last executing test programs: 2.561608253s ago: executing program 1 (id=341): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x498}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x40200, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = fanotify_init(0xf00, 0x0) fanotify_mark(r8, 0x1, 0x5000003a, r7, 0x0) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r9 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393) renameat2(r9, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r9, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r8, &(0x7f0000004fc0)={0x2020}, 0x2020) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, r3, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8893}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 2.490975402s ago: executing program 3 (id=345): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0x2, @rand_addr=0x64010100, 0xdffd, 0x1, 'none\x00', 0xc, 0x4, 0x3b}, {@local, 0x4ea4, 0x3, 0x8, 0x20000e2}}, 0x44) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000000)) 2.431221506s ago: executing program 3 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400001c}, 0x4491) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400007c", @ANYRES16=r3, @ANYBLOB="020025bd7000fbdbdf2531000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008045}, 0x4000000) 2.361680826s ago: executing program 3 (id=349): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r2, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000001c0)={0x3, 0x8, '\x00', 0x0, &(0x7f0000000180)=[0x0]}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000140)={0xf000000, 0x447, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x98091f, 0xb2, '\x00', @string=&(0x7f00000000c0)=0xff}}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r8, 0x6f50, 0x8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r9 = accept4(r4, 0x0, 0x0, 0x80800) syz_clone(0x4400, &(0x7f0000001740)="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", 0x1000, &(0x7f0000002740), &(0x7f0000002780), &(0x7f00000027c0)="d7cb2fa2e1d9bdcaf5fc8160c94799b4c3ea6d22a167112284d5a14624a91d7277ba8adc6822e07f21901b0d3e86c13d7d5d996fe22908597f0142892fbbb3d9fa3d0547c05be1ba55673d18dcf2c36933066f200bce5ad546f0a00206407719f2463466978b4486d2153c60f23e5f1ea9332f04fb1af84c53fc1f1f19f35670a37eb929ec929d6f919757a8955875face1c769bdecc225b258a107111f31417c9ae9cb6d7ac1aae5080b1fbcfec91322cd728d91561c9ccc8de4605356325d092c97d09a1fe92acf94f475c4fe052e1877ca0e15062") sendmmsg$alg(r9, &(0x7f0000005cc0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001480)="3825c622cff9f8506790807db275b839", 0x10}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x40) 1.680465238s ago: executing program 1 (id=363): syz_usb_connect(0x2, 0x3f, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000000040)) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xa, 0xf8c, 0x8, 0x10040, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x4, 0x2, 0x2, 0x9, @void, @value, @value=r1}, 0x50) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) finit_module(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0xfe0f, 0x0, 0x215}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x2d}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}, 0x1, 0xba01}, 0x0) 1.331951044s ago: executing program 3 (id=366): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="27538c99717d0b3a1bb409d22d"], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.331047173s ago: executing program 3 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mkdirat(0xffffffffffffff9c, 0x0, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000fcb000)=0xffffffff, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 1.261814406s ago: executing program 3 (id=368): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0x361c, 0x40, 0x2, 0x1bf}) close_range(r2, r2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = memfd_secret(0x80000) ftruncate(r4, 0x10) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x1, 0x401a, &(0x7f00000021c0)={{0x2, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) getgroups(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r9, &(0x7f0000000380), 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r10 = dup2(r7, 0xffffffffffffffff) write$cgroup_subtree(r10, &(0x7f00000002c0)={[{0x50, 'net_prio'}, {0x2b, 'rdma'}, {0x2b, 'net_prio'}, {0x2b, 'net_prio'}, {0x2b, 'memory'}, {0x2d, 'devices'}]}, 0x35) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x2, @pix_mp={0x7, 0x7, 0x34524742, 0x6, 0x0, [{0x4, 0x10}, {0x80000001, 0xffff}, {0xe, 0x3ff}, {0x1, 0x800000}, {0x2eb700, 0xf5}, {0x8, 0xd}, {0x9, 0x2}, {0x0, 0x1ff}], 0xf9, 0x0, 0x2, 0x0, 0x2}}) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000180)) 1.051788057s ago: executing program 1 (id=369): prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x24) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01080000040000000000000000010900010073797a310000000020000000020a01030000000000000000050000050900010073797a3100000000140000001100010000000000000000000200000aa5887dfb9d4a368c973abaaee851f1eca9c603a4c7f50f00f79b2c0b4c6ae1935102ea936a20d53426e65a47856dc5f78bb900a5f46dd016d3ea10abf65ae3fe831e3becb89b2ab1b52d8455e7668c0be8bdba924d194723d765b03c21d1bc864f795e57c0616cec686224ba75fafce7c602c1ff9cb5b6082963061a6c75bc1a3517bcea5b817a89ed912dc01f02eab3ef227b85e54bbec39e12075ea619816c5fcc874fbeea27e5d64bdc9d8ac6039df48112f2a1dbdf9559e5f6d12295006c94c3ef5a2067cefbcecc12db38d380cbfdc815200a17f24e173e191c1de6cecd66653241c9bdc611e6000000000000bece1cf3c2a2c9167099f71ddd2eb21e5ed464d1b45a97167f484660948aaac97ba4b4c2edd584d819b84405ec4ef78324e6e3b77d2c31aa43af8d1f6fd7db11d241dc9be2869574731d12f6659d2538cbd141aa3d5321e37f081c58e6ae8693ce1285cc630232ef9433e1f923df52eb9cae7a8027362d0901b877ac536369ed281e99ef283e2f6fdf9a541da8a212a126eb"], 0x68}, 0x1, 0x0, 0x0, 0xc821}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="c4c1f82f159900000066ba400066ed0f20d835080000000f22d80f09b8010000000f01d90f20e035000002000f22e0c4e1f951b800600000c4e1e958acfd0080000066bad004ed0f2293", 0x4a}], 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000240)="f30f1c030f23d4f20f0b66b90604000066b89cfb35f366ba3c5dae130f300f20d86635080000000f22d8baf80c66b8e699518066efbafc0cec3666f028ae2f710f30653e0f381ddff4", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 951.924388ms ago: executing program 1 (id=370): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 891.473554ms ago: executing program 1 (id=371): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x18}) ppoll(&(0x7f0000000080), 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x44]}, 0x8) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dbg={0x25, 0xbc, 0x40}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0x7}], 0x3}, 0x8001) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) 421.107173ms ago: executing program 0 (id=380): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0xc00) pread64(r0, &(0x7f0000000880)=""/4096, 0x1000, 0xa96) 318.369985ms ago: executing program 0 (id=381): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x20, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r8, r10, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) 317.994201ms ago: executing program 2 (id=382): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0100fe7900"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x80000) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) 316.993355ms ago: executing program 0 (id=383): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) lseek(r1, 0x7, 0x2) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@weak_binder={0x77622a85, 0x181}, @flat=@handle={0x73682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f246}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x400}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) 311.347277ms ago: executing program 2 (id=384): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1, 0x16313212529dd676) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0xfffffebb, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x880) (async) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) 241.868757ms ago: executing program 2 (id=385): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x50) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, r2, 0x0, &(0x7f0000000700)={[&(0x7f0000000580)='!\x00']}, 0x1000) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 239.834774ms ago: executing program 0 (id=386): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x1, 0x1, 0x56555958, 0x9, 0x0, [{0x8, 0xf}, {0x8, 0x5d4}, {0xf, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x40d}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a34277310, 0x1}}) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200, &(0x7f0000000640)={[{@gid}], [{@fsname={'fsname', 0x3d, '\\{&-)'}}]}) 180.488707ms ago: executing program 2 (id=387): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, 0x1402, 0x1, 0x70fd29, 0x25dfdc05, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x4800) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c86dd6000ed0403183afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1570f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670605"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 178.735827ms ago: executing program 0 (id=388): r0 = socket(0x25, 0x0, 0xb9e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) 178.209622ms ago: executing program 2 (id=389): bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xf, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r0}, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') faccessat2(r1, 0x0, 0xf8, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'geneve1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x5, "4b4d1a816b"}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x931e, 0x1f400, 0x8, 0xc1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd8f0000000000070000000500120007230000140008"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x804d}) ioctl$NBD_DO_IT(r1, 0xab03) 109.794053ms ago: executing program 0 (id=390): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './cgroup\x00'}) r3 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x200, 0x3, 0x40, 0x7}, {0x9, 0x5, 0x9, 0x2, 0x8, 0x6a, 0x60, 0x3}, {0x9, 0x5, 0x1, 0x3, 0x30, 0x8, 0xf8, 0x4}}}}}}]}}, 0x0) syz_usb_disconnect(r3) 1.953934ms ago: executing program 1 (id=391): socket(0x10, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0xfa, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x1}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x4, 