675][ T35] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 87.709172][ T35] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.713530][ T35] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.716874][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.719057][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.723843][ T35] usb 8-1: config 0 descriptor?? [ 87.735728][ T62] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.743472][ T62] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.746701][ T62] usb 5-1: config 1 has an invalid descriptor of length 83, skipping remainder of the config [ 87.746717][ T62] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.746744][ T62] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 252, setting to 64 [ 87.749764][ T7742] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 87.762860][ T62] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.767077][ T62] usb 5-1: Product: syz [ 87.767184][ T62] usb 5-1: Manufacturer: syz [ 87.778092][ T62] cdc_wdm 5-1:1.0: skipping garbage [ 87.780019][ T62] cdc_wdm 5-1:1.0: skipping garbage [ 87.782007][ T7742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28777 sclass=netlink_route_socket pid=7742 comm=syz.4.634 [ 87.786317][ T62] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 87.789646][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 87.933750][ T7754] overlayfs: conflicting options: nfs_export=on,index=off [ 88.147347][ T35] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 88.151662][ T35] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 88.151749][ T35] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 88.151776][ T35] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 88.151802][ T35] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 88.152320][ T35] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 88.207946][ T7774] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 88.207999][ T7774] overlayfs: missing 'lowerdir' [ 88.334253][ T25] usb 8-1: USB disconnect, device number 13 [ 88.353597][ T7779] Bluetooth: MGMT ver 1.23 [ 88.359361][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.360463][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.494932][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 88.501805][ T7783] macvlan3: entered allmulticast mode [ 88.604691][ T7788] affs: No valid root block on device nullb0 [ 88.963537][ T7798] input: syz0 as /devices/virtual/input/input14 [ 89.055616][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 89.055706][ T43] audit: type=1400 audit(1788549996.743:558): avc: denied { write } for pid=7797 comm="syz.2.654" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.064110][ T43] audit: type=1400 audit(1788549996.753:559): avc: granted { setsecparam } for pid=7804 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 89.064392][ T7798] netlink: 64 bytes leftover after parsing attributes in process `syz.2.654'. [ 89.067556][ T43] audit: type=1400 audit(1788549996.753:560): avc: denied { mount } for pid=7797 comm="syz.2.654" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 89.188156][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 89.295175][ T7827] team_slave_1: entered promiscuous mode [ 89.443539][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 89.458287][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.608265][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 89.614002][ T7857] macvlan4: entered allmulticast mode [ 89.647444][ T43] audit: type=1400 audit(1788549997.333:561): avc: denied { create } for pid=7859 comm="syz.4.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 89.952251][ T5505] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 89.992553][ T1043] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 90.102214][ T5505] usb 7-1: Using ep0 maxpacket: 8 [ 90.102683][ T5505] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 90.103469][ T5505] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.103484][ T5505] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.103496][ T5505] usb 7-1: config 0 interface 0 has no altsetting 0 [ 90.103510][ T5505] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.106358][ T5505] usb 7-1: config 0 descriptor?? [ 90.110847][ T7824] team_slave_1: left promiscuous mode [ 90.127034][ T1043] usb 9-1: device descriptor read/64, error -71 [ 90.263829][ T43] audit: type=1400 audit(1788549997.953:562): avc: denied { mount } for pid=7899 comm="syz.3.677" name="/" dev="rpc_pipefs" ino=21814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 90.337493][ T9] usb 5-1: USB disconnect, device number 8 [ 90.372260][ T1043] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 90.406362][ T43] audit: type=1400 audit(1788549998.093:563): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 90.448426][ T43] audit: type=1400 audit(1788549998.133:564): avc: denied { create } for pid=7905 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.450522][ T43] audit: type=1400 audit(1788549998.133:565): avc: denied { connect } for pid=7905 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.512503][ T1043] usb 9-1: device descriptor read/64, error -71 [ 90.542536][ T5505] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 90.564364][ T43] audit: type=1400 audit(1788549998.253:566): avc: denied { read } for pid=7903 comm="syz.0.678" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 90.564505][ T43] audit: type=1400 audit(1788549998.253:567): avc: denied { open } for pid=7903 comm="syz.0.678" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 90.622599][ T1043] usb usb9-port1: attempt power cycle [ 90.753144][ T35] usb 7-1: USB disconnect, device number 7 [ 90.824264][ T7923] macvlan7: entered allmulticast mode [ 90.962330][ T1043] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 90.982852][ T1043] usb 9-1: device descriptor read/8, error -71 [ 91.232250][ T1043] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 91.263324][ T1043] usb 9-1: device descriptor read/8, error -71 [ 91.382461][ T1043] usb usb9-port1: unable to enumerate USB device [ 92.052249][ T5806] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 92.182301][ T5806] usb 5-1: device descriptor read/64, error -71 [ 92.257123][ T7992] CIFS: Attempting to mount //127.0.0.1/share [ 92.263216][ T7992] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.263369][ T7992] CIFS: VFS: cifs_mount failed w/return code = -101 [ 92.264927][ T7992] CIFS: Attempting to mount //127.0.0.1/share [ 92.265349][ T7992] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.265378][ T7992] CIFS: VFS: cifs_mount failed w/return code = -101 [ 92.266981][ T7992] CIFS: Attempting to mount //127.0.0.1/share [ 92.267230][ T7992] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.267247][ T7992] CIFS: VFS: cifs_mount failed w/return code = -101 [ 92.267504][ T7992] CIFS: Attempting to mount //127.0.0.1/share [ 92.267936][ T7992] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.267951][ T7992] CIFS: VFS: cifs_mount failed w/return code = -101 [ 92.268222][ T7992] CIFS: Attempting to mount //127.0.0.1/share [ 92.270499][ T7992] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.270517][ T7992] CIFS: VFS: cifs_mount failed w/return code = -101 [ 92.270789][ T7992] CIFS: Attempting to mount //127.0.0.1/share [ 92.271004][ T7992] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.271019][ T7992] CIFS: VFS: cifs_mount failed w/return code = -101 [ 92.271472][ T7992] CIFS: Attempting to mount //127.0.0.1/share [ 92.271671][ T7992] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.271685][ T7992] CIFS: VFS: cifs_mount failed w/return code = -101 [ 92.271930][ T7992] CIFS: Attempting to mount //127.0.0.1/share [ 92.273808][ T7992] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.273827][ T7992] CIFS: VFS: cifs_mount failed w/return code = -101 [ 92.274100][ T7992] CIFS: Attempting to mount //127.0.0.1/share [ 92.274311][ T7992] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.274326][ T7992] CIFS: VFS: cifs_mount failed w/return code = -101 [ 92.274605][ T7992] CIFS: Attempting to mount //127.0.0.1/share [ 92.274819][ T7992] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.274834][ T7992] CIFS: VFS: cifs_mount failed w/return code = -101 [ 92.284858][ T7970] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input15 [ 92.422395][ T5806] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.428691][ T8001] input: syz0 as /devices/virtual/input/input16 [ 92.547292][ T8007] syzkaller0: entered promiscuous mode [ 92.547368][ T8007] syzkaller0: entered allmulticast mode [ 92.549227][ T8007] tipc: Enabled bearer , priority 0 [ 92.551623][ T8006] tipc: Resetting bearer [ 92.552262][ T5806] usb 5-1: device descriptor read/64, error -71 [ 92.561494][ T8006] tipc: Disabling bearer [ 92.662593][ T5806] usb usb5-port1: attempt power cycle [ 92.719680][ T8009] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4240390349 (8480780698 ns) > initial count (422248798 ns). Using initial count to start timer. [ 92.726175][ T8009] kvm [8008]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 92.726828][ T8009] kvm [8008]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 92.946027][ T8024] loop3: detected capacity change from 0 to 7 [ 92.946451][ T8024] loop3: p1 p4 [ 92.946463][ T8024] loop3: partition table partially beyond EOD, truncated [ 92.988155][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 92.989272][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 93.004481][ T5806] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 93.019514][ T8032] __nla_validate_parse: 1 callbacks suppressed [ 93.021681][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'. [ 93.024676][ T5806] usb 5-1: device descriptor read/8, error -71 [ 93.037996][ T8032] macvlan5: entered allmulticast mode [ 93.127052][ T8040] ip6t_srh: unknown srh match flags 4015 [ 93.262351][ T5806] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 93.266695][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.735'. [ 93.282714][ T5806] usb 5-1: device descriptor read/8, error -71 [ 93.365521][ T8056] syzkaller0: entered promiscuous mode [ 93.365590][ T8056] syzkaller0: entered allmulticast mode [ 93.394134][ T5806] usb usb5-port1: unable to enumerate USB device [ 94.763159][ T8091] loop3: detected capacity change from 0 to 7 [ 94.763995][ T8091] loop3: p1 p4 [ 94.764016][ T8091] loop3: partition table partially beyond EOD, truncated [ 94.814532][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 94.814829][ T5747] udevd[5747]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 94.825604][ T8096] macvlan8: entered allmulticast mode [ 94.830730][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 94.887179][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 94.887485][ T43] audit: type=1400 audit(1788550002.573:579): avc: denied { setattr } for pid=8101 comm="syz.2.755" name="SCO" dev="sockfs" ino=22599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.021852][ T8123] syzkaller0: entered promiscuous mode [ 95.021917][ T8123] syzkaller0: entered allmulticast mode [ 95.025660][ T8123] tipc: Enabled bearer , priority 0 [ 95.027306][ T8121] tipc: Resetting bearer [ 95.058949][ T8121] tipc: Disabling bearer [ 95.197492][ T8128] syzkaller1: entered promiscuous mode [ 95.197558][ T8128] syzkaller1: entered allmulticast mode [ 95.222208][ T5505] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 95.225014][ T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 95.227049][ T43] audit: type=1400 audit(1788550002.913:580): avc: denied { setopt } for pid=8142 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.265944][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 95.372267][ T5505] usb 5-1: Using ep0 maxpacket: 8 [ 95.373224][ T5505] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 95.374224][ T5505] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.374245][ T5505] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.374262][ T5505] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.374283][ T5505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.383457][ T5505] usb 5-1: config 0 descriptor?? [ 95.498013][ T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 95.522872][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 95.793929][ T5505] hid_parser_main: 5 callbacks suppressed [ 95.794005][ T5505] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 95.794036][ T5505] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 95.794064][ T5505] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 95.794090][ T5505] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 95.794116][ T5505] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 95.794466][ T5505] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 95.993168][ T25] usb 5-1: USB disconnect, device number 13 [ 96.003153][ T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 96.042783][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 96.206226][ T43] audit: type=1400 audit(1788550003.893:581): avc: denied { execute } for pid=8150 comm="syz.2.771" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 96.309123][ T8155] loop3: detected capacity change from 0 to 7 [ 96.313795][ T8155] loop3: p1 p4 [ 96.313839][ T8155] loop3: partition table partially beyond EOD, truncated [ 96.332420][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 96.332917][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 96.354845][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 96.359284][ T8157] macvlan9: entered allmulticast mode [ 96.421495][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 96.499387][ T43] audit: type=1400 audit(1788550004.183:582): avc: denied { getopt } for pid=8162 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.502644][ T43] audit: type=1400 audit(1788550004.183:583): avc: denied { accept } for pid=8162 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.644789][ T43] audit: type=1400 audit(1788550004.333:584): avc: denied { setopt } for pid=8174 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.646032][ T43] audit: type=1400 audit(1788550004.333:585): avc: denied { read } for pid=8174 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.104795][ T8188] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 97.585942][ T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 97.634838][ T8213] loop3: detected capacity change from 0 to 7 [ 97.665008][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 97.712706][ T8213] loop3: p1 p4 [ 97.712741][ T8213] loop3: partition table partially beyond EOD, truncated [ 97.753973][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 97.754811][ T5747] udevd[5747]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 97.789066][ T43] audit: type=1400 audit(1788550005.473:586): avc: denied { write } for pid=8262 comm="syz.2.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.982279][ T62] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 98.065766][ T8133] ceph: No mds server is up or the cluster is laggy [ 98.065834][ T8128] ceph: No mds server is up or the cluster is laggy [ 98.142314][ T62] usb 8-1: Using ep0 maxpacket: 8 [ 98.143164][ T62] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 98.144619][ T62] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.144642][ T62] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.144658][ T62] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.144683][ T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.147522][ T62] usb 8-1: config 0 descriptor?? [ 98.403762][ T8273] syzkaller0: entered promiscuous mode [ 98.403798][ T8273] syzkaller0: entered allmulticast mode [ 98.405940][ T8273] tipc: Enabled bearer , priority 0 [ 98.431297][ T8272] tipc: Resetting bearer [ 98.433913][ T65] Bluetooth: hci2: link tx timeout [ 98.433981][ T65] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 98.468869][ T8272] tipc: Disabling bearer [ 98.559434][ T62] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 98.559510][ T62] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 98.559587][ T62] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 98.559624][ T62] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 98.559660][ T62] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 98.560721][ T62] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 98.578827][ T43] audit: type=1400 audit(1788550006.263:587): avc: denied { mmap_zero } for pid=8285 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 98.613223][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 98.758223][ T62] usb 8-1: USB disconnect, device number 14 [ 98.960494][ T8309] capability: warning: `syz.4.809' uses 32-bit capabilities (legacy support in use) [ 99.016147][ T8315] loop3: detected capacity change from 0 to 7 [ 99.018091][ T8315] loop3: p1 p4 [ 99.018105][ T8315] loop3: partition table partially beyond EOD, truncated [ 99.049531][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 99.051583][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 99.078457][ T8319] netlink: 'syz.4.813': attribute type 12 has an invalid length. [ 99.218893][ T8328] syzkaller0: entered promiscuous mode [ 99.218973][ T8328] syzkaller0: entered allmulticast mode [ 99.235007][ T8328] tipc: Enabled bearer , priority 0 [ 99.240314][ T8327] tipc: Resetting bearer [ 99.250670][ T8327] tipc: Disabling bearer [ 99.254315][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 99.363652][ T43] audit: type=1400 audit(1788550007.043:588): avc: denied { getopt } for pid=8339 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.499294][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 99.502792][ T8358] macvlan10: entered allmulticast mode [ 99.632389][ T35] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 99.680999][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.3.831'. [ 99.792417][ T35] usb 9-1: Using ep0 maxpacket: 16 [ 99.793089][ T35] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 99.793933][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.793949][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.793961][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.793980][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.797121][ T35] usb 9-1: config 0 descriptor?? [ 100.020759][ T8386] loop3: detected capacity change from 0 to 7 [ 100.024797][ T8386] loop3: p1 p4 [ 100.024811][ T8386] loop3: partition table partially beyond EOD, truncated [ 100.049764][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 100.058860][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 100.215353][ T35] input: HID 0955:7214 Haptics as /devices/virtual/input/input18 [ 100.247991][ T35] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 100.248257][ T35] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 100.372201][ T30] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 100.410420][ T8347] netlink: 504 bytes leftover after parsing attributes in process `syz.4.821'. [ 100.411786][ T42] usb 9-1: USB disconnect, device number 7 [ 100.425048][ T35] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 100.425109][ T35] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 100.425218][ T35] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 100.425277][ T35] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 100.463860][ T5742] Bluetooth: hci2: command 0x0406 tx timeout [ 100.541824][ T30] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.542828][ T30] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 100.542851][ T30] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.542863][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.542876][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.542889][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.542908][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.544467][ T30] usb 8-1: config 0 descriptor?? [ 100.544935][ T8390] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.733109][ T8396] syzkaller0: entered promiscuous mode [ 100.733209][ T8396] syzkaller0: entered allmulticast mode [ 100.738607][ T8396] tipc: Enabled bearer , priority 0 [ 100.741554][ T8395] tipc: Resetting bearer [ 100.754277][ T8395] tipc: Disabling bearer [ 100.777806][ T8390] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 100.778182][ T8390] batman_adv: batadv0: Adding interface: gretap1 [ 100.778190][ T8390] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.778204][ T8390] batman_adv: batadv0: Interface activated: gretap1 [ 100.896698][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.847'. [ 100.900137][ T8410] Invalid argument reading file caps for ./file0 [ 100.998713][ T30] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 101.024138][ T30] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 101.232283][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 101.276005][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 101.276081][ T43] audit: type=1400 audit(1788550008.963:599): avc: denied { mounton } for pid=8389 comm="syz.3.838" path="/221/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 101.281009][ T8440] loop3: detected capacity change from 0 to 7 [ 101.283538][ T8440] loop3: p1 p4 [ 101.283552][ T8440] loop3: partition table partially beyond EOD, truncated [ 101.289666][ T50] usb 8-1: USB disconnect, device number 15 [ 101.311379][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.319218][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 101.366035][ T8442] netlink: 'syz.0.861': attribute type 29 has an invalid length. [ 101.370114][ T8442] netlink: 'syz.0.861': attribute type 3 has an invalid length. [ 101.371805][ T8442] netlink: 76 bytes leftover after parsing attributes in process `syz.0.861'. [ 101.472504][ T8450] syzkaller0: entered promiscuous mode [ 101.472542][ T8450] syzkaller0: entered allmulticast mode [ 101.476023][ T8450] tipc: Enabled bearer , priority 0 [ 101.480809][ T8449] tipc: Resetting bearer [ 101.499707][ T8449] tipc: Disabling bearer [ 101.509065][ T43] audit: type=1400 audit(1788550009.193:600): avc: denied { ioctl } for pid=8451 comm="syz.0.865" path="socket:[22514]" dev="sockfs" ino=22514 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.568308][ T43] audit: type=1400 audit(1788550009.253:601): avc: denied { setopt } for pid=8454 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.739025][ T43] audit: type=1400 audit(1788550009.423:602): avc: denied { create } for pid=8464 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 101.785090][ T43] audit: type=1400 audit(1788550009.473:603): avc: denied { unlink } for pid=8466 comm="syz.0.872" name="#7" dev="tmpfs" ino=892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.012635][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 102.021091][ T8489] macvlan8: entered allmulticast mode [ 102.063161][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 102.101636][ T8503] loop3: detected capacity change from 0 to 7 [ 102.101921][ T8491] sock: sock_timestamping_bind_phc: sock not bind to device [ 102.108469][ T8503] loop3: p1 p4 [ 102.108514][ T8503] loop3: partition table partially beyond EOD, truncated [ 102.135966][ T5136] loop3: p1 p4 [ 102.136054][ T5136] loop3: partition table partially beyond EOD, truncated [ 102.154530][ T8506] netlink: 'syz.0.888': attribute type 30 has an invalid length. [ 102.202488][ T7535] udevd[7535]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 102.209329][ T8510] netlink: 'syz.0.888': attribute type 30 has an invalid length. [ 102.209485][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 102.267922][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 102.274765][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 102.328769][ T8516] syzkaller0: entered promiscuous mode [ 102.328841][ T8516] syzkaller0: entered allmulticast mode [ 102.332678][ T8516] tipc: Enabled bearer , priority 0 [ 102.334415][ T8515] tipc: Resetting bearer [ 102.392663][ T8515] tipc: Disabling bearer [ 102.609914][ T43] audit: type=1400 audit(1788550010.293:604): avc: denied { setopt } for pid=8543 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.625858][ T43] audit: type=1400 audit(1788550010.313:605): avc: denied { getopt } for pid=8543 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.733083][ T8554] vlan2: entered promiscuous mode [ 102.733153][ T8554] hsr0: entered promiscuous mode [ 102.733378][ T8554] vlan2: entered allmulticast mode [ 102.733388][ T8554] hsr0: entered allmulticast mode [ 102.733395][ T8554] hsr_slave_0: entered allmulticast mode [ 102.733402][ T8554] hsr_slave_1: entered allmulticast mode [ 102.747221][ T8554] hsr_slave_0: left promiscuous mode [ 102.749929][ T8554] hsr_slave_1: left promiscuous mode [ 103.125888][ T8567] macvlan3: entered allmulticast mode [ 103.173130][ T8571] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 103.333735][ T8585] syzkaller0: entered promiscuous mode [ 103.333784][ T8585] syzkaller0: entered allmulticast mode [ 103.341642][ T8585] tipc: Started in network mode [ 103.341682][ T8585] tipc: Node identity dee7deed4cbc, cluster identity 4711 [ 103.341888][ T8585] tipc: Enabled bearer , priority 0 [ 103.355039][ T8584] tipc: Resetting bearer [ 103.360555][ T8583] ======================================================= [ 103.360555][ T8583] WARNING: The mand mount option has been deprecated and [ 103.360555][ T8583] and is ignored by this kernel. Remove the mand [ 103.360555][ T8583] option from the mount to silence this warning. [ 103.360555][ T8583] ======================================================= [ 103.382080][ T8584] tipc: Disabling bearer [ 103.462628][ T25] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 103.598710][ T8603] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 103.612665][ T25] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 103.618052][ T25] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 103.618146][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.627143][ T25] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 103.627182][ T25] usb 8-1: Manufacturer: syz [ 103.635403][ T25] usb 8-1: config 0 descriptor?? [ 103.684520][ T25] rc_core: IR keymap rc-hauppauge not found [ 103.684550][ T25] Registered IR keymap rc-empty [ 103.689157][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 103.695374][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input21 [ 103.796545][ T8611] block nbd4: NBD_DISCONNECT [ 103.844810][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.851320][ T43] audit: type=1400 audit(1788550011.533:606): avc: denied { map } for pid=8575 comm="syz.3.910" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 103.868034][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.887769][ T8620] __nla_validate_parse: 4 callbacks suppressed [ 103.889944][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'. [ 103.900545][ T8620] macvlan11: entered allmulticast mode [ 103.933193][ T62] usb 8-1: USB disconnect, device number 16 [ 104.136218][ T8628] capability: warning: `syz.2.929' uses deprecated v2 capabilities in a way that may be insecure [ 104.433595][ T43] audit: type=1400 audit(1788550013.123:607): avc: denied { write } for pid=8641 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.455261][ T8647] netlink: 18928 bytes leftover after parsing attributes in process `syz.4.936'. [ 104.458379][ T8648] netlink: 18928 bytes leftover after parsing attributes in process `syz.4.936'. [ 104.534866][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 104.603547][ T8660] loop3: detected capacity change from 0 to 7 [ 104.608331][ T8660] loop3: p1 p4 [ 104.610094][ T8660] loop3: partition table partially beyond EOD, truncated [ 104.648895][ T7535] udevd[7535]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 104.649302][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 104.700104][ T8671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.946'. [ 104.736770][ T43] audit: type=1400 audit(1788550013.423:608): avc: denied { ioctl } for pid=8673 comm="syz.4.947" path="socket:[25828]" dev="sockfs" ino=25828 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.797485][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 104.808896][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 104.815817][ T8678] macvlan4: entered allmulticast mode [ 104.824011][ T8680] evm: overlay not supported [ 105.080699][ T8693] fuse: Bad value for 'fd' [ 105.103849][ T8693] size and base must be multiples of 4 kiB [ 105.103901][ T8693] CPU: 0 UID: 0 PID: 8693 Comm: syz.2.956 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.103927][ T8693] Tainted: [L]=SOFTLOCKUP [ 105.103932][ T8693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.103939][ T8693] Call Trace: [ 105.103943][ T8693] [ 105.103948][ T8693] dump_stack_lvl+0x100/0x190 [ 105.103977][ T8693] mtrr_add.cold+0x74/0x87 [ 105.103991][ T8693] mtrr_ioctl+0x25a/0xcf0 [ 105.104003][ T8693] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 105.104020][ T8693] ? __pfx_mtrr_ioctl+0x10/0x10 [ 105.104031][ T8693] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 105.104045][ T8693] ? __fget_files+0x34/0x3d0 [ 105.104064][ T8693] ? __pfx_mtrr_ioctl+0x10/0x10 [ 105.104075][ T8693] proc_reg_unlocked_ioctl+0x229/0x320 [ 105.104091][ T8693] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 105.104108][ T8693] __x64_sys_ioctl+0x18e/0x210 [ 105.104127][ T8693] do_syscall_64+0x123/0x790 [ 105.104146][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.104169][ T8693] RIP: 0033:0x7f08fc39e159 [ 105.104181][ T8693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.104192][ T8693] RSP: 002b:00007f08fd1c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.104204][ T8693] RAX: ffffffffffffffda RBX: 00007f08fc625fa0 RCX: 00007f08fc39e159 [ 105.104212][ T8693] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000006 [ 105.104219][ T8693] RBP: 00007f08fc435024 R08: 0000000000000000 R09: 0000000000000000 [ 105.104226][ T8693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.104232][ T8693] R13: 00007f08fc626038 R14: 00007f08fc625fa0 R15: 00007ffc04be6bb8 [ 105.104247][ T8693] [ 105.105134][ T8693] jffs2: notice: (8693) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 105.105775][ T30] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 105.272946][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 105.277277][ T30] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 105.283494][ T30] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.283560][ T30] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.283593][ T30] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.283624][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.285957][ T30] usb 9-1: config 0 descriptor?? [ 105.413033][ T8708] loop3: detected capacity change from 0 to 7 [ 105.413681][ T8708] loop3: p1 p4 [ 105.413692][ T8708] loop3: partition table partially beyond EOD, truncated [ 105.476660][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 105.481700][ T8714] netlink: 'syz.0.965': attribute type 1 has an invalid length. [ 105.485889][ T7535] udevd[7535]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 105.513871][ T8714] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.532947][ T8717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=8717 comm=syz.2.966 [ 105.539555][ T8714] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.543418][ T8714] bond2: (slave team0): Enslaving as a backup interface with an up link [ 105.555421][ T8714] bond2: (slave team0): Releasing backup interface [ 105.567170][ T8714] bridge_slave_0: left allmulticast mode [ 105.567210][ T8714] bridge_slave_0: left promiscuous mode [ 105.567348][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.599904][ T8714] bridge_slave_1: left allmulticast mode [ 105.599999][ T8714] bridge_slave_1: left promiscuous mode [ 105.600272][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.629550][ T8714] bond0: (slave bond_slave_0): Releasing backup interface [ 105.639088][ T8714] bond0: (slave bond_slave_1): Releasing backup interface [ 105.653210][ T8714] team0: Port device team_slave_0 removed [ 105.662292][ T8714] team0: Port device team_slave_1 removed [ 105.666388][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.666407][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.696319][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.696371][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.700122][ T30] hid_parser_main: 5 callbacks suppressed [ 105.700135][ T30] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 105.700149][ T30] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 105.700160][ T30] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 105.700172][ T30] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 105.700183][ T30] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 105.700501][ T30] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 105.773160][ T8726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.867270][ T8734] syzkaller0: entered promiscuous mode [ 105.867336][ T8734] syzkaller0: entered allmulticast mode [ 105.870496][ T8734] tipc: Enabled bearer , priority 0 [ 105.873785][ T8733] tipc: Resetting bearer [ 105.886973][ T8733] tipc: Disabling bearer [ 105.898046][ T30] usb 9-1: USB disconnect, device number 8 [ 106.070096][ T8748] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 106.073841][ T8748] jffs2: notice: (8748) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 106.266790][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'. [ 106.326895][ T8767] loop3: detected capacity change from 0 to 7 [ 106.328954][ T8767] loop3: p1 p4 [ 106.328967][ T8767] loop3: partition table partially beyond EOD, truncated [ 106.371942][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 106.374443][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 106.650918][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 106.650993][ T43] audit: type=1400 audit(1788550015.333:620): avc: denied { setattr } for pid=8782 comm="syz.4.992" name="RXRPC" dev="sockfs" ino=25894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.692035][ T43] audit: type=1400 audit(1788550015.373:621): avc: denied { write } for pid=8782 comm="syz.4.992" name="functions" dev="configfs" ino=10473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.701442][ T43] audit: type=1800 audit(1788550015.383:622): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.992" name="c_srate" dev="configfs" ino=25898 res=0 errno=0 [ 106.717273][ T43] audit: type=1400 audit(1788550015.403:623): avc: denied { bind } for pid=8790 comm="syz.2.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.977672][ T8803] syzkaller0: entered promiscuous mode [ 106.979579][ T8803] syzkaller0: entered allmulticast mode [ 106.983188][ T8803] tipc: Enabled bearer , priority 0 [ 106.986530][ T8802] tipc: Resetting bearer [ 107.069293][ T43] audit: type=1400 audit(1788550015.753:624): avc: denied { mounton } for pid=8806 comm="syz.3.1000" path="/proc/602/cgroup" dev="proc" ino=26633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 107.094085][ T8802] tipc: Disabling bearer [ 107.162829][ T43] audit: type=1400 audit(1788550015.853:625): avc: denied { watch } for pid=8813 comm="syz.3.1002" path="/241/bus" dev="tmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.162965][ T43] audit: type=1400 audit(1788550015.853:626): avc: denied { watch_sb watch_reads } for pid=8813 comm="syz.3.1002" path="/241/bus" dev="tmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.209213][ T8818] loop3: detected capacity change from 0 to 7 [ 107.211416][ T8818] loop3: p1 p4 [ 107.211490][ T8818] loop3: partition table partially beyond EOD, truncated [ 107.241446][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 107.245647][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 107.261208][ T8821] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1006'. [ 107.266307][ T8826] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1006'. [ 107.278998][ T8827] program syz.4.1005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.282023][ T8827] ata1.00: non-matching transfer count (-1459617280/0) [ 107.341161][ T8829] macvlan9: entered allmulticast mode [ 107.543960][ T8839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8839 comm=syz.4.1010 [ 107.677553][ T43] audit: type=1400 audit(1788550016.363:627): avc: denied { write } for pid=8847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.722214][ T5816] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 107.755825][ T43] audit: type=1400 audit(1788550016.443:628): avc: denied { write } for pid=8855 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.809329][ T5439] veth1_vlan: left promiscuous mode [ 107.872220][ T5816] usb 8-1: Using ep0 maxpacket: 8 [ 107.874460][ T5816] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 107.878366][ T5816] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.881676][ T5816] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.884675][ T5816] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 107.888351][ T5816] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 107.888377][ T5816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.917856][ T5816] hub 8-1:1.0: bad descriptor, ignoring hub [ 107.917892][ T5816] hub 8-1:1.0: probe with driver hub failed with error -5 [ 107.918157][ T5816] cdc_wdm 8-1:1.0: skipping garbage [ 107.918178][ T5816] cdc_wdm 8-1:1.0: skipping garbage [ 107.923581][ T43] audit: type=1400 audit(1788550016.613:629): avc: denied { write } for pid=8867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.936351][ T5816] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 107.938322][ T5816] cdc_wdm 8-1:1.0: Unknown control protocol [ 108.031205][ T5439] veth1_vlan: entered promiscuous mode [ 108.054239][ T8873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.393581][ T8844] usb 8-1: reset high-speed USB device number 17 using dummy_hcd [ 108.500318][ T8905] syzkaller0: entered promiscuous mode [ 108.500385][ T8905] syzkaller0: entered allmulticast mode [ 108.507051][ T8905] tipc: Enabled bearer , priority 0 [ 108.512367][ T8902] tipc: Resetting bearer [ 108.526197][ T8902] tipc: Disabling bearer [ 108.542273][ T8844] usb 8-1: device descriptor read/64, error -71 [ 108.624334][ T8914] loop3: detected capacity change from 0 to 7 [ 108.625269][ T8914] loop3: p1 p4 [ 108.625281][ T8914] loop3: partition table partially beyond EOD, truncated [ 108.663284][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.671285][ T7535] udevd[7535]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 108.793646][ T8922] macvlan1: entered allmulticast mode [ 108.822258][ T8844] usb 8-1: reset high-speed USB device number 17 using dummy_hcd [ 108.972950][ T8844] usb 8-1: device descriptor read/64, error -71 [ 109.212278][ T8844] usb 8-1: reset high-speed USB device number 17 using dummy_hcd [ 109.234712][ T8844] usb 8-1: device descriptor read/8, error -71 [ 109.482365][ T8844] usb 8-1: reset high-speed USB device number 17 using dummy_hcd [ 109.507774][ T8844] usb 8-1: device descriptor read/8, error -71 [ 109.601574][ T8935] ucma_write: process 799 (syz.2.1036) changed security contexts after opening file descriptor, this is not allowed. [ 109.613626][ T6601] usb 8-1: USB disconnect, device number 17 [ 109.616848][ T8844] cdc_wdm 8-1:1.0: Error autopm - -16 [ 109.753639][ T6601] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 109.790163][ T8939] __nla_validate_parse: 7 callbacks suppressed [ 109.790261][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 109.882219][ T6601] usb 8-1: device descriptor read/64, error -71 [ 109.963575][ T8954] netlink: Conntrack attr has 8 unknown bytes [ 109.963629][ T8954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.994395][ T8957] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 109.994503][ T8958] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 109.995213][ T8957] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1043'. [ 109.999357][ T8958] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1043'. [ 110.103931][ T8963] syzkaller0: entered promiscuous mode [ 110.103994][ T8963] syzkaller0: entered allmulticast mode [ 110.106917][ T8963] tipc: Enabled bearer , priority 0 [ 110.108734][ T8962] tipc: Resetting bearer [ 110.123273][ T8962] tipc: Disabling bearer [ 110.132202][ T6601] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 110.155296][ T8966] loop3: detected capacity change from 0 to 7 [ 110.156853][ T8966] loop3: p1 p4 [ 110.156865][ T8966] loop3: partition table partially beyond EOD, truncated [ 110.181700][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.182702][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 110.239895][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1050'. [ 110.270587][ T8973] ip6t_hbh: too many supported opts specified [ 110.273374][ T6601] usb 8-1: device descriptor read/64, error -71 [ 110.392439][ T6601] usb usb8-port1: attempt power cycle [ 110.533011][ T8990] xt_HMARK: spi-set and port-set can't be combined [ 110.547355][ T8990] xt_HMARK: spi-set and port-set can't be combined [ 110.572570][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 110.612389][ T5816] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 110.702315][ T25] usb 7-1: device descriptor read/64, error -71 [ 110.762305][ T5816] usb 9-1: Using ep0 maxpacket: 32 [ 110.763022][ T5816] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 110.764054][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 110.764071][ T5816] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.764083][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.764095][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.766390][ T5816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.766406][ T5816] usb 9-1: Product: syz [ 110.766414][ T5816] usb 9-1: Manufacturer: syz [ 110.766421][ T5816] usb 9-1: SerialNumber: syz [ 110.772604][ T5816] usb 9-1: config 0 descriptor?? [ 110.777064][ T8985] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 110.779377][ T5816] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input22 [ 110.943774][ T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 110.985535][ T5816] usb 9-1: USB disconnect, device number 9 [ 110.985583][ C3] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.022398][ T65] Bluetooth: hci0: command 0x0406 tx timeout [ 111.072227][ T25] usb 7-1: device descriptor read/64, error -71 [ 111.182574][ T25] usb usb7-port1: attempt power cycle [ 111.206946][ T9015] loop3: detected capacity change from 0 to 7 [ 111.210038][ T9015] loop3: p1 p4 [ 111.211814][ T9015] loop3: partition table partially beyond EOD, truncated [ 111.245100][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 111.247222][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 111.367306][ T9019] syzkaller0: entered promiscuous mode [ 111.367364][ T9019] syzkaller0: entered allmulticast mode [ 111.369789][ T9019] tipc: Enabled bearer , priority 0 [ 111.375039][ T9018] tipc: Resetting bearer [ 111.479167][ T9018] tipc: Disabling bearer [ 111.522194][ T25] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 111.527896][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 111.531722][ T9021] macvlan6: entered allmulticast mode [ 111.542594][ T25] usb 7-1: device descriptor read/8, error -71 [ 111.582334][ T9024] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 111.601144][ T9024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.625889][ T9024] bridge2: entered promiscuous mode [ 111.631981][ T9024] bond2: (slave bridge2): making interface the new active one [ 111.636593][ T9024] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 111.649257][ T9028] random: crng reseeded on system resumption [ 111.664881][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 111.664931][ T43] audit: type=1400 audit(1788550020.353:648): avc: denied { ioctl } for pid=9027 comm="syz.4.1072" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 111.675069][ T9028] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 111.706781][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 111.706852][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'. [ 111.706888][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 111.719561][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 111.719616][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'. [ 111.733162][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.737327][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.740337][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.743649][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.782260][ T25] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 111.802635][ T25] usb 7-1: device descriptor read/8, error -71 [ 111.911015][ T43] audit: type=1400 audit(1788550020.593:649): avc: denied { bpf } for pid=9045 comm="syz.3.1080" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.911410][ T43] audit: type=1400 audit(1788550020.593:650): avc: denied { perfmon } for pid=9045 comm="syz.3.1080" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.912903][ T25] usb usb7-port1: unable to enumerate USB device [ 112.011680][ T43] audit: type=1400 audit(1788550020.693:651): avc: denied { module_request } for pid=9051 comm="syz.3.1083" kmod="ip_vs_sip" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 112.015415][ T43] audit: type=1400 audit(1788550020.703:652): avc: denied { read } for pid=9051 comm="syz.3.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.049741][ T9052] IPVS: Scheduler module ip_vs_sip not found [ 112.133331][ T9060] netlink: 'syz.3.1085': attribute type 39 has an invalid length. [ 112.501295][ T9064] syzkaller0: entered promiscuous mode [ 112.501343][ T9064] syzkaller0: entered allmulticast mode [ 112.507385][ T9064] tipc: Enabled bearer , priority 0 [ 112.510440][ T9063] tipc: Resetting bearer [ 112.525833][ T9063] tipc: Disabling bearer [ 112.615908][ T9067] overlay: Unknown parameter 'appraise' [ 112.615965][ T9066] overlay: Unknown parameter 'appraise' [ 112.626559][ T9067] netlink: 'syz.4.1088': attribute type 11 has an invalid length. [ 112.626591][ T9066] netlink: 'syz.4.1088': attribute type 11 has an invalid length. [ 112.626621][ T9067] netlink: 'syz.4.1088': attribute type 7 has an invalid length. [ 112.626627][ T9066] netlink: 'syz.4.1088': attribute type 7 has an invalid length. [ 112.657754][ T9069] macvlan10: entered allmulticast mode [ 112.762238][ T43] audit: type=1400 audit(1788550021.443:653): avc: denied { accept } for pid=9076 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.972280][ T43] audit: type=1400 audit(1788550021.663:654): avc: denied { mounton } for pid=9089 comm="syz.4.1099" path="/197/dev/sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.972331][ T9094] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 112.983998][ T9094] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 113.282155][ T43] audit: type=1400 audit(1788550021.963:655): avc: denied { bind } for pid=9103 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.377270][ T9108] loop3: detected capacity change from 0 to 7 [ 113.381019][ T9108] loop3: p1 p4 [ 113.381086][ T9108] loop3: partition table partially beyond EOD, truncated [ 113.442813][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 113.443151][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 113.539468][ T9113] macvlan11: entered allmulticast mode [ 113.626387][ T43] audit: type=1400 audit(1788550022.313:656): avc: denied { write } for pid=9118 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.669388][ T9117] loop7: detected capacity change from 0 to 1 [ 113.713824][ T9125] xt_TPROXY: Can be used only with -p tcp or -p udp [ 113.729831][ T43] audit: type=1326 audit(1788550022.413:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9116 comm="syz.3.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc275b9e159 code=0x7ffc0000 [ 113.752949][ T9117] loop7: detected capacity change from 1 to 0 [ 113.766721][ T9128] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 113.766721][ T9128] The task syz.2.1113 (9128) triggered the difference, watch for misbehavior. [ 114.202233][ T1043] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 114.352286][ T1043] usb 8-1: Using ep0 maxpacket: 8 [ 114.353972][ T1043] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.355394][ T1043] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.355412][ T1043] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.355445][ T1043] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 114.355467][ T1043] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 114.355499][ T1043] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.367881][ T1043] hub 8-1:1.0: bad descriptor, ignoring hub [ 114.367895][ T1043] hub 8-1:1.0: probe with driver hub failed with error -5 [ 114.370989][ T1043] cdc_wdm 8-1:1.0: skipping garbage [ 114.370999][ T1043] cdc_wdm 8-1:1.0: skipping garbage [ 114.383351][ T1043] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 114.383386][ T1043] cdc_wdm 8-1:1.0: Unknown control protocol [ 115.060884][ T5816] usb 8-1: reset high-speed