last executing test programs: 3m22.216060322s ago: executing program 32 (id=518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000580)={0x0, 0x0}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x9e, 0x0, 0xb}]}) 3m21.900620614s ago: executing program 2 (id=527): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000090) 3m21.900444353s ago: executing program 2 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4}}}}}}}}, 0x36) 3m21.716484678s ago: executing program 2 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) 3m21.716292777s ago: executing program 2 (id=531): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000180)={{}, 0x12, 0xb8cb, 0xfffffe07}, 0x18) 3m21.635636695s ago: executing program 2 (id=533): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m21.575613703s ago: executing program 2 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='h', 0x1) 3m5.643065998s ago: executing program 33 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='h', 0x1) 3m5.638097576s ago: executing program 3 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x70, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x10}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x70}}, 0x20000014) 3m5.541910181s ago: executing program 3 (id=745): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40004, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x79a1, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0xd, 0x0, 0x2, 0x0, 0x3, 0x5, 0x80000000, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x18c, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xcaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3m5.541752639s ago: executing program 3 (id=746): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x46) 3m5.484630696s ago: executing program 3 (id=749): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 3m5.43573283s ago: executing program 3 (id=750): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2054) 3m5.206330207s ago: executing program 3 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@exp_fastopen={0xfe, 0x0, 0xf989, "c65a8d9fb516a7084b"}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3m5.177261231s ago: executing program 34 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@exp_fastopen={0xfe, 0x0, 0xf989, "c65a8d9fb516a7084b"}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3m2.444526565s ago: executing program 4 (id=756): recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{0x0, 0x60}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x3b83}], 0x1, 0x20003100, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 3m2.426268697s ago: executing program 4 (id=758): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m2.371230188s ago: executing program 4 (id=762): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}}}}}}, 0x0) listen(r0, 0x10001) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x8}}}}}}, 0x0) 3m2.363972621s ago: executing program 4 (id=765): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x48, r1, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @broadcast, @from_mac}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x15, 0x99, 0x8}, @val={0x76, 0x6, {0x7f, 0x2, 0x6, 0x5}}}}}}]}, 0x48}}, 0x0) 3m2.280952339s ago: executing program 4 (id=767): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 3m2.267523234s ago: executing program 4 (id=769): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m47.251040362s ago: executing program 35 (id=769): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m40.780734471s ago: executing program 5 (id=1004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="0100e4a5c9088e98cba400006cf607d49fd2cead41f274b576ba0aeaa5ee09b127e215a619e5ced109bddab35d698eae3ba55fabd9615aee7361ae54"]) 2m40.66560531s ago: executing program 5 (id=1008): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) 2m40.423940104s ago: executing program 5 (id=1013): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) 2m40.207495882s ago: executing program 5 (id=1016): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2m40.149210291s ago: executing program 5 (id=1017): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r0, &(0x7f0000000000)='D.', 0x4000, 0x40, 0x0, 0x0) 2m39.915074295s ago: executing program 5 (id=1020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 2m39.847636032s ago: executing program 36 (id=1020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 2m36.655528277s ago: executing program 7 (id=1072): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0xa, 0x0, 0x0, r1}) 2m36.608794817s ago: executing program 7 (id=1074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xe}, {0x0, 0x9}, {0xffe0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20040054) 2m36.39002068s ago: executing program 7 (id=1078): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, 0x0, 0x5e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) syz_open_procfs(0x0, 0x0) 2m36.249335818s ago: executing program 7 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 2m36.2491273s ago: executing program 7 (id=1080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x40000003, 0x6}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x40000000, 0x0, 0x0, 0x40000003, 0x566e6558, 0x65584d4d, 0x4d4d566e}, {0x40000003, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m35.976051205s ago: executing program 7 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) close(0x3) 2m35.923252089s ago: executing program 37 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) close(0x3) 2m33.456138921s ago: executing program 1 (id=1102): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0xb8, @f_listen={0x0, 0x3, 0x4, 0x82, 0x3, 0xf, 0x7, {0x5b, "4b4408bda439f9c1cb419601eb3e7417b1a51941ef575a0baebeadbe82e36dacca4eabba63887093caaff76d495f54e34a6d5767e9b55bd89e932ae4acd651c252e6158cc53476c591bf239a6efdc44432278b7c2ed48e4698d77a"}, 0xca, 0x4, 0x5, 0x8, 0x50, "aad7592e780a6f6c8488940edf4dfba50a4f774d16b287ea417c279ccc1b4940a986402a3a34b1f1da267f2a7b2090b0133de15bb3706611c21da944b7c505656a0010fcc847ba032b0e72d6e9a55c8f"}}, 0xbb) 2m32.57013799s ago: executing program 1 (id=1110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000001000)={0x0, &(0x7f0000002000)=[@code={0xa, 0x31, {"0f20e0480d000004000f22e031c90f01d083c8060f01d1b8000000f0c5f81008"}}], 0x31}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m32.366022581s ago: executing program 1 (id=1113): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) 2m32.140923344s ago: executing program 1 (id=1120): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f0000001080)='./sys_link\x00', &(0x7f0000001040)='fusectl\x00', 0x11, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 2m32.044866919s ago: executing program 1 (id=1121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) close(0x3) 2m31.746514848s ago: executing program 1 (id=1129): syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xff, 0x0, 0x428}}}, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)="627819d151910435fe7bee89b315461e88752817e1738a0f068fefd2b00519bdc56bc6b4058c7d7230b7cc21a28204291efaa7d85cffe71e6dfd3392b554a06aa980c942e790023c79fb171e3e2c9e3fd3947603b2519634cc052ebe82b19cff54e9a3e8b0100cfe64e82659e0c2177b6c8007f40db418734fdfa676c0b83d448f3e7973d5b5672f3f20", 0x8a}, {&(0x7f0000000d00)="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", 0x82a}], 0x2) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x5) socket$nl_route(0x10, 0x3, 0x0) 2m31.701287921s ago: executing program 38 (id=1129): syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xff, 0x0, 0x428}}}, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)="627819d151910435fe7bee89b315461e88752817e1738a0f068fefd2b00519bdc56bc6b4058c7d7230b7cc21a28204291efaa7d85cffe71e6dfd3392b554a06aa980c942e790023c79fb171e3e2c9e3fd3947603b2519634cc052ebe82b19cff54e9a3e8b0100cfe64e82659e0c2177b6c8007f40db418734fdfa676c0b83d448f3e7973d5b5672f3f20", 0x8a}, {&(0x7f0000000d00)="c2755213dbad64236da0fc0aa7b51a685d756fe6aa4a3d3ea64c6804f422f5fc7d1411126a4a32e3b14605ecc469d3202854e773452d2f327ac56c3094e08ef282c1e9a251af0e786ccb25e76041b19b7ce5f386ec57186f7f2e0c013279ed8e7c60fa7b9bd014af4e30626214ce5c721af14a9c1c223c19db697099d43ba0467fcccc207a8a6a35d445ff537d0e4da0ef8cbf0d4133b6cc5a3555cf42bbedfcf1a3f79b9f4e391f436cb4fb642aa7a6c3f30ffb41689739f159eee42a56bc2a0accab2a9cb4d190575d76129c22b125d8fc581186cdcebe2ecc2cb5cbbfd0a5ff9af2924874dfa971c2e60dbf8fa5240395d1d6981f6cc7fb6d3ab0de5985fad7a81f6537c343f2f4a79a7dabb112921e29b75f580500cff6c16e268a786ac88aef19afc8ed6b5df5575c25235e15a7ad3029da751c74d2192ee7cde86dfaccf10fbf9bb3d4d183379392c2629c48f9f0f438c79cf2e64b20d5ed605df2dbb2a38243b4059fb4047ae762e4c0b2708a5f9024853f349cdcef667f6e98d57025bdbee5139cbe36860464aee8558fc7bd8c6540e3819356699fa7e5548644201f2ba59cfe905e85fd3b98be272acb3a287541e640c1a5bf41ca9f730bfd32e7752b1caf5153dd178c3fb9424c1906857f60ea7b457e9a017c25eff0255233f874bf68af523276b7a5da0d8bca1b18e8ae67d1a0f9fc40b6c4e384e44886d960f79e07cbcf5286a81fdd428cc3250770666d62b725f427e2eacf06397c0388cc318cb6c186722526a251faeb85163250c7c8720e86acfc9821b1de41eb5ca00486ec174159f19d9e8ef17071b489492a517bbe08ba75064e2eb1f6f17d9f71da0a6e42081375011554eb1ce09416785b39281269edfe43de5b50e2eb5606b5afee9e71a28ed072184e22f45343d86cf6997aa5322b40ccf1b04b709542c9e3824a7f75079193900cc334c48f469538e09c041e2b8855a9cd052c479af1a0175ab68870bc8211d5540d722d0287da5aa5026776b9cb7390f6f3f5b0531687ba4d054c2d0bf5cfe9d0d6c225426d349fd4e8017e75f085e94312db2fdcce850915da525e6d3f483560f930988048732d8023eaae030c38e9bf9a79cb27b61ae2317b32188d54dac6b73a474618d69fb5aea42de5c8475341e4556f7db0b745e6d75061ba0456fa8ba50ae398ec007a01c5081bbdedd9795e649afb2c21500d0e4402fa9b