0x16, "3eccd8000000000000000040000000040100"}) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200033, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r1, 0x800c6f40, &(0x7f0000000280)={""/4, 0x4}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc0) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x406, r3) r5 = epoll_create1(0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000200)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000001}) write$binfmt_misc(r2, &(0x7f00000001c0)="90", 0x1) syz_io_uring_setup(0x622, &(0x7f0000000140)={0x0, 0x3, 0x10100, 0x4, 0x20000000}, 0x0, 0x0, &(0x7f0000000000)) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = syz_clone(0x11, 0x0, 0x3e, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) migrate_pages(r8, 0xfffffffffffff8f4, &(0x7f0000000240)=0x8, &(0x7f00000002c0)=0x2) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 0s ago: executing program 2 (id=392): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls}, 0x94) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0xc, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000080)={r5, r5, 0x12c869a2, 0x800000100}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x5dec6d1b2b002b03}) r7 = syz_open_dev$dri(&(0x7f0000000600), 0x2, 0x80820) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000001c0)={r8, r8, 0x0, 0x71a5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000580)={r5, r8, 0x5, 0x7, 0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r12], 0x1, r10, r11, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x8, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r14, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24040040) r15 = syz_clone3(&(0x7f0000000500)={0x800000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/130, 0x82, &(0x7f0000000480)=""/15, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xf}, 0x58) capset(&(0x7f0000000000)={0x20080522, r15}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xfff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) kernel console output (not intermixed with test programs): [ 43.999110][ T40] audit: type=1400 audit(1777716073.277:114): avc: denied { rlimitinh } for pid=5634 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.007904][ T40] audit: type=1400 audit(1777716073.277:115): avc: denied { siginh } for pid=5634 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:5115' (ED25519) to the list of known hosts. [ 46.095694][ T40] audit: type=1400 audit(1777716075.387:116): avc: denied { name_bind } for pid=5643 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.146109][ T40] audit: type=1400 audit(1777716075.437:117): avc: denied { execute } for pid=5644 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.153810][ T40] audit: type=1400 audit(1777716075.437:118): avc: denied { execute_no_trans } for pid=5644 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.919783][ T40] audit: type=1400 audit(1777716076.207:119): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.988970][ T40] audit: type=1400 audit(1777716076.277:120): avc: denied { write } for pid=5648 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.223534][ T40] audit: type=1400 audit(1777716076.517:121): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.277095][ T40] audit: type=1400 audit(1777716076.567:122): avc: denied { write } for pid=5654 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.613158][ T40] audit: type=1400 audit(1777716076.907:123): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.667286][ T40] audit: type=1400 audit(1777716076.957:124): avc: denied { write } for pid=5660 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.738362][ T40] audit: type=1400 audit(1777716077.027:125): avc: denied { write } for pid=5663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.592552][ T5644] cgroup: Unknown subsys name 'net' [ 48.734526][ T5644] cgroup: Unknown subsys name 'cpuset' [ 48.741164][ T5644] cgroup: Unknown subsys name 'rlimit' [ 49.017423][ T5695] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.735832][ T5644] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.501449][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 53.501461][ T40] audit: type=1400 audit(1777716082.797:161): avc: denied { execmem } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.670255][ T40] audit: type=1400 audit(1777716082.957:162): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.680822][ T40] audit: type=1400 audit(1777716082.957:163): avc: denied { read write } for pid=5733 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.688829][ T40] audit: type=1400 audit(1777716082.957:164): avc: denied { read write } for pid=5732 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.698134][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.698812][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.700604][ T40] audit: type=1400 audit(1777716082.957:165): avc: denied { open } for pid=5733 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.700628][ T40] audit: type=1400 audit(1777716082.967:166): avc: denied { ioctl } for pid=5732 comm="syz-executor" path="socket:[6565]" dev="sockfs" ino=6565 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.711168][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.716078][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.716648][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.717565][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.717956][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.718355][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.725746][ T40] audit: type=1400 audit(1777716083.017:167): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.726197][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.728465][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.728885][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.729983][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.732365][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.732840][ T40] audit: type=1400 audit(1777716083.017:168): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.733169][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.733762][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.735249][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.736262][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.741652][ T40] audit: type=1400 audit(1777716083.017:169): avc: denied { mounton } for pid=5733 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.751376][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.752425][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.754561][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.755296][ T40] audit: type=1400 audit(1777716083.027:170): avc: denied { module_request } for pid=5733 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.220114][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.223789][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.227210][ T5733] bridge_slave_0: entered allmulticast mode [ 54.231730][ T5733] bridge_slave_0: entered promiscuous mode [ 54.237819][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.241194][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.244336][ T5733] bridge_slave_1: entered allmulticast mode [ 54.248258][ T5733] bridge_slave_1: entered promiscuous mode [ 54.279533][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.285538][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.360975][ T5733] team0: Port device team_slave_0 added [ 54.388982][ T5733] team0: Port device team_slave_1 added [ 54.442934][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.445903][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.456270][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.462283][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.464779][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.474868][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.508678][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.511498][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.514603][ T5746] bridge_slave_0: entered allmulticast mode [ 54.517794][ T5746] bridge_slave_0: entered promiscuous mode [ 54.539654][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.543147][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.546027][ T5746] bridge_slave_1: entered allmulticast mode [ 54.549068][ T5746] bridge_slave_1: entered promiscuous mode [ 54.577432][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.581897][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.646788][ T5733] hsr_slave_0: entered promiscuous mode [ 54.650730][ T5733] hsr_slave_1: entered promiscuous mode [ 54.688380][ T5746] team0: Port device team_slave_0 added [ 54.707461][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.709907][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.712612][ T5732] bridge_slave_0: entered allmulticast mode [ 54.715474][ T5732] bridge_slave_0: entered promiscuous mode [ 54.719129][ T5746] team0: Port device team_slave_1 added [ 54.738993][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.742432][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.745640][ T5732] bridge_slave_1: entered allmulticast mode [ 54.749618][ T5732] bridge_slave_1: entered promiscuous mode [ 54.795865][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.798846][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.809880][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.816241][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.819379][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.830788][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.835823][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.839299][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.842689][ T5735] bridge_slave_0: entered allmulticast mode [ 54.846793][ T5735] bridge_slave_0: entered promiscuous mode [ 54.857953][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.868830][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.877734][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.881012][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.884244][ T5735] bridge_slave_1: entered allmulticast mode [ 54.888267][ T5735] bridge_slave_1: entered promiscuous mode [ 54.937618][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.942875][ T5732] team0: Port device team_slave_0 added [ 