USB device number 21 using dummy_hcd [ 115.202220][ T5816] usb 8-1: device descriptor read/64, error -71 [ 115.453483][ T5816] usb 8-1: reset high-speed USB device number 21 using dummy_hcd [ 115.582230][ T5816] usb 8-1: device descriptor read/64, error -71 [ 115.646457][ T9181] __nla_validate_parse: 14 callbacks suppressed [ 115.646525][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 115.770334][ T9187] syzkaller0: entered promiscuous mode [ 115.770387][ T9187] syzkaller0: entered allmulticast mode [ 115.772624][ T9187] tipc: Enabled bearer , priority 0 [ 115.776518][ T9186] tipc: Resetting bearer [ 115.790124][ T9186] tipc: Disabling bearer [ 115.832270][ T5816] usb 8-1: reset high-speed USB device number 21 using dummy_hcd [ 115.853277][ T5816] usb 8-1: device descriptor read/8, error -71 [ 115.897169][ T9189] /dev/loop0: Can't open blockdev [ 116.014916][ T9174] ceph: No mds server is up or the cluster is laggy [ 116.093907][ T5816] usb 8-1: reset high-speed USB device number 21 using dummy_hcd [ 116.114817][ T5816] usb 8-1: device descriptor read/8, error -71 [ 116.205630][ T9200] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.206137][ T9200] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.224836][ T5816] usb 8-1: USB disconnect, device number 21 [ 116.233312][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 116.333390][ T9200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.344775][ T9200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.467044][ T9200] gretap0: left allmulticast mode [ 116.476538][ T9203] bridge0: port 3(syz_tun) entered blocking state [ 116.476622][ T9203] bridge0: port 3(syz_tun) entered disabled state [ 116.476714][ T9203] syz_tun: entered allmulticast mode [ 116.477654][ T9203] syz_tun: entered promiscuous mode [ 116.489046][ T9207] macvlan12: entered allmulticast mode [ 116.505223][ T9208] gretap0: left promiscuous mode [ 116.519289][ T9208] bridge0: port 3(syz_tun) entered blocking state [ 116.519475][ T9208] bridge0: port 3(syz_tun) entered forwarding state [ 116.522979][ T9208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.523745][ T9208] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.526380][ T9208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.544674][ T5816] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 116.555903][ T9208] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.556013][ T9208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.557483][ T9208] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.557534][ T9208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.565964][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.567569][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.574697][ T9208] veth0_vlan: left promiscuous mode [ 116.576194][ T9208] veth0_vlan: entered promiscuous mode [ 116.581008][ T9208] veth1_macvtap: left promiscuous mode [ 116.581814][ T9208] veth0_macvtap: left promiscuous mode [ 116.584871][ T9208] veth0_macvtap: entered promiscuous mode [ 116.586011][ T9208] veth1_macvtap: entered promiscuous mode [ 116.590747][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.594317][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.595466][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.596217][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.598221][ T9208] gretap0: entered promiscuous mode [ 116.598948][ T9208] gretap0: entered allmulticast mode [ 116.609438][ T9208] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 116.672217][ T5816] usb 8-1: device descriptor read/64, error -71 [ 116.713910][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 116.715618][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 116.715629][ T43] audit: type=1400 audit(1788550025.403:659): avc: denied { set_context_mgr } for pid=9212 comm="syz.4.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 116.716480][ T9213] binder: 9212:9213 ioctl 40107447 200000000180 returned -22 [ 116.909248][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 116.913300][ T5816] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 116.924018][ T9223] netlink: 'syz.4.1148': attribute type 34 has an invalid length. [ 116.924076][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 116.947829][ T9223] bond1: option lacp_strict: invalid value (110) [ 116.953358][ T9223] bond1 (unregistering): Released all slaves [ 117.053065][ T5816] usb 8-1: device descriptor read/64, error -71 [ 117.162303][ T5816] usb usb8-port1: attempt power cycle [ 117.211284][ T9251] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 117.222076][ T43] audit: type=1400 audit(1788550025.903:660): avc: denied { write } for pid=9250 comm="syz.4.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 117.842385][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 117.846719][ T9263] macvlan13: entered allmulticast mode [ 117.881273][ T9265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'. [ 118.527706][ T43] audit: type=1400 audit(1788550027.213:661): avc: denied { write } for pid=9277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.594829][ T43] audit: type=1400 audit(1788550027.283:662): avc: denied { write } for pid=9280 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.114009][ T9294] faux_driver vgem: [drm] Unknown color mode 11172; guessing buffer size. [ 119.207000][ T9302] syzkaller0: entered promiscuous mode [ 119.207059][ T9302] syzkaller0: entered allmulticast mode [ 119.209560][ T9302] tipc: Enabled bearer , priority 0 [ 119.933054][ T9301] tipc: Resetting bearer [ 119.952804][ T9301] tipc: Disabling bearer [ 120.070821][ T43] audit: type=1400 audit(1788550028.753:663): avc: denied { write } for pid=9308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.122855][ T43] audit: type=1400 audit(1788550028.803:664): avc: denied { write } for pid=9311 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.220885][ T9318] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 120.236642][ T9318] wg2: entered allmulticast mode [ 120.236728][ T9318] team0: Device wg2 is of different type [ 120.260990][ T43] audit: type=1400 audit(1788550028.943:665): avc: denied { write } for pid=9324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.314983][ T43] audit: type=1400 audit(1788550029.003:666): avc: denied { write } for pid=9330 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.410468][ T43] audit: type=1400 audit(1788550029.093:667): avc: denied { write } for pid=9333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.465143][ T43] audit: type=1400 audit(1788550029.153:668): avc: denied { write } for pid=9338 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.533004][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 120.682227][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 120.684656][ T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.688967][ T10] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.689003][ T10] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.689037][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 120.689066][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.707286][ T10] usb 8-1: config 0 descriptor?? [ 121.121019][ T10] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 121.126911][ T10] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 121.129444][ T10] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 121.132240][ T10] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 121.134683][ T10] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 121.137439][ T10] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 121.318551][ T1043] usb 8-1: USB disconnect, device number 25 [ 121.338511][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.342264][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.343491][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.348657][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.349771][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.559832][ T9379] loop3: detected capacity change from 0 to 7 [ 121.562639][ T9379] loop3: p1 p4 [ 121.562683][ T9379] loop3: partition table partially beyond EOD, truncated [ 121.581725][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 