233f7eb8f843d54b739d2fb104f93326a2601975d00b165a426a0d8041e62841c232da6aa0d3b2ac080eb51c5d5d1fc84b18ab4445327c0ac23bb1d239e7a83940e5ff114f2944de32f7de11dd723eb83da4847adb2c982225ec3871ea841f48d230280aae48ec8e2c5aa411a2b947acf5fcb6adb24474f19b9b5d4b8062c14c89558aaa16fa57a398a8a64f78d96a8d108d892553707ea879c9b254beff8d9e7c064f0be67faa9957079abf318a1b389f2ee507772a99a4a37d7a5ba3ac4099ff57e95076ff54bc1741bda0629266ae5d0beedb43dd2a376b6a0a972a6d0cdd37fbbe0be6be63fa48cbcf2d953e2202b40096b14f898fc7e072dadbf96410e78d3f5f217e41dc88ef47577e74b165b1c0186660a2c84a0ec77626fbe290b0f4ac15864018210601e0589d5e47095836c76e2e738b52b1f39864afbaa24a7460223db549d236a2eebe4b85db24b5a6b1f3b5eb4e3f001f365cd269b91c4bb547ccb3a599cec74878b63b6494aa13978836d1730665fe2ad8e5321053ff412ae93bc56ecffbd539c835740853e4fa08f378ca227b5a616aede6618b2899f74f721fa41d95e987340dee0f0293f0c21eb826d2af1d1012c7458bf81ef476b9fbd7bbb1043915e9579b2c7dd81f5d0a22f96573e7df436cafa7d39ffb0aa5afbf71a42df5bfb105026da5a00ade802bec81cdbde5021dc2ee40c8cdd4e507e79d8f41fc36f6aa80210f1054a05bfee31213f3c5291fbcf80c033e092988f9a7caf2059bde1e9ae90f63e4662cd4a01075793c00566a96879fb6b9253e74aea9c45c8dc2f9d37e6fea9ef4136674c2be0761399b9b1ae3ce62c43ecb59c9dd1e50c9f0716de492144c92d38b836db34f7157a8e52875a4e5228be3c4bca57ad35459ba113c13d918ab32e69a4e6eb01e0a7602e70ab30178dffb04e646413b8d3348d878db71a49f409de4c473689bd7af8d17a31ef9c182a95afa2781ec18100bf0e84edc5d65fda1f39f2f09c1adbd66f0d4725fb77e8adbf33789c858821e57ac4fef1dfdda9b1048507aee74e3103ccffe2d53482f2fad7c3758f4c8de0dc969881dc8cc81c85c4547628d057022203dbe2604ad214324c48d8baf44073f7d116adc169f1f10b42445fba98b1b5f5527fef47622fbc5217acdeffe5642acedad75fa0c3d29f982e7818852d3b3d1ab785d2373485d0e37cb10cfee5fd8d2a594a199bd195bc056520b964ace7b43d011e157d210addc231309fa8766fe64441e6d2e254197abe602e3812304afd3091bc7e884c8658b0b43979555f0b8247e2cb3b831ddeaa4669e4789c26bf6e13f27fdc4c61b72c4d59c6f4e7e8fb4511f7b40bc3cecc10afa60965ebb2bffaf9841c25c54415c8fd58625b0820902d8a7a2b642415b8cb75210673fddad528a12d076716b775e4588f6aadba3876c32835b741bc23cd0643c9c8b39ece58bfcc5f03b383ad9df490ee73d665704bf6bfadbeec260199779df514165ab0c4f2a39e28451bc590bcfb888c441054f3adad0f954f3b32727fe32c71bd8cd7f822f2ebb6a5afd2aff17394bb4566e5abb5061ed74931a1ec97e1d471fb12aed43ebe6985acab9791268c4955c341f44754535d6acc0766df9bc3f087a35ce277674dd811fc398bcc836619f2722f6d2ae733096dec1bc033750290057fe0a17aebf86b8c74ed214ac4d68a56aa153a08a46ab2f996ba95930be56a9", 0x82a}], 0x2) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x5) socket$nl_route(0x10, 0x3, 0x0) 1.351867274s ago: executing program 9 (id=4679): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 1.239406733s ago: executing program 9 (id=4682): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) 980.006137ms ago: executing program 9 (id=4684): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x10001, '\x00', @p_u16=0x0}}) 895.243696ms ago: executing program 0 (id=4688): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 832.52233ms ago: executing program 9 (id=4699): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000440)) 825.116155ms ago: executing program 6 (id=4690): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000280)={0x40, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f8}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac05, 0xfac06]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x14004040}, 0x810) 760.244626ms ago: executing program 0 (id=4694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x30, r1, 0x101, 0x4000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}}, 0x240448d0) 757.702277ms ago: executing program 9 (id=4703): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/104, 0x68) 675.555216ms ago: executing program 0 (id=4696): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbf3, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x48010) 675.398482ms ago: executing program 6 (id=4697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb1/power/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='au', 0x2) 518.035367ms ago: executing program 6 (id=4698): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x6, 0x50565559, 0x1, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) 514.781339ms ago: executing program 0 (id=4708): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) 513.155244ms ago: executing program 8 (id=4700): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000440)=[r1], 0x0, 0x1}) 423.424794ms ago: executing program 8 (id=4701): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 423.286312ms ago: executing program 0 (id=4702): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 418.310778ms ago: executing program 6 (id=4711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 297.109722ms ago: executing program 8 (id=4704): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)}) 139.269215ms ago: executing program 0 (id=4705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002600), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 139.089646ms ago: executing program 8 (id=4706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x30, r1, 0x101, 0x4000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}}, 0x240448d0) 139.002665ms ago: executing program 6 (id=4707): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r0, &(0x7f0000000000)='\x00\x00c', 0x4000) 92.173747ms ago: executing program 8 (id=4709): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) 78.702886ms ago: executing program 9 (id=4710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="102a05f4ffffff000c001a800800028004000180300012800b0001006272696467650000200002800800050001da000005002c00020000000c0021000000000000000080"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) 213.763µs ago: executing program 6 (id=4712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x3c, r1, 0xb97534d5fe9704cf, 0x3, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x582}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) 0s ago: executing program 8 (id=4713): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004"], 0x4c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): em permissive=1 [ 172.054657][ T42] audit: type=1400 audit(1785745668.535:839): avc: denied { unmount } for pid=7696 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 172.645606][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 172.962973][T10713] binder_alloc: 10712: binder_alloc_buf, no vma [ 173.045686][ T42] audit: type=1400 audit(1785745669.525:840): avc: denied { bind } for pid=10719 comm="syz.0.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.052059][ T42] audit: type=1400 audit(1785745669.525:841): avc: denied { listen } for pid=10719 comm="syz.0.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.059398][ T42] audit: type=1400 audit(1785745669.545:842): avc: denied { accept } for pid=10719 comm="syz.0.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.065742][ T42] audit: type=1400 audit(1785745669.545:843): avc: denied { setopt } for pid=10719 comm="syz.0.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.071949][ T42] audit: type=1400 audit(1785745669.545:844): avc: denied { read } for pid=10719 comm="syz.0.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.203710][ T42] audit: type=1400 audit(1785745669.685:845): avc: denied { mounton } for pid=10724 comm="syz.0.1661" path="/140/file0" dev="tmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 173.616696][T10648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.783629][ T42] audit: type=1400 audit(1785745670.265:846): avc: denied { mount } for pid=10740 comm="syz.9.1667" name="/" dev="configfs" ino=2116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 173.793345][ T42] audit: type=1400 audit(1785745670.275:847): avc: denied { write } for pid=10740 comm="syz.9.1667" name="strings" dev="configfs" ino=8161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.134909][ T5743] Bluetooth: hci0: Malformed LE Event: 0x1d [ 174.171118][T10764] syzkaller0: entered promiscuous mode [ 174.172864][T10764] syzkaller0: entered allmulticast mode [ 174.180286][T10764] tipc: Started in network mode [ 174.181850][T10764] tipc: Node identity ca1b26477bf3, cluster identity 4711 [ 174.184276][T10764] tipc: Enabled bearer , priority 0 [ 174.189487][T10763] tipc: Resetting bearer [ 174.203363][T10763] tipc: Disabling bearer [ 174.340419][T10772] gadgetfs: bound to dummy_udc driver [ 174.577977][ T1008] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 174.581334][ C0] gadgetfs: connected [ 174.582782][ T1008] gadgetfs: disconnected [ 174.966751][T10807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.028450][T10810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.057866][T10809] kvm: pic: level sensitive irq not supported [ 175.102337][T10802] syz.8.1688 (10802): drop_caches: 2 [ 175.130191][T10815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.162286][T10819] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 175.165703][T10819] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 175.186745][T10821] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 175.189926][T10821] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 175.387487][ T5847] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 175.549210][ T5847] usb 14-1: Using ep0 maxpacket: 16 [ 175.552941][ T5847] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 175.559962][ T5847] usb 14-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 175.562894][ T5847] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.565432][ T5847] usb 14-1: Product: syz [ 175.566833][ T5847] usb 14-1: Manufacturer: syz [ 175.568712][ T5847] usb 14-1: SerialNumber: syz [ 