54.961106][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.966818][ T5732] team0: Port device team_slave_1 added [ 55.014036][ T5746] hsr_slave_0: entered promiscuous mode [ 55.017353][ T5746] hsr_slave_1: entered promiscuous mode [ 55.021215][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 55.023803][ T5746] Cannot create hsr debugfs directory [ 55.053918][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.057065][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.067872][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.074708][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.077820][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.089226][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.103210][ T5735] team0: Port device team_slave_0 added [ 55.109938][ T5735] team0: Port device team_slave_1 added [ 55.198844][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.201441][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.209794][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.231076][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.233713][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.243336][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.263645][ T5732] hsr_slave_0: entered promiscuous mode [ 55.266032][ T5732] hsr_slave_1: entered promiscuous mode [ 55.268209][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 55.270175][ T5732] Cannot create hsr debugfs directory [ 55.341682][ T5735] hsr_slave_0: entered promiscuous mode [ 55.344938][ T5735] hsr_slave_1: entered promiscuous mode [ 55.347893][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 55.349881][ T5735] Cannot create hsr debugfs directory [ 55.416542][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.425410][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.452566][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.458564][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.481005][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.485049][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.509261][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.513887][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.593943][ T5746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.599814][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.603598][ T5746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.610086][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.614014][ T5746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.619918][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.623376][ T5746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.627658][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.682790][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.689789][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.694329][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.701301][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.707727][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.711935][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.723582][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.727648][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.780990][ T5740] Bluetooth: hci0: command tx timeout [ 55.781244][ T5741] Bluetooth: hci3: command tx timeout [ 55.786985][ T5737] Bluetooth: hci1: command tx timeout [ 55.799165][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.805018][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.807740][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.811851][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.814479][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.818685][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.822576][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.827986][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.835316][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.868010][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.870621][ T5737] Bluetooth: hci2: command tx timeout [ 55.874615][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.883134][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.885963][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.902106][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.905045][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.925660][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.935634][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.958062][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.961182][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.982304][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.985553][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.992427][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.007352][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.009789][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.038578][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.041019][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.073489][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.108918][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.117716][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.120944][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.137499][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.140300][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.322339][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.359542][ T5733] veth0_vlan: entered promiscuous mode [ 56.368662][ T5733] veth1_vlan: entered promiscuous mode [ 56.386531][ T5733] veth0_macvtap: entered promiscuous mode [ 56.394755][ T5733] veth1_macvtap: entered promiscuous mode [ 56.407214][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.419969][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.428998][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.437894][ T1197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.449123][ T1197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.453912][ T1197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.463135][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.468964][ T1197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.479052][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.549559][ T5746] veth0_vlan: entered promiscuous mode [ 56.557939][ T5732] veth0_vlan: entered promiscuous mode [ 56.558346][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.564856][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.579051][ T5746] veth1_vlan: entered promiscuous mode [ 56.593237][ T5732] veth1_vlan: entered promiscuous mode [ 56.612219][ T5735] veth0_vlan: entered promiscuous mode [ 56.612654][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.619114][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.632122][ T5735] veth1_vlan: entered promiscuous mode [ 56.645849][ T5732] veth0_macvtap: entered promiscuous mode [ 56.653754][ T5746] veth0_macvtap: entered promiscuous mode [ 56.656955][ T5732] veth1_macvtap: entered promiscuous mode [ 56.664829][ T5746] veth1_macvtap: entered promiscuous mode [ 56.675884][ T5733] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.689248][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.698216][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.705153][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.711998][ T5735] veth0_macvtap: entered promiscuous mode [ 56.719578][ T1197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.724939][ T1197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.732385][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.737071][ T1197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.742222][ T1197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.756257][ T5735] veth1_macvtap: entered promiscuous mode [ 56.759749][ T87] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.764288][ T87] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.775462][ T87] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.779923][ T87] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.811793][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.828425][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.849506][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.852663][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.852938][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.867286][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.875681][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.896644][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.903697][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.907019][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.912423][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.915947][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.949853][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.953921][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.008458][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.015664][ T5882] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2'. [ 57.016931][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.058203][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.064994][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.219673][ T5892] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 57.335172][ T5898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 57.364381][ T5905] dummy0: entered allmulticast mode [ 57.367910][ T5906] input: syz1 as /devices/virtual/input/input5 [ 57.420121][ T5908] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12'. [ 57.424395][ T5908] Zero length message leads to an empty skb [ 57.517414][ T5913] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.860785][ T5737] Bluetooth: hci0: command tx timeout [ 57.862514][ T5737] Bluetooth: hci1: command tx timeout [ 57.864554][ T5741] Bluetooth: hci3: command tx timeout [ 57.940595][ T5737] Bluetooth: hci2: command tx timeout [ 58.151662][ T5822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.183282][ T5948] netlink: 'syz.3.25': attribute type 12 has an invalid length. [ 58.210589][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.300550][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 58.300649][ T2083] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.308835][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.314509][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.320905][ T5822] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.326719][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.338039][ T5822] usb 5-1: config 0 descriptor?? [ 58.344862][ T5952] netlink: 'syz.3.27': attribute type 89 has an invalid length. [ 58.348181][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 58.370594][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 58.374869][ T29] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 58.378673][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.383376][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.387705][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.392347][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.397050][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.402760][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.450305][ T2083] usb 7-1: Using ep0 maxpacket: 16 [ 58.454805][ T2083] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.459512][ T2083] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.464254][ T2083] usb 7-1: config 0 interface 0 has no altsetting 0 [ 58.467174][ T2083] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 58.470967][ T2083] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.477178][ T2083] usb 7-1: config 0 descriptor?? [ 58.548370][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 58.548387][ T40] audit: type=1400 audit(1777716087.837:265): avc: denied { create } for pid=5935 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.559427][ T40] audit: type=1400 audit(1777716087.837:266): avc: denied { setopt } for pid=5935 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.565875][ T40] audit: type=1400 audit(1777716087.837:267): avc: denied { write } for pid=5935 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.572261][ T40] audit: type=1400 audit(1777716087.847:268): avc: denied { read } for pid=5935 comm="syz.0.21" lport=60811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.613844][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.617319][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.620437][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.623349][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.626361][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.629370][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.633124][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.636619][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.639907][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.643855][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.650419][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.814122][ T24] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 58.817832][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.821426][ T24] usb 8-1: Product: syz [ 58.823436][ T24] usb 8-1: Manufacturer: syz [ 58.825535][ T24] usb 8-1: SerialNumber: syz [ 58.894027][ T2083] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 58.897745][ T2083] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 58.903014][ T2083] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 58.906297][ T2083] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 58.909501][ T2083] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 58.917423][ T2083] nzxt-smart2 0003:1E71:2009.0002: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 59.193143][ T40] audit: type=1400 audit(1777716088.487:269): avc: denied { connect } for pid=5945 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.240144][ T40] audit: type=1400 audit(1777716088.527:270): avc: denied { create } for pid=5953 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.247486][ T40] audit: type=1400 audit(1777716088.527:271): avc: denied { setopt } for pid=5953 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.275128][ T5954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.28'. [ 59.282101][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 59.287544][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 59.293665][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 59.299442][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 59.300046][ T9] usb 7-1: USB disconnect, device number 2 [ 59.304620][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 59.311901][ T24] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 59.319219][ T24] usb 8-1: USB disconnect, device number 2 [ 59.899134][ T40] audit: type=1400 audit(1777716089.187:272): avc: denied { create } for pid=5964 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.903654][ T5966] netlink: 'syz.2.30': attribute type 153 has an invalid length. [ 59.941842][ T5741] Bluetooth: hci3: command tx timeout [ 59.944546][ T5737] Bluetooth: hci1: command tx timeout [ 59.949985][ T40] audit: type=1400 audit(1777716089.237:273): avc: denied { mount } for pid=5968 comm="syz.2.31" name="/" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.950375][ T5737] Bluetooth: hci0: command tx timeout [ 60.007532][ T40] audit: type=1400 audit(1777716089.297:274): avc: denied { create } for pid=5972 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.030329][ T5737] Bluetooth: hci2: command tx timeout [ 60.115237][ T5981] pim6reg: entered allmulticast mode [ 60.117773][ T5981] pim6reg: left allmulticast mode [ 60.333702][ T5990] misc userio: The device must be registered before sending interrupts [ 60.429184][ T5994] Bluetooth: MGMT ver 1.23 [ 60.440088][ T5994] team0: Device gtp0 is up. Set it down before adding it as a team port [ 60.897370][ T5822] usbhid 5-1:0.0: can't add hid device: -71 [ 60.907008][ T5822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 60.922840][ T5822] usb 5-1: USB disconnect, device number 2 [ 60.998764][ T29] usb 6-1: usb_control_msg returned -71 [ 61.003774][ T29] usbtmc 6-1:16.0: can't read capabilities [ 61.018739][ T29] usb 6-1: USB disconnect, device number 2 [ 61.105874][ T6010] netlink: 'syz.1.45': attribute type 16 has an invalid length. [ 61.109108][ T6010] netlink: 'syz.1.45': attribute type 17 has an invalid length. [ 61.128821][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.135262][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.186106][ T6010] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 61.240350][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.401348][ T6028] xt_CONNSECMARK: invalid mode: 0 [ 61.403712][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 61.414174][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 61.421039][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 61.432708][ T24] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 61.435803][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.438438][ T24] usb 8-1: Product: syz [ 61.439830][ T24] usb 8-1: Manufacturer: syz [ 61.443623][ T24] usb 8-1: SerialNumber: syz [ 61.449884][ T24] usb 8-1: config 0 descriptor?? [ 61.514468][ T6038] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 61.534740][ T6042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6042 comm=syz.1.57 [ 61.547594][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.553926][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.556379][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.561651][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 61.599130][ T6050] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 61.657522][ T24] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 61.788041][ T6051] Process accounting resumed [ 61.863294][ T5473] usb 8-1: USB disconnect, device number 3 [ 61.966663][ T6058] IPVS: sed: FWM 3 0x00000003 - no destination available [ 61.966726][ T5823] IPVS: starting estimator thread 0... [ 62.030646][ T5737] Bluetooth: hci0: command tx timeout [ 62.030777][ T5741] Bluetooth: hci1: command tx timeout [ 62.031052][ T5740] Bluetooth: hci3: command tx timeout [ 62.060662][ T6060] IPVS: using max 45 ests per chain, 108000 per kthread [ 62.100275][ T5741] Bluetooth: hci2: command tx timeout [ 62.153185][ T6068] vlan2: entered allmulticast mode [ 62.157654][ T6068] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 62.162417][ T6068] bridge0: port 3(vlan2) entered blocking state [ 62.164993][ T6068] bridge0: port 3(vlan2) entered disabled state [ 62.168545][ T6068] vlan2: entered promiscuous mode [ 62.170354][ T6068] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 62.173700][ T6068] bridge0: port 3(vlan2) entered blocking state [ 62.176302][ T6068] bridge0: port 3(vlan2) entered forwarding state [ 62.211245][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.215705][ T6064] batadv_slave_0: entered promiscuous mode [ 62.217550][ T6064] batadv_slave_0: entered allmulticast mode [ 62.523472][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 62.861978][ T6104] ======================================================= [ 62.861978][ T6104] WARNING: The mand mount option has been deprecated and [ 62.861978][ T6104] and is ignored by this kernel. Remove the mand [ 62.861978][ T6104] option from the mount to silence this warning. [ 62.861978][ T6104] ======================================================= [ 62.884180][ T6104] devtmpfs: Cannot change global quota limit on remount [ 63.579010][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 63.579026][ T40] audit: type=1400 audit(1777716092.867:334): avc: denied { unmount } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 63.588785][ T40] audit: type=1400 audit(1777716092.877:335): avc: denied { unmount } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.612507][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 63.617148][ T6109] process 'syz.3.79' launched './file1' with NULL argv: empty string added [ 63.617247][ T40] audit: type=1400 audit(1777716092.907:336): avc: denied { execute } for pid=6108 comm="syz.3.79" name="file1" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.629521][ T40] audit: type=1400 audit(1777716092.917:337): avc: denied { execute_no_trans } for pid=6108 comm="syz.3.79" path="/23/file1" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.704476][ T6118] syzkaller0: entered promiscuous mode [ 63.706709][ T6118] syzkaller0: entered allmulticast mode [ 63.711889][ T40] audit: type=1400 audit(1777716093.007:338): avc: denied { setopt } for pid=6117 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.860104][ T6122] kvm: pic: non byte read [ 63.864957][ T6122] kvm: pic: non byte read [ 63.868034][ T6122] kvm: pic: non byte read [ 63.872770][ T6122] kvm: pic: non byte read [ 63.875828][ T6122] kvm: pic: non byte read [ 63.878940][ T6122] kvm: pic: non byte read [ 