121.586925][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 121.631734][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1193'. [ 121.718072][ T9361] lo speed is unknown, defaulting to 1000 [ 122.543834][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 122.543914][ T43] audit: type=1400 audit(1788550031.233:676): avc: denied { create } for pid=9398 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.585291][ T43] audit: type=1400 audit(1788550031.273:677): avc: denied { bind } for pid=9398 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.594120][ T43] audit: type=1400 audit(1788550031.283:678): avc: denied { read } for pid=9398 comm="syz.2.1199" path="socket:[28285]" dev="sockfs" ino=28285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.644023][ T43] audit: type=1400 audit(1788550031.333:679): avc: denied { ioctl } for pid=9398 comm="syz.2.1199" path="socket:[28285]" dev="sockfs" ino=28285 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.654258][ T9399] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 122.675008][ T43] audit: type=1400 audit(1788550031.363:680): avc: denied { write } for pid=9398 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.923025][ T43] audit: type=1400 audit(1788550031.603:681): avc: denied { write } for pid=9431 comm="syz.2.1209" name="functions" dev="configfs" ino=10473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.944653][ T43] audit: type=1400 audit(1788550031.623:682): avc: denied { write } for pid=9431 comm="syz.2.1209" name="c.1" dev="configfs" ino=11332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.944731][ T43] audit: type=1400 audit(1788550031.623:683): avc: denied { write } for pid=9431 comm="syz.2.1209" name="c.1" dev="configfs" ino=11332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.982549][ T9444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1211'. [ 122.985793][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.986066][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.986132][ T9361] bridge_slave_0: entered allmulticast mode [ 122.986944][ T9361] bridge_slave_0: entered promiscuous mode [ 122.988904][ T9440] syzkaller0: entered promiscuous mode [ 122.988920][ T9440] syzkaller0: entered allmulticast mode [ 122.998206][ T9440] tipc: Enabled bearer , priority 0 [ 122.998322][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.998362][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.998532][ T9361] bridge_slave_1: entered allmulticast mode [ 122.999259][ T9361] bridge_slave_1: entered promiscuous mode [ 123.029123][ T9439] tipc: Resetting bearer [ 123.054016][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1212'. [ 123.054121][ T9447] netlink: 'syz.4.1212': attribute type 7 has an invalid length. [ 123.054728][ T9447] netlink: 'syz.4.1212': attribute type 8 has an invalid length. [ 123.054743][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 123.094491][ T9439] tipc: Disabling bearer [ 123.109188][ T9361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.111757][ T9361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.116509][ T9447] ip6gretap0: entered promiscuous mode [ 123.130276][ T9447] ip6gretap0: left promiscuous mode [ 123.133981][ T9434] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 123.137971][ T9434] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 123.141244][ T9434] CPU: 0 UID: 0 PID: 9434 Comm: syz.2.1209 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.144680][ T9434] Tainted: [L]=SOFTLOCKUP [ 123.146270][ T9434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.150425][ T9434] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 123.152932][ T9434] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 123.160635][ T9434] RSP: 0018:ffffc900201c7830 EFLAGS: 00010202 [ 123.162854][ T9434] RAX: dffffc0000000000 RBX: ffff88805a668158 RCX: 0000000000000000 [ 123.165379][ T9434] RDX: 00000000000000e6 RSI: ffffffff87f53a76 RDI: ffff88805a668128 [ 123.167877][ T9434] RBP: ffff88805a668150 R08: 0000000000000001 R09: 0000000000000000 [ 123.170431][ T9434] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000020 [ 123.173005][ T9434] R13: ffff88805a668128 R14: ffff8880595a1120 R15: ffff88805a668000 [ 123.175659][ T9434] FS: 00007f08fd1a56c0(0000) GS:ffff8880d5b60000(0000) knlGS:0000000000000000 [ 123.178714][ T9434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.180952][ T9434] CR2: 00007feae475da08 CR3: 000000003b5b7000 CR4: 0000000000352ef0 [ 123.183563][ T9434] Call Trace: [ 123.184670][ T9434] [ 123.185640][ T9434] ? f_midi2_unbind+0x146/0x800 [ 123.187223][ T9434] f_midi2_unbind+0x265/0x800 [ 123.188714][ T9434] ? __pfx_f_midi2_unbind+0x10/0x10 [ 123.190392][ T9434] purge_configs_funcs+0x285/0x510 [ 123.192034][ T9434] configfs_composite_bind+0xf2c/0x1960 [ 123.193766][ T9434] ? kernfs_create_link+0x1bd/0x240 [ 123.195411][ T9434] gadget_bind_driver+0x28c/0xbf0 [ 123.197553][ T9434] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 123.200069][ T9434] ? __pfx_gadget_bind_driver+0x10/0x10 [ 123.201942][ T9434] really_probe+0x241/0xa60 [ 123.203315][ T9434] __driver_probe_device+0x210/0x460 [ 123.204887][ T9434] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 123.206683][ T9434] driver_probe_device+0x4a/0x140 [ 123.208278][ T9434] __driver_attach+0x21f/0x5b0 [ 123.209791][ T9434] ? __pfx___driver_attach+0x10/0x10 [ 123.211542][ T9434] bus_for_each_dev+0x13e/0x1d0 [ 123.213098][ T9434] ? __pfx_bus_for_each_dev+0x10/0x10 [ 123.215108][ T9434] ? bus_add_driver+0x2b5/0x5b0 [ 123.216824][ T9434] bus_add_driver+0x305/0x5b0 [ 123.218460][ T9434] driver_register+0x1e2/0x360 [ 123.219994][ T9434] usb_gadget_register_driver_owner+0x132/0x210 [ 123.221995][ T9434] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 123.223883][ T9434] configfs_write_iter+0x302/0x4e0 [ 123.225500][ T9434] vfs_write+0x6af/0x1050 [ 123.226894][ T9434] ? __pfx_configfs_write_iter+0x10/0x10 [ 123.228791][ T9434] ? __pfx_vfs_write+0x10/0x10 [ 123.230309][ T9434] ? find_held_lock+0x2b/0x80 [ 123.231857][ T9434] ksys_write+0x12a/0x250 [ 123.233452][ T9434] ? __pfx_ksys_write+0x10/0x10 [ 123.235138][ T9434] do_syscall_64+0x123/0x790 [ 123.236773][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.238797][ T9434] RIP: 0033:0x7f08fc39e159 [ 123.240228][ T9434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.246764][ T9434] RSP: 002b:00007f08fd1a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.249699][ T9434] RAX: ffffffffffffffda RBX: 00007f08fc626090 RCX: 00007f08fc39e159 [ 123.252360][ T9434] RDX: 000000000000000b RSI: 0000200000000600 RDI: 000000000000000b [ 123.254794][ T9434] RBP: 00007f08fc435024 R08: 0000000000000000 R09: 0000000000000000 [ 123.257381][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.260257][ T9434] R13: 00007f08fc626128 R14: 00007f08fc626090 R15: 00007ffc04be6bb8 [ 123.263295][ T9434] [ 123.264632][ T9434] Modules linked in: [ 123.266622][ T9434] ---[ end trace 0000000000000000 ]--- [ 123.270423][ T9434] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 123.273003][ T9434] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 123.280453][ T9434] RSP: 0018:ffffc900201c7830 EFLAGS: 00010202 [ 123.283023][ T9434] RAX: dffffc0000000000 RBX: ffff88805a668158 RCX: 0000000000000000 [ 123.285738][ T9434] RDX: 00000000000000e6 RSI: ffffffff87f53a76 RDI: ffff88805a668128 [ 123.286963][ T9361] team0: Port device team_slave_0 added [ 123.287793][ T9361] team0: Port device team_slave_1 added [ 123.29190 ** replaying previous printk message ** [ 123.291906][ T9434] RBP: ffff88805a668150 R08: 0000000000000001 R09: 0000000000000000 [ 123.292059][ T9434] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000020 [ 123.292070][ T9434] R13: ffff88805a668128 R14: ffff8880595a1120 R15: ffff88805a668000 [ 123.292080][ T9434] FS: 00007f08fd1a56c0(0000) GS:ffff8880d5b60000(0000) knlGS:0000000000000000 [ 123.292300][ T9434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.292309][ T9434] CR2: 00007feae475da08 CR3: 000000003b5b7000 CR4: 0000000000352ef0 [ 123.292318][ T9434] Kernel panic - not syncing: Fatal exception [ 123.312064][ T9434] Kernel Offset: disabled [ 123.313651][ T9434] Rebooting in 86400 seconds..