175.577658][ T5847] usb 14-1: config 0 descriptor?? [ 175.581680][ T5847] em28xx 14-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 175.584726][ T5847] em28xx 14-1:0.0: DVB interface 0 found: bulk [ 176.135852][T10834] syzkaller0: entered promiscuous mode [ 176.138378][T10834] syzkaller0: entered allmulticast mode [ 176.192921][ T5847] em28xx 14-1:0.0: unknown em28xx chip ID (0) [ 176.362632][T10838] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 176.608446][ T5847] em28xx 14-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 176.611352][ T5847] em28xx 14-1:0.0: board has no eeprom [ 177.090824][T10845] kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 177.100452][T10845] kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 177.106532][T10845] kvm: requested 27657 ns i8254 timer period limited to 200000 ns [ 177.111225][T10845] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 177.117961][T10845] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 177.126578][T10845] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 177.182244][T10845] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 177.186164][T10845] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 177.190223][T10845] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 177.194945][T10845] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 177.477937][T10855] block device autoloading is deprecated and will be removed. [ 177.488512][ T1008] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 177.537234][T10860] binder_alloc: 10859: pid 10859 spamming oneway? 1 buffers allocated for a total size of 4096 [ 177.633828][T10817] em28xx 14-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 177.639085][ T1008] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.643599][ T1008] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.648764][ T1008] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 177.651699][ T1008] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.654164][ T1008] usb 11-1: Product: syz [ 177.655430][ T1008] usb 11-1: Manufacturer: syz [ 177.656845][ T1008] usb 11-1: SerialNumber: syz [ 177.662381][ T1008] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 177.667256][ T1008] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 177.672487][ T1008] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 177.697520][ T5847] em28xx 14-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 177.702300][ T5847] em28xx 14-1:0.0: dvb set to bulk mode. [ 177.705187][ T5739] em28xx 14-1:0.0: Binding DVB extension [ 177.714739][ T5847] usb 14-1: USB disconnect, device number 11 [ 177.726459][ T5847] em28xx 14-1:0.0: Disconnecting em28xx [ 177.750438][ T5739] em28xx 14-1:0.0: Registering input extension [ 177.752936][ T5847] em28xx 14-1:0.0: Closing input extension [ 177.790464][ T5847] em28xx 14-1:0.0: Freeing device [ 178.174143][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 178.174154][ T42] audit: type=1400 audit(1785745674.655:853): avc: denied { read } for pid=10871 comm="syz.8.1713" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.183656][ T42] audit: type=1400 audit(1785745674.655:854): avc: denied { open } for pid=10871 comm="syz.8.1713" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.193027][ T42] audit: type=1400 audit(1785745674.655:855): avc: denied { write } for pid=10871 comm="syz.8.1713" name="header" dev="configfs" ino=37992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.202159][ T42] audit: type=1400 audit(1785745674.655:856): avc: denied { write } for pid=10871 comm="syz.8.1713" name="fs" dev="configfs" ino=37999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.210980][ T42] audit: type=1400 audit(1785745674.655:857): avc: denied { write } for pid=10871 comm="syz.8.1713" name="fs" dev="configfs" ino=37999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.218929][ T42] audit: type=1400 audit(1785745674.675:858): avc: denied { write } for pid=10871 comm="syz.8.1713" name="hs" dev="configfs" ino=38000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.227642][ T42] audit: type=1400 audit(1785745674.675:859): avc: denied { write } for pid=10871 comm="syz.8.1713" name="hs" dev="configfs" ino=38000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.240115][ T42] audit: type=1400 audit(1785745674.675:860): avc: denied { write } for pid=10871 comm="syz.8.1713" name="uvc.usb0" dev="configfs" ino=37977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.248391][ T42] audit: type=1400 audit(1785745674.675:861): avc: denied { read } for pid=10871 comm="syz.8.1713" name="h" dev="configfs" ino=46000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 178.256328][ T42] audit: type=1400 audit(1785745674.675:862): avc: denied { write } for pid=10871 comm="syz.8.1713" name="uvc.usb0" dev="configfs" ino=37977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.304697][T10879] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 178.642128][T10902] syzkaller0: entered promiscuous mode [ 178.644381][T10902] syzkaller0: entered allmulticast mode [ 178.867467][T10909] syzkaller0: entered promiscuous mode [ 178.869288][T10909] syzkaller0: entered allmulticast mode [ 178.971490][T10905] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x04 [ 179.023511][T10914] syzkaller0: entered promiscuous mode [ 179.027432][T10914] syzkaller0: entered allmulticast mode [ 179.183991][T10922] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 179.395607][T10938] tipc: Started in network mode [ 179.398441][T10938] tipc: Node identity 080211000001, cluster identity 4711 [ 179.402629][T10938] tipc: Enabled bearer , priority 0 [ 179.826547][T10966] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 180.076631][T10929] orangefs_mount: mount request failed with -4 [ 180.127064][T10977] syzkaller0: entered promiscuous mode [ 180.129276][T10977] syzkaller0: entered allmulticast mode [ 180.217202][T10983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.276388][T10987] syzkaller0: entered promiscuous mode [ 180.278356][T10987] syzkaller0: entered allmulticast mode [ 180.484637][T10987] tipc: Enabled bearer , priority 0 [ 180.489284][T10986] tipc: Resetting bearer [ 180.503078][T10986] tipc: Disabling bearer [ 180.530849][ T61] tipc: Node number set to 134418688 [ 180.587865][T10853] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 180.596785][ T7799] usb 11-1: USB disconnect, device number 17 [ 180.608797][ T7799] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 180.614335][ T7799] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 180.619129][ T7799] ti_usb_3410_5052 11-1:2.0: device disconnected [ 181.118359][T11000] FAULT_INJECTION: forcing a failure. [ 181.118359][T11000] name fail_futex, interval 1, probability 0, space 0, times 1 [ 181.124587][T11000] CPU: 0 UID: 0 PID: 11000 Comm: syz.9.1770 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.124604][T11000] Tainted: [L]=SOFTLOCKUP [ 181.124608][T11000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.124614][T11000] Call Trace: [ 181.124627][T11000] [ 181.124631][T11000] dump_stack_lvl+0x100/0x190 [ 181.124739][T11000] should_fail_ex.cold+0x5/0xa [ 181.124760][T11000] should_fail_futex+0x4c/0x60 [ 181.124793][T11000] __x64_sys_futex+0x1f0/0x4d0 [ 181.124826][T11000] ? exc_page_fault+0x6f/0xd0 [ 181.124881][T11000] ? __pfx___x64_sys_futex+0x10/0x10 [ 181.124902][T11000] do_syscall_64+0x115/0x870 [ 181.124915][T11000] ? clear_bhb_loop+0x40/0x90 [ 181.124927][T11000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.124939][T11000] RIP: 0033:0x7fb91319e019 [ 181.124949][T11000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.124976][T11000] RSP: 002b:00007ffff213d598 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.124993][T11000] RAX: ffffffffffffffda RBX: 000000000002c313 RCX: 00007fb91319e019 [ 181.125000][T11000] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb913425fac [ 181.125006][T11000] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 181.125012][T11000] R10: 00007ffff213d6a0 R11: 0000000000000246 R12: 00007ffff213d6c0 [ 181.125018][T11000] R13: 00007fb913425fac R14: 000000000002c345 R15: 00007ffff213d6a0 [ 181.125032][T11000] [ 181.125293][T11003] syzkaller0: entered promiscuous mode [ 181.125377][T11000] FAULT_INJECTION: forcing a failure. [ 181.125377][T11000] name fail_futex, interval 1, probability 0, space 0, times 0 [ 181.129219][T11003] syzkaller0: entered allmulticast mode [ 181.130755][T11000] CPU: 0 UID: 0 PID: 11000 Comm: syz.9.1770 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.130780][T11000] Tainted: [L]=SOFTLOCKUP [ 181.130783][T11000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.130790][T11000] Call Trace: [ 181.130793][T11000] [ 181.130797][T11000] dump_stack_lvl+0x100/0x190 [ 181.130814][T11000] should_fail_ex.cold+0x5/0xa [ 181.130828][T11000] get_futex_key+0x1d2/0x14f0 [ 181.130845][T11000] ? __pfx_get_futex_key+0x10/0x10 [ 181.130860][T11000] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 181.130873][T11000] ? hrtimer_try_to_cancel.part.0+0x194/0x600 [ 181.130893][T11000] futex_wake+0xf4/0x5e0 [ 181.130903][T11000] ? futex_wait+0x11e/0x370 [ 181.130915][T11000] ? __pfx_futex_wake+0x10/0x10 [ 181.130932][T11000] do_futex+0x2b2/0x440 [ 181.130948][T11000] ? __pfx_do_futex+0x10/0x10 [ 181.130963][T11000] ? ktime_get+0x22c/0x320 [ 181.130975][T11000] ? lockdep_hardirqs_on+0x78/0x100 [ 181.130989][T11000] __x64_sys_futex+0x34f/0x4d0 [ 181.131007][T11000] ? __pfx___x64_sys_futex+0x10/0x10 [ 181.131041][T11000] do_syscall_64+0x115/0x870 [ 181.131055][T11000] ? clear_bhb_loop+0x40/0x90 [ 181.131068][T11000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.131078][T11000] RIP: 0033:0x7fb91319e019 [ 181.131088][T11000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.131098][T11000] RSP: 002b:00007ffff213d598 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.131108][T11000] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb91319e019 [ 181.131115][T11000] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb913425fa8 [ 181.131121][T11000] RBP: 0000000000001ec8 R08: 0000000000000004 R09: 0000000000000000 [ 181.131127][T11000] R10: 00007fb913425fa0 R11: 0000000000000246 R12: 0000000000000000 [ 181.131133][T11000] R13: 00007fb913425fac R14: 00007fb913425fa8 R15: 00007fb913425fa0 [ 181.131146][T11000] [ 181.185953][T11000] FAULT_INJECTION: forcing a failure. [ 181.185953][T11000] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 181.257221][T11000] CPU: 0 UID: 0 PID: 11000 Comm: syz.9.1770 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.257240][T11000] Tainted: [L]=SOFTLOCKUP [ 181.257243][T11000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.257250][T11000] Call Trace: [ 181.257254][T11000] [ 181.257258][T11000] dump_stack_lvl+0x100/0x190 [ 181.257276][T11000] should_fail_ex.cold+0x5/0xa [ 181.257304][T11000] _copy_from_user+0x2e/0xd0 [ 181.257360][T11000] get_timespec64+0x8d/0x240 [ 181.257373][T11000] ? __pfx_get_timespec64+0x10/0x10 [ 181.257390][T11000] __x64_sys_clock_nanosleep+0x1ce/0x480 [ 181.257404][T11000] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 181.257420][T11000] do_syscall_64+0x115/0x870 [ 181.257434][T11000] ? clear_bhb_loop+0x40/0x90 [ 181.257447][T11000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.257459][T11000] RIP: 0033:0x7fb91315e84e [ 181.257469][T11000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.257480][T11000] RSP: 002b:00007ffff213d518 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 181.257490][T11000] RAX: ffffffffffffffda RBX: 000055558020e500 RCX: 00007fb91315e84e [ 181.257497][T11000] RDX: 00007ffff213d570 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.257503][T11000] RBP: 00007fb913427da0 R08: 0000000000000000 R09: 0000000000000000 [ 181.257509][T11000] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002c63e [ 181.257515][T11000] R13: 00007fb91342609c R14: 000000000002c385 R15: 00007fb913426090 [ 181.257528][T11000] [ 181.837421][ T5845] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 181.995146][ T5845] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 181.998647][ T5845] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 182.005024][ T5845] usb 11-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 182.012747][ T5845] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.020803][ T5845] spcp8x5 11-1:1.0: SPCP8x5 converter detected [ 182.028113][ T5845] usb 11-1: SPCP8x5 converter now attached to ttyUSB0 [ 182.298821][T11022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29 [ 182.398299][T11009] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 182.398717][T11020] kvm: pic: single mode not supported [ 182.401221][T11009] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 182.406169][T11009] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 182.488189][T11009] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 182.492711][T11009] SPCP8x5 ttyUSB0: Set UART format 0x0 failed (error = -32) [ 182.801858][T11046] syzkaller0: entered promiscuous mode [ 182.803720][T11046] syzkaller0: entered allmulticast mode [ 183.167552][ T1008] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 183.274820][T11033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.349841][ T1008] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.355057][ T1008] usb 14-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 183.359810][ T1008] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.362602][ T1008] usb 14-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.366174][ T1008] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 183.370260][ T1008] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.374975][ T1008] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.378040][ T1008] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.380517][ T1008] usb 14-1: Product: syz [ 183.381881][ T1008] usb 14-1: Manufacturer: syz [ 183.387539][T11048] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 183.397020][ T1008] cdc_wdm 14-1:1.0: skipping garbage [ 183.399461][ T1008] cdc_wdm 14-1:1.0: skipping garbage [ 183.404709][ T1008] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 183.406513][ T1008] cdc_wdm 14-1:1.0: Unknown control protocol [ 183.611542][ C0] wdm_int_callback: 35 callbacks suppressed [ 183.611558][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 183.615559][ C0] wdm_int_callback: 35 callbacks suppressed [ 183.615570][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 183.619450][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 183.621519][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 183.623626][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 183.625724][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 183.628036][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 183.630241][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 183.632524][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 183.634645][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 183.636769][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 183.638837][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 183.641017][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 183.643127][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 183.645288][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 183.647390][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 183.649552][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 183.651648][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 183.653821][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 183.655941][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 183.659969][ T1486] usb 14-1: USB disconnect, device number 12 [ 183.667754][T11071] UBIFS error (pid: 11071): cannot open "ubi0_0", error -19 [ 183.885047][T11079] syzkaller0: entered promiscuous mode [ 183.889354][T11079] syzkaller0: entered allmulticast mode [ 184.046939][T11088] syzkaller0: entered allmulticast mode [ 184.182119][T11092] netlink: 'syz.9.1806': attribute type 1 has an invalid length. [ 184.218107][T11092] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 184.231473][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1806'. [ 184.237262][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 184.246181][T11092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.357402][ T5823] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 184.490957][ T5743] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 184.509614][ T7799] usb 11-1: USB disconnect, device number 18 [ 184.521284][ T7799] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 184.525301][ T7799] spcp8x5 11-1:1.0: device disconnected [ 184.815122][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 184.815168][ T42] audit: type=1400 audit(1785745681.295:866): avc: denied { node_bind } for pid=11107 comm="syz.6.1812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 185.032071][T11114] nicvf0: renamed from team0 (while UP) [ 185.040329][T11114] nicvf0: Cannot enslave team device to itself [ 185.042523][T11114] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 185.094291][T11086] Set syz1 is full, maxelem 65536 reached [ 185.159468][T11120] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1815'. [ 185.162688][T11120] netlink: 144 bytes leftover after parsing attributes in process `syz.9.1815'. [ 185.168891][T11120] netlink: 144 bytes leftover after parsing attributes in process `syz.9.1815'. [ 185.172827][T11120] syzkaller0: entered promiscuous mode [ 185.174587][T11120] syzkaller0: entered allmulticast mode [ 185.269915][T11121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.274228][T11124] ubi0: attaching mtd0 [ 185.289469][T11124] ubi0: scanning is finished [ 185.291741][T11124] ubi0: empty MTD device detected [ 185.382932][T11126] UBIFS error (pid: 11126): cannot open "ubi0_0", error -19 [ 185.490817][T11124] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 185.495381][T11124] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 185.497977][T11124] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 185.500111][T11124] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 185.502354][T11124] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 185.504437][T11124] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 185.506917][T11124] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2121402469 [ 185.510567][T11124] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 185.516480][T11130] ubi0: background thread "ubi_bgt0d" started, PID 11130 [ 185.814077][T11135] tipc: Enabling of bearer rejected, already enabled [ 185.909210][ T42] audit: type=1400 audit(1785745682.395:867): avc: denied { create } for pid=11139 comm="syz.6.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.925917][ T42] audit: type=1400 audit(1785745682.395:868): avc: denied { bind } for pid=11139 comm="syz.6.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.932250][ T42] audit: type=1400 audit(1785745682.395:869): avc: denied { write } for pid=11139 comm="syz.6.1823" path="socket:[50328]" dev="sockfs" ino=50328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.039493][T11150] syz.6.1828 (11150): /proc/11149/oom_adj is deprecated, please use /proc/11149/oom_score_adj instead. [ 186.039728][ T42] audit: type=1400 audit(1785745682.525:870): avc: denied { listen } for pid=11149 comm="syz.6.