63.991192][ T6125] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 64.044537][ T6127] support for the xor transformation has been removed. [ 64.079752][ T6129] futex_wake_op: syz.3.88 tries to shift op by -1; fix this program [ 64.114833][ T40] audit: type=1400 audit(1777716093.407:339): avc: denied { block_suspend } for pid=6131 comm="syz.3.89" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.433956][ T40] audit: type=1400 audit(1777716349.732:340): avc: denied { create } for pid=6139 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.441477][ T40] audit: type=1400 audit(1777716349.732:341): avc: denied { setopt } for pid=6139 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.448793][ T40] audit: type=1400 audit(1777716349.732:342): avc: denied { write } for pid=6139 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.456319][ T40] audit: type=1400 audit(1777716349.732:343): avc: denied { ioctl } for pid=6139 comm="syz.0.92" path="socket:[9987]" dev="sockfs" ino=9987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.681498][ T6152] tmpfs: Bad value for 'mpol' [ 64.683811][ T6152] netlink: 762 bytes leftover after parsing attributes in process `syz.0.97'. [ 64.775563][ T6157] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 64.782738][ T6157] netlink: 68 bytes leftover after parsing attributes in process `syz.0.99'. [ 64.788439][ T6157] netlink: 48 bytes leftover after parsing attributes in process `syz.0.99'. [ 64.794181][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.99'. [ 64.799069][ T6157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6157 comm=syz.0.99 [ 65.148356][ T6180] comedi comedi0: Cannot bond this driver to itself! [ 65.160360][ T5823] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.192398][ T6182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64544 sclass=netlink_route_socket pid=6182 comm=syz.3.107 [ 65.323296][ T5823] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 65.327895][ T5823] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.331936][ T5823] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 65.334975][ T5823] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.338594][ T5823] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.343953][ T5823] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 65.347020][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 65.351450][ T5823] usb 5-1: Product: syz [ 65.352865][ T5823] usb 5-1: Manufacturer: syz [ 65.357156][ T5823] cdc_wdm 5-1:1.0: skipping garbage [ 65.358949][ T5823] cdc_wdm 5-1:1.0: skipping garbage [ 65.362756][ T5823] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 65.365147][ T5823] cdc_wdm 5-1:1.0: Unknown control protocol [ 65.395303][ T6187] sctp: [Deprecated]: syz.3.109 (pid 6187) Use of int in max_burst socket option deprecated. [ 65.395303][ T6187] Use struct sctp_assoc_value instead [ 65.561923][ T6162] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 65.572976][ T5823] usb 5-1: USB disconnect, device number 3 [ 66.118821][ T6216] IPVS: sed: FWM 3 0x00000003 - no destination available [ 66.204777][ T6223] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 66.209350][ T6225] 9p: Bad value for 'rfdno' [ 66.394322][ T6239] overlayfs: failed to resolve './file1/file0': -2 [ 66.541364][ T6259] ptrace attach of "/syz-executor exec"[6260] was attempted by "/syz-executor exec"[6259] [ 66.669923][ T6271] netlink: 36 bytes leftover after parsing attributes in process `syz.0.132'. [ 66.749110][ T6280] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 66.752060][ T6280] netlink: 'syz.2.136': attribute type 2 has an invalid length. [ 66.766558][ T6278] overlayfs: failed to resolve './file1/file0': -2 [ 67.010264][ T2083] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 67.110354][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.160343][ T2083] usb 7-1: Using ep0 maxpacket: 32 [ 67.163936][ T2083] usb 7-1: unable to get BOS descriptor or descriptor too short [ 67.167762][ T2083] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.175431][ T2083] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 67.179401][ T2083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.182957][ T2083] usb 7-1: Product: syz [ 67.184656][ T2083] usb 7-1: Manufacturer: syz [ 67.186672][ T2083] usb 7-1: SerialNumber: syz [ 67.281961][ T29] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 67.285783][ T29] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 67.290021][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.298789][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 67.302977][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 67.306502][ T29] usb 5-1: Product: syz [ 67.309086][ T29] usb 5-1: Manufacturer: syz [ 67.311847][ T29] usb 5-1: SerialNumber: syz [ 67.317067][ T29] usb 5-1: config 0 descriptor?? [ 67.322948][ T29] hub 5-1:0.0: bad descriptor, ignoring hub [ 67.322969][ T29] hub 5-1:0.0: probe with driver hub failed with error -5 [ 67.329156][ T29] usb 5-1: selecting invalid altsetting 0 [ 67.421178][ T2083] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.429312][ T6291] xt_bpf: check failed: parse error [ 67.431068][ T2083] usb 7-1: MIDIStreaming interface descriptor not found [ 67.511332][ T2083] usb 7-1: USB disconnect, device number 3 [ 67.544708][ T6305] xt_nat: multiple ranges no longer supported [ 67.549219][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 67.554634][ T6305] netem: unknown loss type 13 [ 67.557272][ T6305] netem: change failed [ 67.573694][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 67.602108][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.606368][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.640296][ T6311] netlink: 48 bytes leftover after parsing attributes in process `syz.1.145'. [ 67.675982][ T6313] ntfs3(sr0): Primary boot signature is not NTFS. [ 67.679018][ T6313] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 67.736553][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 67.747610][ T6315] macvlan2: entered promiscuous mode [ 67.749623][ T6315] macvlan2: entered allmulticast mode [ 67.752244][ T6315] bond1: entered promiscuous mode [ 67.755760][ T6315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.759937][ T6315] bond1: left promiscuous mode [ 67.802274][ T6316] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 67.805048][ T6316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.809523][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 67.821704][ T6316] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 67.931109][ T6284] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 68.069221][ T2083] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 68.074364][ T2083] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 68.078154][ T2083] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 68.082338][ T2083] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 68.085557][ T2083] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 68.088801][ T2083] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 68.092427][ T2083] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 68.096470][ T2083] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 68.099672][ T2083] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 68.104020][ T2083] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 68.125278][ T24] hid (null): unknown global tag 0xd [ 68.127802][ T24] hid (null): unknown global tag 0xc [ 68.130311][ T24] hid (null): unknown global tag 0xe [ 68.134902][ T24] hid (null): unknown global tag 0xe [ 68.136195][ T2083] hid-generic 00A0:0006:0003.0003: hidraw1: HID v0.05 Device [syz0] on syz0 [ 68.137043][ T24] hid (null): invalid report_size 1316212808 [ 68.143029][ T24] hid (null): unknown global tag 0xd [ 68.144905][ T24] hid (null): unknown global tag 0xc [ 68.146702][ T24] hid (null): unknown global tag 0xc [ 68.148531][ T24] hid (null): unknown global tag 0x3f [ 68.151607][ T24] hid (null): unknown global tag 0x66 [ 68.153596][ T24] hid (null): unknown global tag 0xc [ 68.155357][ T24] hid (null): invalid report_size 22000 [ 68.157204][ T24] hid (null): unknown global tag 0xe [ 68.159015][ T24] hid (null): report_id 0 is invalid [ 68.161092][ T24] hid (null): global environment stack underflow [ 68.163153][ T24] hid (null): unknown global tag 0xd [ 68.165129][ T24] hid (null): unknown global tag 0xd [ 68.167087][ T24] hid (null): unknown global tag 0xd [ 68.169053][ T24] hid (null): report_id 63510 is invalid [ 68.171173][ T24] hid (null): unknown global tag 0xd [ 68.172994][ T24] hid (null): unknown global tag 0xd [ 68.174847][ T24] hid (null): unknown global tag 0xe7 [ 68.176732][ T24] hid (null): unknown global tag 0xe [ 68.178581][ T24] hid (null): global environment stack overflow [ 68.181018][ T24] hid (null): unknown global tag 0xc [ 68.183241][ T24] hid (null): report_id 33164 is invalid [ 68.185236][ T24] hid (null): unknown global tag 0xc [ 68.187070][ T24] hid (null): global environment stack overflow [ 68.189249][ T24] hid (null): unknown global tag 0xd [ 68.191567][ T24] hid (null): report_id 0 is invalid [ 68.193735][ T24] hid (null): unknown global tag 0xc [ 68.195631][ T24] hid (null): unknown global tag 0xe [ 68.197633][ T24] hid (null): unknown global tag 0xd [ 68.200735][ T24] hid (null): report_id 0 is invalid [ 68.203294][ T24] hid (null): global environment stack overflow [ 68.205816][ T24] hid (null): unknown global tag 0x8b [ 68.207769][ T24] hid (null): unknown global tag 0xc [ 68.209543][ T24] hid (null): unknown global tag 0xd2 [ 68.212218][ T24] hid (null): unknown global tag 0xeb [ 68.214369][ T24] hid (null): invalid report_size 453779517 [ 68.216399][ T24] hid (null): unknown global tag 0xc [ 68.218270][ T24] hid (null): global environment stack overflow [ 68.221202][ T24] hid (null): global environment stack overflow [ 68.223350][ T24] hid (null): unknown global tag 0xa5 [ 68.225086][ T24] hid (null): global environment stack overflow [ 68.227092][ T24] hid (null): invalid report_size -1743285217 [ 68.229254][ T24] hid (null): unknown global tag 0x60 [ 68.231446][ T24] hid (null): unknown global tag 0xd [ 68.233365][ T24] hid (null): unknown global tag 0xe [ 68.235137][ T24] hid (null): bogus close delimiter [ 68.237038][ T24] hid (null): unknown global tag 0xc [ 68.239946][ T24] hid (null): unknown global tag 0xe [ 68.242651][ T24] hid (null): unknown global tag 0xd [ 68.244512][ T24] hid (null): report_id 3526142276 is invalid [ 68.246672][ T24] hid (null): unknown