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.199195][ T42] audit: type=1400 audit(1785745682.685:871): avc: denied { connect } for pid=11160 comm="syz.9.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.336744][ T42] audit: type=1400 audit(1785745682.815:872): avc: denied { write } for pid=11164 comm="syz.6.1834" name="heartbeat" dev="configfs" ino=11759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.376271][ T5749] Bluetooth: hci0: unexpected subevent 0x12 length: 30 > 5 [ 186.469819][T11177] ubi: mtd0 is already attached to ubi0 [ 186.525368][T11185] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 186.528670][T11185] UBIFS error (pid: 11185): cannot open "ubi0_0", error -19 [ 186.532478][T11187] VFS: file-max limit 0 reached [ 186.562590][T11190] fuse: fd is not a fuse device [ 187.255693][T11226] tipc: Enabling of bearer rejected, already enabled [ 187.299253][ T42] audit: type=1400 audit(1785745683.785:873): avc: denied { create } for pid=11228 comm="syz.8.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.361111][T11235] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 187.367416][T11235] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 187.416065][ T42] audit: type=1400 audit(1785745683.895:874): avc: denied { read } for pid=11238 comm="syz.0.1864" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 187.423204][ T42] audit: type=1400 audit(1785745683.895:875): avc: denied { open } for pid=11238 comm="syz.0.1864" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 187.459513][T11244] fuse: Bad value for 'fd' [ 187.496048][T11248] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 187.732146][T11260] ubi: mtd0 is already attached to ubi0 [ 187.789226][T11264] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 187.792661][T11264] UBIFS error (pid: 11264): cannot open "ubi0_0", error -19 [ 188.417965][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1884'. [ 188.581608][ T5743] Bluetooth: hci3: hcon ffff88803e1b4000 sent 1 < count 8 [ 188.586369][ T5743] Bluetooth: hci3: hcon ffff88803e1b0000 sent 1 < count 58157 [ 188.681843][T11300] tipc: Enabling of bearer rejected, failed to enable media [ 188.806988][T11309] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 188.817482][ T7799] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 188.820689][T11309] CIFS: Attempting to mount //127.0.0.1/share [ 188.980172][ T7799] usb 11-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 188.983075][ T7799] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.985633][ T7799] usb 11-1: Product: syz [ 188.986990][ T7799] usb 11-1: Manufacturer: syz [ 188.992106][ T7799] usb 11-1: SerialNumber: syz [ 189.246365][ T7799] rtl8150 11-1:1.0: couldn't reset the device [ 189.249284][ T7799] rtl8150 11-1:1.0: probe with driver rtl8150 failed with error -5 [ 189.259626][ T7799] usb 11-1: USB disconnect, device number 19 [ 189.302562][T11322] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1898'. [ 189.632977][T11309] CIFS: VFS: cifs_mount failed w/return code = -112 [ 189.649993][T11335] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 189.818899][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 189.818899][T11347] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 189.818912][ T42] audit: type=1400 audit(1785745686.305:878): avc: denied { ioctl } for pid=11336 comm="syz.0.1906" path="socket:[52620]" dev="sockfs" ino=52620 ioctlcmd=0x8995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 189.874476][ T42] audit: type=1400 audit(1785745686.355:879): avc: denied { create } for pid=11343 comm="syz.6.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 189.937056][ T42] audit: type=1400 audit(1785745686.415:880): avc: denied { ioctl } for pid=11345 comm="syz.9.1909" path="socket:[52631]" dev="sockfs" ino=52631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 190.163222][ T42] audit: type=1400 audit(1785745686.645:881): avc: denied { write } for pid=11357 comm="syz.6.1911" name="strings" dev="configfs" ino=14976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.178109][ T42] audit: type=1400 audit(1785745686.665:882): avc: denied { write } for pid=11357 comm="syz.6.1911" name="midi2.usb0" dev="configfs" ino=26130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.194934][ T42] audit: type=1400 audit(1785745686.665:883): avc: denied { write } for pid=11357 comm="syz.6.1911" name="ep.1" dev="configfs" ino=51945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.210679][ T42] audit: type=1400 audit(1785745686.665:884): avc: denied { write } for pid=11357 comm="syz.6.1911" name="midi2.usb0" dev="configfs" ino=26130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.226588][ T42] audit: type=1400 audit(1785745686.665:885): avc: denied { write } for pid=11357 comm="syz.6.1911" name="midi2.usb0" dev="configfs" ino=26130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.237486][ T42] audit: type=1400 audit(1785745686.665:886): avc: denied { write } for pid=11357 comm="syz.6.1911" name="ep.3" dev="configfs" ino=51948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.576835][T11377] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 190.631822][ T7292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.634663][ T7292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.646847][T11379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11379 comm=syz.6.1921 [ 190.794924][ T5749] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 191.641133][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1929'. [ 191.645971][T11399] netlink: 'syz.9.1929': attribute type 39 has an invalid length. [ 191.776214][ T42] audit: type=1400 audit(1785745688.255:887): avc: denied { setopt } for pid=11384 comm="syz.0.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.161081][T11418] netlink: 'syz.0.1936': attribute type 2 has an invalid length. [ 192.187416][ T5749] Bluetooth: hci0: command 0x0406 tx timeout [ 192.397264][ T5748] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 192.432980][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1951'. [ 192.551137][ T5748] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 192.571043][ T5748] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 192.655431][ T5748] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 192.858669][ T5748] Bluetooth: hci2: Malformed Event: 0x2f [ 193.010609][ T5748] Bluetooth: hci0: unexpected event for opcode 0x200b [ 193.066018][ T5748] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 193.074941][T11525] capability: warning: `syz.0.1986' uses deprecated v2 capabilities in a way that may be insecure [ 193.103541][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1990'. [ 193.106432][T11532] openvswitch: netlink: Missing key (keys=40, expected=80) [ 193.165657][ T5748] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9 [ 193.168084][ T5748] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 193.235470][ T5748] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 193.289946][T11586] comedi comedi0: Cannot bond this driver to itself! [ 193.324667][T11594] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 193.344097][T11600] comedi comedi0: adq12b: I/O base address or length out of range [ 193.492870][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2041'. [ 193.576495][ T5822] IPVS: starting estimator thread 0... [ 193.677582][T11659] IPVS: using max 44 ests per chain, 105600 per kthread [ 193.895253][ T5743] Bluetooth: hci1: unexpected event for opcode 0x202d [ 194.027800][T11751] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.036679][T11754] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.110592][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.113385][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.140091][ T5743] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 194.214615][T11789] netlink: 'syz.0.2114': attribute type 2 has an invalid length. [ 194.405123][T11824] usb usb9: usbfs: process 11824 (syz.6.2132) did not claim interface 0 before use [ 194.600541][T11866] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2150'. [ 194.675882][T11879] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 194.817768][T11888] comedi comedi3: pcl818: I/O base address not correctly aligned [ 195.047427][ T1486] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 195.197508][ T1486] usb 11-1: Using ep0 maxpacket: 32 [ 195.201648][ T1486] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.205462][ T1486] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.211225][ T1486] usb 11-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 195.214281][ T1486] usb 11-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 195.218757][ T1486] usb 11-1: Product: syz [ 195.220647][ T1486] usb 11-1: Manufacturer: syz [ 195.222639][ T1486] usb 11-1: SerialNumber: syz [ 195.233788][ T1486] input: appletouch as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/input/input30 [ 195.435967][ T61] usb 11-1: USB disconnect, device number 20 [ 195.463311][ T61] appletouch 11-1:1.0: input: appletouch disconnected [ 195.486304][T11911] veth1_to_batadv: entered promiscuous mode [ 195.490590][T11909] veth1_to_batadv: left promiscuous mode [ 195.530994][ T5743] Bluetooth: hci3: ACL packet too small [ 195.547518][ T7292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.550189][ T7292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.565022][T11920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.049542][T11942] use of bytesused == 0 is deprecated and will be removed in the future, [ 196.052412][T11942] use the actual size instead. [ 196.188336][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 196.188349][ T42] audit: type=1400 audit(1785745692.675:905): avc: denied { unmount } for pid=7696 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 196.539200][ T61] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 196.666496][T11990] tipc: Enabled bearer , priority 10 [ 196.687425][ T61] usb 11-1: Using ep0 maxpacket: 32 [ 196.691442][ T61] usb 11-1: config index 0 descriptor too short (expected 35577, got 27) [ 196.694227][ T61] usb 11-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 196.697077][ T61] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 196.703529][ T61] usb 11-1: config 1 has no interface number 0 [ 196.707200][ T61] usb 11-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.715227][ T61] usb 11-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 196.721242][ T61] usb 11-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 196.724678][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.733302][ T61] snd_usb_pod 11-1:1.1: Line 6 Pocket POD found [ 196.912024][ T42] audit: type=1400 audit(1785745693.395:906): avc: denied { connect } for pid=12007 comm="syz.9.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 196.919920][ T42] audit: type=1400 audit(1785745693.405:907): avc: denied { setopt } for pid=12007 comm="syz.9.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 197.024287][T12016] tipc: Enabling of bearer rejected, failed to enable media [ 197.247248][T12044] fuse: fd is not a fuse device [ 197.249486][T12044] fuse: fd is not a fuse device [ 197.298349][ T61] snd_usb_pod 11-1:1.1: Line 6 Pocket POD now attached [ 197.334746][T12048] "syz.8.2239" (12048) uses obsolete ecb(arc4) skcipher [ 197.412078][ T5743] Bluetooth: hci1: unexpected event for opcode 0x204e [ 197.480455][ T42] audit: type=1400 audit(1785745693.965:908): avc: denied { mount } for pid=12077 comm="syz.8.2251" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 197.488455][ T42] audit: type=1400 audit(1785745693.965:909): avc: denied { remount } for pid=12077 comm="syz.8.2251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 197.497035][ T5845] usb 11-1: USB disconnect, device number 21 [ 197.499847][ T5845] snd_usb_pod 11-1:1.1: Line 6 Pocket POD now disconnected [ 197.600709][ T42] audit: type=1400 audit(1785745694.085:910): avc: denied { mounton } for pid=12097 comm="syz.0.2260" path="/255/file0" dev="hugetlbfs" ino=53608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 197.601624][T12100] overlayfs: maximum fs stacking depth exceeded [ 197.622091][T12101] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 197.642715][ T42] audit: type=1400 audit(1785745694.125:911): avc: denied { unmount } for pid=8953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 197.686284][ T5832] tipc: Node number set to 2984781383 [ 197.691077][ T42] audit: type=1400 audit(1785745694.175:912): avc: denied { setopt } for pid=12108 comm="syz.9.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 198.002583][T12145] xt_hashlimit: size too large, truncated to 1048576 [ 198.033659][ T42] audit: type=1400 audit(1785745694.515:913): avc: denied { shutdown } for pid=12149 comm="syz.6.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.042218][ T42] audit: type=1400 audit(1785745694.525:914): avc: denied { read } for pid=12149 comm="syz.6.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.167619][T12169] No buffer was provided with the request [ 198.450269][ T5743] Bluetooth: hci1: Malformed Event: 0x02 [ 198.552564][T12224] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2319'. [ 198.751176][T12262] Bluetooth: MGMT ver 1.23 [ 198.895009][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.900485][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.067387][ T1008] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 199.218292][ T1008] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 199.221945][ T1008] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.224872][ T1008] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.228771][ T1008] usb 11-1: config 0 interface 0 has no altsetting 0 [ 199.231925][ T1008] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.237365][ T1008] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.247336][ T1008] usb 11-1: config 0 interface 0 has no altsetting 0 [ 199.253789][ T1008] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.258876][ T1008] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.267330][ T1008] usb 11-1: config 0 interface 0 has no altsetting 0 [ 199.270267][ T1008] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.277440][ T1008] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.286340][ T1008] usb 11-1: config 0 interface 0 has no altsetting 0 [ 199.289328][ T1008] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.292535][ T1008] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.296064][ T1008] usb 11-1: config 0 interface 0 has no altsetting 0 [ 199.299035][ T1008] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.302364][ T1008] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.305826][ T1008] usb 11-1: config 0 interface 0 has no altsetting 0 [ 199.308823][ T1008] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.311742][ T1008] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.315178][ T1008] usb 11-1: config 0 interface 0 has no altsetting 0 [ 199.318568][ T1008] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.321572][ T1008] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.325008][ T1008] usb 11-1: config 0 interface 0 has no altsetting 0 [ 199.329205][ T1008] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 199.332183][ T1008] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 199.334860][ T1008] usb 11-1: Product: syz [ 199.336200][ T1008] usb 11-1: Manufacturer: syz [ 199.337931][ T1008] usb 11-1: SerialNumber: syz [ 199.343672][ T1008] usb 11-1: config 0 descriptor?? [ 199.351844][ T1008] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 199.469940][T12300] tmpfs: Cannot enable quota on remount [ 199.558037][ T5832] usb 11-1: USB disconnect, device number 22 [ 199.568237][ T5832] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 200.337510][ T1008] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 200.519205][ T1008] usb 11-1: Using ep0 maxpacket: 32 [ 200.524184][ T1008] usb 11-1: unable to get BOS descriptor or descriptor too short [ 200.538717][ T1008] usb 11-1: string descriptor 0 read error: -22 [ 200.540796][ T1008] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 200.543693][ T1008] usb 11-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 200.553132][ T1008] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 200.556158][ T1008] dw2102: su3000_power_ctrl: 1, initialized 0 [ 200.564763][ T1008] dvb-usb: bulk message failed: -22 (2/0) [ 200.578797][ T1008] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.582405][ T1008] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 200.585930][ T1008] usb 11-1: media controller created [ 200.588000][ T1008] dvb-usb: bulk message failed: -22 (6/0) [ 200.590838][ T1008] dw2102: i2c transfer failed. [ 200.592490][ T1008] dvb-usb: bulk message failed: -22 (6/0) [ 200.598302][ T1008] dw2102: i2c transfer failed. [ 200.600474][ T1008] dvb-usb: bulk message failed: -22 (6/0) [ 200.602300][ T1008] dw2102: i2c transfer failed. [ 200.603826][ T1008] dvb-usb: bulk message failed: -22 (6/0) [ 200.605718][ T1008] dw2102: i2c transfer failed. [ 200.609793][ T1008] dvb-usb: bulk message failed: -22 (6/0) [ 200.611733][ T1008] dw2102: i2c transfer failed. [ 200.613300][ T1008] dvb-usb: bulk message failed: -22 (6/0) [ 200.615097][ T1008] dw2102: i2c transfer failed. [ 200.616675][ T1008] dvb-usb: MAC address: 02:02:02:02:02:02 [ 200.624710][ T1008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.629407][T12394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.636043][ T1008] dvb-usb: bulk message failed: -22 (3/0) [ 200.637536][T12394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.638015][ T1008] dw2102: command 0x0e transfer failed. [ 200.642353][ T1008] dvb-usb: bulk message failed: -22 (3/0) [ 200.644170][ T1008] dw2102: command 0x0e transfer failed. [ 200.654137][T12396] fuse: fd is not a fuse device [ 200.947904][ T1008] dvb-usb: bulk message failed: -22 (3/0) [ 200.949810][ T1008] dw2102: command 0x0e transfer failed. [ 200.951610][ T1008] dvb-usb: bulk message failed: -22 (3/0) [ 200.953413][ T1008] dw2102: command 0x0e transfer failed. [ 200.955188][ T1008] dvb-usb: bulk message failed: -22 (1/0) [ 200.956988][ T1008] dw2102: command 0x51 transfer failed. [ 200.960275][T12344] dvb-usb: bulk message failed: -22 (5/0) [ 200.963993][T12344] dw2102: i2c transfer failed. [ 200.978772][ T1008] DVB: Unable to find symbol ds3000_attach() [ 200.980690][ T1008] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 201.027431][ T1008] rc_core: IR keymap rc-su3000 not found [ 201.029218][ T1008] Registered IR keymap rc-empty [ 201.032022][ T1008] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 201.036364][ T1008] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input31 [ 201.041379][ T1008] dvb-usb: schedule remote query interval to 150 msecs. [ 201.043611][ T1008] dw2102: su3000_power_ctrl: 0, initialized 1 [ 201.045539][ T1008] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 201.049911][ T1008] usb 11-1: USB disconnect, device number 23 [ 201.074313][ T1008] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 201.168254][T12424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.171277][T12424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.296013][ T5743] Bluetooth: hci3: Unable to find connection for big 0x20 [ 201.498354][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2419'. [ 201.653106][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 201.653118][ T42] audit: type=1400 audit(1785745698.135:921): avc: denied { setopt } for pid=12451 comm="syz.6.