global tag 0xe [ 68.249707][ T24] hid-generic 000A:FFFFFFF9:10000.0004: unknown global tag 0xd [ 68.252408][ T24] hid-generic 000A:FFFFFFF9:10000.0004: item 0 0 1 13 parsing failed [ 68.255110][ T24] hid-generic 000A:FFFFFFF9:10000.0004: probe with driver hid-generic failed with error -22 [ 68.445493][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.450400][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.527228][ T1244] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.530673][ T1244] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.534098][ T1244] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.543925][ T1244] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.584008][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 68.584042][ T40] audit: type=1400 audit(1777716353.882:419): avc: denied { lock } for pid=6359 comm="syz.2.159" path="socket:[11880]" dev="sockfs" ino=11880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.678176][ T6367] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.685363][ T40] audit: type=1400 audit(1777716353.982:420): avc: denied { mount } for pid=6366 comm="syz.1.161" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.707769][ T6369] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 68.721867][ T6369] syz.2.162: attempt to access beyond end of device [ 68.721867][ T6369] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 68.727632][ T6369] gfs2: error -5 reading superblock [ 68.794869][ T40] audit: type=1400 audit(1777716354.092:421): avc: denied { connect } for pid=6372 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.974174][ T40] audit: type=1400 audit(1777716354.272:422): avc: denied { shutdown } for pid=6383 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.044129][ T40] audit: type=1400 audit(1777716354.342:423): avc: denied { write } for pid=6390 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.125399][ T6394] /dev/sg0: Can't lookup blockdev [ 69.127582][ T6394] openvswitch: netlink: Flow key attr not present in new flow. [ 69.131103][ T40] audit: type=1400 audit(1777716354.432:424): avc: denied { write } for pid=6393 comm="syz.1.169" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.139579][ T40] audit: type=1400 audit(1777716354.432:425): avc: denied { open } for pid=6393 comm="syz.1.169" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.507896][ T40] audit: type=1400 audit(1777716354.802:426): avc: denied { ioctl } for pid=6402 comm="syz.3.173" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 69.535468][ T6407] binder: 6406:6407 ioctl c0306201 0 returned -14 [ 69.539475][ T40] audit: type=1400 audit(1777716354.832:427): avc: denied { ioctl } for pid=6406 comm="syz.3.174" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.594756][ T40] audit: type=1400 audit(1777716354.892:428): avc: denied { create } for pid=6409 comm="syz.2.175" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.697090][ T6423] overlay: Bad value for 'redirect_dir' [ 69.700013][ T6423] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.707295][ T6423] netlink: 7 bytes leftover after parsing attributes in process `syz.3.179'. [ 69.729124][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 69.893712][ T2083] usb 5-1: USB disconnect, device number 4 [ 69.938248][ T6433] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1iÒûm÷]7ä(äaŠàó H˜] ³¹¿ÃÇ [ 70.000612][ T6441] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.038802][ T6444] netlink: 'syz.0.186': attribute type 28 has an invalid length. [ 70.207127][ T6450] tmpfs: Bad value for 'huge' [ 70.374610][ T6454] netlink: 'syz.2.190': attribute type 20 has an invalid length. [ 70.378137][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 70.390606][ T1197] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.390745][ T6454] netlink: 'syz.2.190': attribute type 20 has an invalid length. [ 70.394976][ T1197] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.397604][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 70.401548][ T1197] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.408802][ T1197] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.615284][ T6468] syz.3.195 uses obsolete (PF_INET,SOCK_PACKET) [ 70.748489][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 70.753084][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 70.793233][ T6478] xt_hashlimit: size too large, truncated to 1048576 [ 71.491606][ T6518] netlink: 'syz.0.210': attribute type 4 has an invalid length. [ 71.494613][ T6518] bond_slave_1: mtu greater than device maximum [ 71.852157][ T6543] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 72.341018][ T6574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6574 comm=syz.0.226 [ 72.345704][ T6564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6564 comm=syz.0.226 [ 72.446550][ T24] IPVS: starting estimator thread 0... [ 72.450916][ T6580] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 72.463086][ T6580] CIFS mount error: No usable UNC path provided in device string! [ 72.463086][ T6580] [ 72.467540][ T6580] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 72.550878][ T6581] IPVS: using max 30 ests per chain, 72000 per kthread [ 72.938405][ T6593] netlink: 'syz.0.233': attribute type 7 has an invalid length. [ 72.961629][ T6593] xt_hashlimit: size too large, truncated to 1048576 [ 73.191231][ T6613] bridge_slave_0: left allmulticast mode [ 73.193267][ T6613] bridge_slave_0: left promiscuous mode [ 73.195216][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.200891][ T6613] bridge_slave_1: left allmulticast mode [ 73.203105][ T6613] bridge_slave_1: left promiscuous mode [ 73.205671][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.216602][ T6613] bond0: (slave bond_slave_0): Releasing backup interface [ 73.227096][ T6613] bond0: (slave bond_slave_1): Releasing backup interface [ 73.237895][ T6613] team0: Port device team_slave_0 removed [ 73.246289][ T6613] team0: Port device team_slave_1 removed [ 73.251162][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.257329][ T6615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6615 comm=syz.1.203 [ 73.260620][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.268451][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.275928][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.281680][ T6613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.382320][ T6629] __nla_validate_parse: 8 callbacks suppressed [ 73.382332][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 73.384694][ T6630] cgroup: subsys name conflicts with all [ 73.389225][ T6629] openvswitch: netlink: Flow actions attr not present in new flow. [ 73.429850][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 73.431079][ T6633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.438749][ T6633] block device autoloading is deprecated and will be removed. [ 73.476884][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.249'. [ 73.497615][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 73.519392][ T6624] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 73.530823][ T6624] bond1 (unregistering): Released all slaves [ 73.630338][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.663460][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.255'. [ 73.791822][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.795781][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.800046][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.805065][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.811238][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.815256][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.818658][ T24] usb 7-1: Product: syz [ 73.820916][ T24] usb 7-1: Manufacturer: syz [ 73.832687][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 73.834961][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 73.835029][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 73.835058][ T40] audit: type=1400 audit(1777716359.132:501): avc: denied { mounton } for pid=6661 comm="syz.1.256" path="/47/file0/file0" dev="9p" ino=82837561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.839002][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 73.851596][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 73.913413][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 73.918423][ T6670] netlink: 'syz.0.257': attribute type 9 has an invalid length. [ 73.951451][ T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 74.008417][ T40] audit: type=1400 audit(1777716359.302:502): avc: denied { bind } for pid=6673 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.018503][ T6674] mac80211_hwsim hwsim5 ªªªªª;: renamed from wlan0 (while UP) [ 74.084654][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.088527][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.092861][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 74.092966][ T24] usb 7-1: USB disconnect, device number 4 [ 74.096050][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 74.101230][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 74.120299][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 74.123138][ T50] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.126417][ T50] usb 8-1: config 0 has no interface number 0 [ 74.128534][ T50] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.132885][ T50] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.135914][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.140752][ T50] usb 8-1: config 0 descriptor?? [ 74.149166][ T50] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 74.220267][ T6688] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 74.222577][ T6688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 74.229013][ T6689] ªªªªªª: renamed from hsr0 (while UP) [ 74.229084][ T6688] vhci_hcd vhci_hcd.0: Device attached [ 74.235956][ T6688] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 74.238679][ T6688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 74.242108][ T6688] vhci_hcd vhci_hcd.0: Device attached [ 74.258714][ T6693] vhci_hcd: connection closed [ 74.259031][ T6690] vhci_hcd: connection closed [ 74.262280][ T13] vhci_hcd vhci_hcd.2: stop threads [ 74.267347][ T13] vhci_hcd vhci_hcd.2: release socket [ 74.269730][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 74.274681][ T13] vhci_hcd vhci_hcd.2: stop threads [ 74.276992][ T13] vhci_hcd vhci_hcd.2: release socket [ 74.279715][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 74.325888][ T40] audit: type=1400 audit(1777716359.622:503): avc: denied { remount } for pid=6700 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.348865][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.356329][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.395765][ T6710] netlink: 'syz.2.263': attribute type 1 has an invalid length. [ 74.417343][ T6710] bond1: entered promiscuous mode [ 74.421277][ T6710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.427464][ T40] audit: type=1400 audit(1777716359.722:504): avc: denied { create } for pid=6696 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 74.433969][ T40] audit: type=1400 audit(1777716359.722:505): avc: denied { write } for pid=6696 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 74.820559][ T6736] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.268'. [ 74.825567][ T6736] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.268'. [ 74.837004][ T5103] usb 8-1: USB disconnect, device number 4 [ 74.959262][ T40] audit: type=1400 audit(1777716360.252:506): avc: denied { create } for pid=6740 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.188352][ T40] audit: type=1400 audit(1777716360.482:507): avc: denied { getopt } for pid=6766 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.487254][ T40] audit: type=1400 audit(1777716360.782:508): avc: denied { remount } for pid=6780 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 75.505201][ T40] audit: type=1400 audit(1777716360.802:509): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 75.743106][ T6789] syzkaller0: entered promiscuous mode [ 75.745036][ T6789] syzkaller0: entered allmulticast mode [ 75.791737][ T6789] tc action pedit offset must be on 32 bit boundaries [ 76.060803][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 76.064969][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 76.294722][ T40] audit: type=1400 audit(1777716361.592:510): avc: denied { ioctl } for pid=6802 comm="syz.1.284" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.324083][ T6779] openvswitch: netlink: Flow actions attr not present in new flow. [ 76.362802][ T6807] tipc: Started in network mode [ 76.364653][ T6807] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 76.366396][ T6809] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 76.367158][ T6807] tipc: Enabled bearer , priority 10 [ 76.403200][ T6812] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 76.424047][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.426764][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.450143][ T6819] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 76.492618][ T6824] tmpfs: Bad value for 'mpol' [ 76.553260][ T6829] vlan2: entered allmulticast mode [ 76.556238][ T6829] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 76.563124][ T6829] bridge0: port 3(vlan2) entered blocking state [ 76.565569][ T6829] bridge0: port 3(vlan2) entered disabled state [ 76.569885][ T6829] vlan2: entered promiscuous mode [ 76.573026][ T6829] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 76.576490][ T6829] bridge0: port 3(vlan2) entered blocking state [ 76.578820][ T6829] bridge0: port 3(vlan2) entered forwarding state [ 76.604457][ T6834] binder: 6833:6834 unknown command 0 [ 76.606594][ T6834] binder: 6833:6834 ioctl c0306201 200000000080 returned -22 [ 76.690092][ T6837] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 76.816649][ T6851] netlink: 'syz.0.301': attribute type 7 has an invalid length. [ 76.826455][ T87] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.830338][ T6851] netlink: 'syz.0.301': attribute type 7 has an invalid length. [ 76.833320][ T87] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.837563][ T87] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.840793][ T87] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.845109][ T6851] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.120409][ T5473] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.283757][ T5473] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.289153][ T5473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.301972][ T5473] usb 5-1: config 0 descriptor?? [ 77.364349][ T6877] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 77.486033][ T5822] tipc: Node number set to 12429994 [ 77.510410][ T5473] usbhid 5-1:0.0: can't add hid device: -71 [ 77.516643][ T5473] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 77.525416][ T5473] usb 5-1: USB disconnect, device number 5 [ 77.702875][ T6903] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(135) [ 77.705187][ T6903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.708560][ T6903] vhci_hcd vhci_hcd.0: Device attached [ 77.714060][ T6903] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(137) [ 77.716274][ T6903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.719844][ T6903] vhci_hcd vhci_hcd.0: Device attached [ 77.722775][ T6903] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(139) [ 77.725074][ T6903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.727607][ T6903] vhci_hcd vhci_hcd.0: Device attached [ 77.731130][ T6903] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(141) [ 77.734151][ T6903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.737636][ T6903] vhci_hcd vhci_hcd.0: Device attached [ 77.741581][ T6903] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(143) [ 77.744559][ T6903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.750320][ T6903] vhci_hcd vhci_hcd.0: Device attached [ 77.780175][ T6914] vhci_hcd: connection closed [ 77.782473][ T1241] vhci_hcd vhci_hcd.3: stop threads [ 77.783121][ T6908] vhci_hcd: connection closed [ 77.783373][ T6910] vhci_hcd: connection closed [ 77.783608][ T6906] vhci_hcd: connection closed [ 77.788100][ T1241] vhci_hcd vhci_hcd.3: release socket [ 77.791389][ T6904] vhci_hcd: connection closed [ 77.792000][ T1241] vhci_hcd vhci_hcd.3: disconnect device [ 77.798769][ T1241] vhci_hcd vhci_hcd.3: stop threads [ 77.801755][ T1241] vhci_hcd vhci_hcd.3: release socket [ 77.804312][ T1241] vhci_hcd vhci_hcd.3: disconnect device [ 77.809629][ T1241] vhci_hcd vhci_hcd.3: stop threads [ 77.815638][ T1241] vhci_hcd vhci_hcd.3: release socket [ 77.818715][ T1241] vhci_hcd vhci_hcd.3: disconnect device [ 77.824478][ T1241] vhci_hcd vhci_hcd.3: stop threads [ 77.826384][ T1241] vhci_hcd vhci_hcd.3: release socket [ 77.829265][ T1241] vhci_hcd vhci_hcd.3: disconnect device [ 77.834462][ T1241] vhci_hcd vhci_hcd.3: stop threads [ 77.836433][ T1241] vhci_hcd vhci_hcd.3: release socket [ 77.838823][ T1241] vhci_hcd vhci_hcd.3: disconnect device [ 77.891263][ T1342] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 78.450321][ T5473] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.620356][ T5473] usb 5-1: Using ep0 maxpacket: 8 [ 78.624730][ T5473] usb 5-1: config 0 has no interfaces? [ 78.629361][ T5473] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 78.633634][ T5473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.637318][ T5473] usb 5-1: Product: syz [ 78.639189][ T5473] usb 5-1: Manufacturer: syz [ 78.641494][ T5473] usb 5-1: SerialNumber: syz [ 78.648825][ T5473] usb 5-1: config 0 descriptor?? [ 78.826205][ T6953] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 78.861181][ T24] usb 5-1: USB disconnect, device number 6 [ 79.009979][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 79.010015][ T40] audit: type=1400 audit(1777716364.302:534): avc: denied { connect } for pid=6969 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.122680][ T6978] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 79.195143][ T6982] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 79.199235][ T6984] veth0_to_team: entered promiscuous mode [ 79.204609][ T6984] veth0_to_team: left promiscuous mode [ 79.248407][ T6990] openvswitch: netlink: Message has 4096 unknown bytes. [ 79.336002][ T6998] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 79.423686][ T7006] __nla_validate_parse: 7 callbacks suppressed [ 79.423697][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 79.626699][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.350'. [ 79.674763][ T7018] netlink: 'syz.2.351': attribute type 29 has an invalid length. [ 79.679215][ T7018] netlink: 'syz.2.351': attribute type 29 has an invalid length. [ 79.684075][ T7018] netlink: 'syz.2.351': attribute type 32 has an invalid length. [ 79.686749][ T7018] netlink: 500 bytes leftover after parsing attributes in process `syz.2.351'. [ 79.751738][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 79.764083][ T7027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.355'. [ 79.795979][ T40] audit: type=1400 audit(1777716365.092:535): avc: denied { getopt } for pid=7028 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.803122][ T40] audit: type=1400 audit(1777716365.092:536): avc: denied { map } for pid=7028 comm="syz.2.356" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.811316][ T40] audit: type=1400 audit(1777716365.092:537): avc: denied { execute } for pid=7028 comm="syz.2.356" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.861652][ T7029] ip6t_srh: unknown srh invflags 51E8 [ 79.866366][ T40] audit: type=1400 audit(1777716365.162:538): avc: denied { connect } for pid=7028 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.900329][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 79.904491][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 79.907729][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.911732][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.915863][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.919318][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.924267][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.927926][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.010470][ T7036] nbd: illegal input index -2146435068 [ 80.141184][ T24] usb 8-1: usb_control_msg returned -32 [ 80.144810][ T24] usbtmc 8-1:16.0: can't read capabilities [ 80.190083][ T7054] vlan2: entered allmulticast mode [ 80.192747][ T7054] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 80.227487][ T40] audit: type=1400 audit(1777716365.522:539): avc: denied { setopt } for pid=7055 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.292383][ T40] audit: type=1400 audit(1777716365.592:540): avc: denied { mount } for pid=7055 comm="syz.0.361" name="/" dev="autofs" ino=18645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 80.294469][ T7060] overlay: filesystem on ./file0 not supported [ 80.301564][ T40] audit: type=1400 audit(1777716365.592:541): avc: denied { mounton } for pid=7055 comm="syz.0.361" path="/file0" dev="autofs" ino=16123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 80.318245][ T7060] tmpfs: Bad value for 'mpol' [ 80.498316][ T50] usb 8-1: USB disconnect, device number 5 [ 80.605609][ T1244] Bluetooth: Short BCSP packet [ 80.659105][ T40] audit: type=1400 audit(1777716365.952:542): avc: denied { ioctl } for pid=7072 comm="syz.3.368" path="socket:[16844]" dev="sockfs" ino=16844 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.796110][ T40] audit: type=1400 audit(1777716366.092:543): avc: denied { getopt } for pid=7078 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.873025][ T136] Bluetooth: Error in BCSP hdr checksum [ 81.141550][ T136] Bluetooth: Error in BCSP hdr checksum [ 81.394837][ T7101] bond2: option mode: invalid value (131) [ 81.399283][ T7101] bond2 (unregistering): Released all slaves [ 81.411149][ T1241] Bluetooth: Error in BCSP hdr checksum [ 81.568750][ T7116] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 81.595967][ T7117] bridge0: port 3(vlan2) entered disabled state [ 81.668390][ T7126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.387'. [ 81.768003][ T7133] XFS (loop0): SB validate failed with error -5. [ 81.895467][ T7146] ------------[ cut here ]------------ [ 81.897695][ T7146] 1 [ 81.897705][ T7146] WARNING: mm/page_alloc.c:5202 at __alloc_frozen_pages_noprof+0x23da/0x2bc0, CPU#0: syz.2.392/7146 [ 81.903393][ T7146] Modules linked in: [ 81.906071][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.2.392 Not tainted syzkaller #0 PREEMPT(full) [ 81.909242][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.913013][ T7146] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 81.915661][ T7146] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 74 4f 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 81.922177][ T7146] RSP: 0018:ffffc90003787760 EFLAGS: 00010246 [ 81.924196][ T7146] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 81.927291][ T7146] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 81.930674][ T7146] RBP: 0000000000000014 R08: 0000000000000005 R09: 0000000000000009 [ 81.933616][ T7146] R10: 0000000000000014 R11: 0000000000000000 R12: 0000000000040cc0 [ 81.936287][ T7146] R13: 1ffff920006f0f3b R14: 0000000000000014 R15: 1ffff920006f0f05 [ 81.938942][ T7146] FS: 00007fca48b886c0(0000) GS:ffff8880d6376000(0000) knlGS:0000000000000000 [ 81.942255][ T7146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.944547][ T7146] CR2: 000000110c303d65 CR3: 00000000390c0000 CR4: 0000000000352ef0 [ 81.947173][ T7146] Call Trace: [ 81.948338][ T7146] [ 81.949346][ T7146] ? find_held_lock+0x2b/0x80 [ 81.951399][ T7146] ? is_bpf_text_address+0x8a/0x1a0 [ 81.953889][ T7146] ? is_bpf_text_address+0x8a/0x1a0 [ 81.955651][ T7146] ? bpf_ksym_find+0x128/0x1c0 [ 81.957339][ T7146] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 81.959302][ T7146] ? is_bpf_text_address+0x94/0x1a0 [ 81.961552][ T7146] ? kernel_text_address+0x8d/0x100 [ 81.963231][ T7146] ? __pfx_widen_string+0x10/0x10 [ 81.964959][ T7146] ? __kernel_text_address+0xd/0x30 [ 81.966857][ T7146] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 81.969087][ T7146] ? arch_stack_walk+0xa6/0xf0 [ 81.970950][ T7146] ? stack_trace_save+0x8e/0xc0 [ 81.973272][ T7146] ? __pfx_stack_trace_save+0x10/0x10 [ 81.975279][ T7146] ? stack_depot_save_flags+0x27/0x9d0 [ 81.977507][ T7146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.979494][ T7146] ? policy_nodemask+0xed/0x4f0 [ 81.981165][ T7146] alloc_pages_mpol+0x1fb/0x540 [ 81.982775][ T7146] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 81.984627][ T7146] ? drm_syncobj_array_find+0x34/0x3b0 [ 81.986439][ T7146] ___kmalloc_large_node+0xe5/0x120 [ 81.988206][ T7146] __kmalloc_large_node_noprof+0x1c/0x70 [ 81.990069][ T7146] __kmalloc_noprof+0x5be/0x850 [ 81.992048][ T7146] drm_syncobj_array_find+0x34/0x3b0 [ 81.994247][ T7146] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 81.996875][ T7146] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 81.999149][ T7146] ? drm_dev_exit+0x41/0x60 [ 82.000749][ T7146] ? drm_dev_exit+0x41/0x60 [ 82.002264][ T7146] drm_ioctl_kernel+0x1f3/0x3e0 [ 82.004235][ T7146] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 82.007071][ T7146] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 82.009349][ T7146] drm_ioctl+0x5e6/0xc60 [ 82.011243][ T7146] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 82.014007][ T7146] ? __pfx_drm_ioctl+0x10/0x10 [ 82.015738][ T7146] ? selinux_file_ioctl+0x13b/0x290 [ 82.017602][ T7146] ? selinux_file_ioctl+0xb6/0x290 [ 82.019496][ T7146] ? __pfx_drm_ioctl+0x10/0x10 [ 82.021394][ T7146] __x64_sys_ioctl+0x18e/0x210 [ 82.023097][ T7146] do_syscall_64+0x10b/0xf80 [ 82.024694][ T7146] ? clear_bhb_loop+0x40/0x90 [ 82.026371][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.028370][ T7146] RIP: 0033:0x7fca47d9cdd9 [ 82.029963][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.036855][ T7146] RSP: 002b:00007fca48b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.039861][ T7146] RAX: ffffffffffffffda RBX: 00007fca48015fa0 RCX: 00007fca47d9cdd9 [ 82.043162][ T7146] RDX: 00002000000001c0 RSI: 00000000c01864cd RDI: 0000000000000007 [ 82.045812][ T7146] RBP: 00007fca47e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 82.048437][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.051155][ T7146] R13: 00007fca48016038 R14: 00007fca48015fa0 R15: 00007ffd957260d8 [ 82.054070][ T7146] [ 82.055179][ T7146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.057711][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.2.392 Not tainted syzkaller #0 PREEMPT(full) [ 82.060725][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.064118][ T7146] Call Trace: [ 82.065261][ T7146] [ 82.066328][ T7146] dump_stack_lvl+0x100/0x190 [ 82.067964][ T7146] vpanic+0x552/0x970 [ 82.069317][ T7146] ? __pfx_vpanic+0x10/0x10 [ 82.070868][ T7146] panic+0xd1/0xe0 [ 82.072197][ T7146] ? __pfx_panic+0x10/0x10 [ 82.073731][ T7146] check_panic_on_warn.cold+0x19/0x34 [ 82.075559][ T7146] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 82.077809][ T7146] __warn.cold+0x191/0x328 [ 82.079318][ T7146] __report_bug+0x296/0x3d0 [ 82.080805][ T7146] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 82.082925][ T7146] ? __pfx___report_bug+0x10/0x10 [ 82.084672][ T7146] ? __lock_acquire+0x4a5/0x2630 [ 82.086427][ T7146] ? __lock_acquire+0x4a5/0x2630 [ 82.088201][ T7146] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 82.090223][ T7146] report_bug+0xb2/0x220 [ 82.091606][ T7146] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 82.093690][ T7146] handle_bug+0x16a/0x2a0 [ 82.095131][ T7146] exc_invalid_op+0x17/0x50 [ 82.096749][ T7146] asm_exc_invalid_op+0x1a/0x20 [ 82.098366][ T7146] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 82.100628][ T7146] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 74 4f 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 82.107102][ T7146] RSP: 0018:ffffc90003787760 EFLAGS: 00010246 [ 82.109154][ T7146] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 82.111810][ T7146] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 82.114490][ T7146] RBP: 0000000000000014 R08: 0000000000000005 R09: 0000000000000009 [ 82.117234][ T7146] R10: 0000000000000014 R11: 0000000000000000 R12: 0000000000040cc0 [ 82.119853][ T7146] R13: 1ffff920006f0f3b R14: 0000000000000014 R15: 1ffff920006f0f05 [ 82.122528][ T7146] ? find_held_lock+0x2b/0x80 [ 82.124132][ T7146] ? is_bpf_text_address+0x8a/0x1a0 [ 82.125841][ T7146] ? is_bpf_text_address+0x8a/0x1a0 [ 82.127597][ T7146] ? bpf_ksym_find+0x128/0x1c0 [ 82.129125][ T7146] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 82.131309][ T7146] ? is_bpf_text_address+0x94/0x1a0 [ 82.133504][ T7146] ? kernel_text_address+0x8d/0x100 [ 82.135651][ T7146] ? __pfx_widen_string+0x10/0x10 [ 82.137766][ T7146] ? __kernel_text_address+0xd/0x30 [ 82.139556][ T7146] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 82.141657][ T7146] ? arch_stack_walk+0xa6/0xf0 [ 82.143255][ T7146] ? stack_trace_save+0x8e/0xc0 [ 82.144893][ T7146] ? __pfx_stack_trace_save+0x10/0x10 [ 82.146688][ T7146] ? stack_depot_save_flags+0x27/0x9d0 [ 82.148602][ T7146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.150583][ T7146] ? policy_nodemask+0xed/0x4f0 [ 82.152300][ T7146] alloc_pages_mpol+0x1fb/0x540 [ 82.154052][ T7146] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 82.155906][ T7146] ? drm_syncobj_array_find+0x34/0x3b0 [ 82.157780][ T7146] ___kmalloc_large_node+0xe5/0x120 [ 82.159524][ T7146] __kmalloc_large_node_noprof+0x1c/0x70 [ 82.161422][ T7146] __kmalloc_noprof+0x5be/0x850 [ 82.163092][ T7146] drm_syncobj_array_find+0x34/0x3b0 [ 82.164975][ T7146] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 82.166957][ T7146] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 82.169178][ T7146] ? drm_dev_exit+0x41/0x60 [ 82.170717][ T7146] ? drm_dev_exit+0x41/0x60 [ 82.172273][ T7146] drm_ioctl_kernel+0x1f3/0x3e0 [ 82.173941][ T7146] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 82.176162][ T7146] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 82.178034][ T7146] drm_ioctl+0x5e6/0xc60 [ 82.179471][ T7146] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 82.181767][ T7146] ? __pfx_drm_ioctl+0x10/0x10 [ 82.183400][ T7146] ? selinux_file_ioctl+0x13b/0x290 [ 82.185200][ T7146] ? selinux_file_ioctl+0xb6/0x290 [ 82.186894][ T7146] ? __pfx_drm_ioctl+0x10/0x10 [ 82.188511][ T7146] __x64_sys_ioctl+0x18e/0x210 [ 82.190089][ T7146] do_syscall_64+0x10b/0xf80 [ 82.191612][ T7146] ? clear_bhb_loop+0x40/0x90 [ 82.193256][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.195430][ T7146] RIP: 0033:0x7fca47d9cdd9 [ 82.197062][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.203320][ T7146] RSP: 002b:00007fca48b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.206156][ T7146] RAX: ffffffffffffffda RBX: 00007fca48015fa0 RCX: 00007fca47d9cdd9 [ 82.208855][ T7146] RDX: 00002000000001c0 RSI: 00000000c01864cd RDI: 0000000000000007 [ 82.211470][ T7146] RBP: 00007fca47e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 82.214157][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.216832][ T7146] R13: 00007fca48016038 R14: 00007fca48015fa0 R15: 00007ffd957260d8 [ 82.219580][ T7146] [ 82.221489][ T7146] Kernel Offset: disabled [ 82.223293][ T7146] Rebooting in 86400 seconds..