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.131817][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2431'. [ 202.604692][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2442'. [ 202.616347][T12488] block nbd1: Unsupported socket: should be TCP or UNIX. [ 202.716748][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2443'. [ 202.724271][T12491] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 202.726510][T12491] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.737192][T12495] vhci_hcd: xmit failed -107 [ 202.739655][T12492] A link change request failed with some changes committed already. Interface gtp0 may have been left with an inconsistent configuration, please check. [ 202.743500][T12491] vhci_hcd vhci_hcd.0: Device attached [ 202.754622][ T42] audit: type=1400 audit(1785745699.235:922): avc: denied { ioctl } for pid=12489 comm="syz.6.2445" path="socket:[53987]" dev="sockfs" ino=53987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.757786][ T5837] vhci_hcd vhci_hcd.0: stop threads [ 202.787709][ T5837] vhci_hcd vhci_hcd.0: release socket [ 202.789801][ T5837] vhci_hcd vhci_hcd.0: disconnect device [ 202.809140][T12499] CIFS: Attempting to mount //127.0.0.1/share [ 203.184732][T12520] retu-mfd 0-0001: could not read Retu revision: -6 [ 203.212412][T12520] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 203.547525][T12499] CIFS: VFS: Error connecting to socket. Aborting operation. [ 203.549935][T12499] CIFS: VFS: cifs_mount failed w/return code = -4 [ 204.837136][T12534] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 204.861133][T12538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.864686][T12538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.942704][T12542] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 205.497864][ T5743] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 205.520657][ T5743] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 205.564714][ T5743] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 205.585145][ T5743] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 205.604901][ T5743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 205.632690][ T5743] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 205.753029][T12576] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 206.263927][ T5743] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 206.382075][ T5743] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 206.627523][ T7137] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 206.797368][ T7137] usb 11-1: Using ep0 maxpacket: 32 [ 206.800815][ T7137] usb 11-1: config 0 has an invalid interface number: 119 but max is 0 [ 206.803473][ T7137] usb 11-1: config 0 has no interface number 0 [ 206.805438][ T7137] usb 11-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.808793][ T7137] usb 11-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 206.812451][ T7137] usb 11-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 206.815656][ T7137] usb 11-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.821553][ T7137] usb 11-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 206.824450][ T7137] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.827029][ T7137] usb 11-1: Product: syz [ 206.828668][ T7137] usb 11-1: Manufacturer: syz [ 206.830399][ T7137] usb 11-1: SerialNumber: syz [ 206.834117][ T7137] usb 11-1: config 0 descriptor?? [ 206.836313][T12600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 206.841537][ T7137] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.119/input/input32 [ 206.845456][ T5132] usb 11-1: BOGUS urb xfer, pipe 1 != type 3 [ 207.045196][ T7137] usb 11-1: USB disconnect, device number 24 [ 207.184048][T12623] netlink: 'syz.8.2494': attribute type 2 has an invalid length. [ 208.044674][ T5743] Bluetooth: hci0: unexpected event for opcode 0x040e [ 208.052080][ T5743] Bluetooth: hci1: unexpected event for opcode 0x200b [ 208.064409][ T5743] Bluetooth: hci0: unexpected event for opcode 0x202f [ 208.114175][T12657] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 208.116591][T12657] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 208.229813][ T5743] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 208.293582][ T5743] Bluetooth: hci1: unexpected event for opcode 0x040e [ 208.303244][T12683] netlink: 'syz.6.2522': attribute type 2 has an invalid length. [ 208.324428][ T5743] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 208.363667][ T5743] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 208.390435][ T5743] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 208.406286][ T5743] Bluetooth: hci3: link tx timeout [ 208.582006][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2546'. [ 208.585685][T12729] block nbd1: Unsupported socket: should be TCP or UNIX. [ 209.172273][ T5743] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 209.176504][ T5743] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 209.269517][ T5743] Bluetooth: hci0: unexpected event for opcode 0x080e [ 209.272054][T12761] tipc: Started in network mode [ 209.273937][T12761] tipc: Node identity 080211, cluster identity 4711 [ 209.278730][T12761] tipc: Enabled bearer , priority 0 [ 209.287597][T12761] tipc: Resetting bearer [ 209.302989][ T5743] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 209.386935][ T5743] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 209.431121][ T5743] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 209.484324][T12796] tipc: Enabled bearer , priority 0 [ 209.488066][T12796] syzkaller0: entered promiscuous mode [ 209.489929][T12796] syzkaller0: entered allmulticast mode [ 209.494543][T12796] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 209.511218][T12796] tipc: Resetting bearer [ 209.514543][T12795] tipc: Resetting bearer [ 209.526501][T12795] tipc: Disabling bearer [ 210.166285][ T5743] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 210.174364][ T5743] CPU: 2 UID: 0 PID: 5743 Comm: kworker/u34:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.174387][ T5743] Tainted: [L]=SOFTLOCKUP [ 210.174392][ T5743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.174401][ T5743] Workqueue: hci0 hci_rx_work [ 210.174447][ T5743] Call Trace: [ 210.174458][ T5743] [ 210.174464][ T5743] dump_stack_lvl+0x100/0x190 [ 210.174484][ T5743] sysfs_warn_dup.cold+0x1c/0x28 [ 210.174584][ T5743] sysfs_create_dir_ns+0x24b/0x2b0 [ 210.174608][ T5743] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 210.174620][ T5743] ? find_held_lock+0x2b/0x80 [ 210.174633][ T5743] ? kobject_add_internal+0x25f/0x930 [ 210.174653][ T5743] ? kobject_add_internal+0x25f/0x930 [ 210.174674][ T5743] ? do_raw_spin_unlock+0x145/0x1e0 [ 210.174694][ T5743] kobject_add_internal+0x2c8/0x930 [ 210.174715][ T5743] kobject_add+0x16a/0x1e0 [ 210.174731][ T5743] ? __pfx_kobject_add+0x10/0x10 [ 210.174747][ T5743] ? class_to_subsys+0x10f/0x150 [ 210.174774][ T5743] ? kobject_put+0xb9/0x640 [ 210.174789][ T5743] ? _raw_spin_unlock+0x28/0x50 [ 210.174804][ T5743] device_add+0x294/0x1970 [ 210.174820][ T5743] ? __pfx_dev_set_name+0x10/0x10 [ 210.174831][ T5743] ? __pfx_device_add+0x10/0x10 [ 210.174862][ T5743] ? mgmt_send_event_skb+0x2fb/0x460 [ 210.174880][ T5743] hci_conn_add_sysfs+0x1a3/0x260 [ 210.174896][ T5743] le_conn_complete_evt+0x11eb/0x1f60 [ 210.174913][ T5743] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 210.174925][ T5743] ? hci_event_packet+0x186/0xcd0 [ 210.174937][ T5743] ? hci_event_packet+0x186/0xcd0 [ 210.174952][ T5743] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 210.174968][ T5743] ? skb_pull_data+0x15f/0x1e0 [ 210.174996][ T5743] hci_le_meta_evt+0x34a/0x5f0 [ 210.175011][ T5743] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 210.175026][ T5743] hci_event_packet+0x51c/0xcd0 [ 210.175039][ T5743] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 210.175054][ T5743] ? __pfx_hci_event_packet+0x10/0x10 [ 210.175069][ T5743] ? kcov_remote_start+0x384/0x670 [ 210.175086][ T5743] ? lockdep_hardirqs_on+0x78/0x100 [ 210.175104][ T5743] hci_rx_work+0x451/0xfc0 [ 210.175119][ T5743] process_one_work+0xa23/0x1940 [ 210.175139][ T5743] ? __pfx_process_one_work+0x10/0x10 [ 210.175156][ T5743] ? __pfx_hci_rx_work+0x10/0x10 [ 210.175169][ T5743] worker_thread+0x5ef/0xe50 [ 210.175192][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 210.175207][ T5743] ? kthread+0x13a/0x450 [ 210.175219][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 210.175231][ T5743] kthread+0x370/0x450 [ 210.175242][ T5743] ? __pfx_kthread+0x10/0x10 [ 210.175255][ T5743] ret_from_fork+0x72b/0xd50 [ 210.175275][ T5743] ? __pfx_ret_from_fork+0x10/0x10 [ 210.175293][ T5743] ? __switch_to+0x800/0x10f0 [ 210.175306][ T5743] ? __pfx_kthread+0x10/0x10 [ 210.175318][ T5743] ret_from_fork_asm+0x1a/0x30 [ 210.175342][ T5743] [ 210.175393][ T5743] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 210.277238][ T5743] Bluetooth: hci0: failed to register connection device [ 210.407392][ T5847] tipc: Node number set to 134353152 [ 210.485210][ T5743] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 210.559473][ T42] audit: type=1400 audit(1785745707.045:923): avc: denied { connect } for pid=12884 comm="syz.0.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 210.818235][T12907] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 211.618787][ T5845] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 211.798259][ T5845] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 211.801588][ T5845] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.804497][ T5845] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.808122][ T5845] usb 11-1: config 0 interface 0 has no altsetting 0 [ 211.811174][ T5845] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.814317][ T5845] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.818288][ T5845] usb 11-1: config 0 interface 0 has no altsetting 0 [ 211.821073][ T5845] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.824130][ T5845] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.827986][ T5845] usb 11-1: config 0 interface 0 has no altsetting 0 [ 211.830889][ T5845] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.833794][ T5845] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.837223][ T5845] usb 11-1: config 0 interface 0 has no altsetting 0 [ 211.841677][ T5845] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.845232][ T5845] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.849044][ T5845] usb 11-1: config 0 interface 0 has no altsetting 0 [ 211.851932][ T5845] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.854827][ T5845] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.858809][ T5845] usb 11-1: config 0 interface 0 has no altsetting 0 [ 211.861864][ T5845] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.864747][ T5845] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.868392][ T5845] usb 11-1: config 0 interface 0 has no altsetting 0 [ 211.871367][ T5845] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.874315][ T5845] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.878015][ T5845] usb 11-1: config 0 interface 0 has no altsetting 0 [ 211.881662][ T5845] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 211.884593][ T5845] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 211.887269][ T5845] usb 11-1: Product: syz [ 211.888797][ T5845] usb 11-1: Manufacturer: syz [ 211.890495][ T5845] usb 11-1: SerialNumber: syz [ 211.893547][ T5845] usb 11-1: config 0 descriptor?? [ 211.902163][ T5845] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 212.103454][ T5845] usb 11-1: USB disconnect, device number 25 [ 212.109623][ T5845] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 212.440653][T13030] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 212.864078][ T42] audit: type=1400 audit(1785745709.345:924): avc: denied { unmount } for pid=8953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 212.926903][ T5887] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 212.931038][ T5887] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 212.933753][ T5887] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 212.936524][ T5887] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 212.943660][ T5887] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 212.948605][ T5887] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 212.951009][ T5887] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 212.953296][ T5887] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 212.955502][ T5887] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 212.957979][ T5887] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 212.963329][ T5887] hid-generic 0000:0000:0004.000C: hidraw1: HID v0.03 Device [syz1] on syz0 [ 213.017132][T13093] tipc: Enabled bearer , priority 10 [ 213.043558][T13088] fido_id[13088]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.250540][T13140] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2744'. [ 213.436644][T13167] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.472510][ T42] audit: type=1400 audit(1785745709.955:925): avc: denied { rmdir } for pid=13174 comm="syz.6.2760" name="file2" dev="9p" ino=77885983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.475830][T13177] loop4: detected capacity change from 0 to 7 [ 213.503218][T13177] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 213.504958][T13177] loop4: partition table partially beyond EOD, truncated [ 213.508546][T13177] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 213.527545][T13167] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.562553][ T5914] udevd[5914]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 213.627938][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 213.655765][T13167] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.781272][T13167] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.806184][ T5743] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 213.830445][T13211] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 213.872497][ T5743] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 213.876706][ T5743] Bluetooth: hci2: Injecting HCI hardware error event [ 213.883462][ T5743] Bluetooth: hci2: hardware error 0x00 [ 213.924707][ T5823] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.929502][ T5823] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.957425][ T5837] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.959983][ T5837] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.023832][ T42] audit: type=1400 audit(1785745710.505:926): avc: denied { read } for pid=13237 comm="syz.0.2791" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 214.033047][ T42] audit: type=1400 audit(1785745710.515:927): avc: denied { open } for pid=13237 comm="syz.0.2791" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 214.240395][T13256] loop4: detected capacity change from 0 to 7 [ 214.255064][T13256] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 214.256750][T13256] loop4: partition table partially beyond EOD, truncated [ 214.259309][T13256] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 214.281733][ T5914] udevd[5914]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 214.305036][T13264] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2802'. [ 214.349384][ T5748] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 214.354174][ T5748] Bluetooth: hci3: Injecting HCI hardware error event [ 214.359233][ T5748] Bluetooth: hci3: hardware error 0x00 [ 214.446109][ T42] audit: type=1400 audit(1785745710.925:928): avc: denied { read } for pid=13284 comm="syz.6.2811" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.454760][ T42] audit: type=1400 audit(1785745710.925:929): avc: denied { open } for pid=13284 comm="syz.6.2811" path="/dev/rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.462200][ T42] audit: type=1400 audit(1785745710.935:930): avc: denied { ioctl } for pid=13284 comm="syz.6.2811" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.861866][ T5742] Bluetooth: hci3: Malformed Event: 0x02 [ 215.031155][ T42] audit: type=1400 audit(1785745711.515:931): avc: denied { read } for pid=13374 comm="syz.0.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 215.031387][T13375] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 215.158079][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.165151][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.246364][ T5742] Bluetooth: hci2: Malformed Event: 0x02 [ 215.861594][ T42] audit: type=1800 audit(1785745712.345:932): pid=13442 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2888" name="max_speed" dev="configfs" ino=58877 res=0 errno=0 [ 215.947542][ T5743] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 216.264846][T13476] tmpfs: Cannot enable quota on remount [ 216.270983][T13478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.274836][T13478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.427460][ T5748] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 216.517480][ T5748] Bluetooth: hci1: command 0x0406 tx timeout [ 216.680299][ T5748] Bluetooth: hci0: command 0x0406 tx timeout [ 216.717208][T13525] tipc: Enabling of bearer rejected, failed to enable media [ 216.948950][T13561] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 217.301736][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b1d01a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 217.306389][ C0] Call Trace: [ 217.307420][ C0] [ 217.308298][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 217.310360][ C0] ? sched_clock_cpu+0x6c/0x570 [ 217.311841][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 217.313457][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 217.315105][ C0] mce_cpu_restart+0xd5/0x1f0 [ 217.316556][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 217.318606][ C0] __sysvec_call_function+0x81/0x420 [ 217.320285][ C0] sysvec_call_function+0x9e/0xc0 [ 217.321833][ C0] [ 217.322749][ C0] [ 217.323736][ C0] asm_sysvec_call_function+0x1a/0x20 [ 217.325396][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 217.327154][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 5f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 217.332873][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000206 [ 217.334686][ C0] RAX: 00000000002d873f RBX: ffffffff8e891480 RCX: ffffffff8bbb42d5 [ 217.337059][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a815f RDI: ffffffff8c402680 [ 217.339489][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100d48678d [ 217.341898][ C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000 [ 217.344378][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 217.346920][ C0] ? ct_kernel_exit+0x125/0x180 [ 217.348473][ C0] default_idle+0x9/0x10 [ 217.349845][ C0] default_idle_call+0x6c/0xb0 [ 217.351372][ C0] do_idle+0x3a7/0x5b0 [ 217.352722][ C0] ? __pfx_do_idle+0x10/0x10 [ 217.354330][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 217.356214][ C0] cpu_startup_entry+0x4f/0x60 [ 217.357753][ C0] rest_init+0x251/0x260 [ 217.359112][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 217.360893][ C0] start_kernel+0x48e/0x490 [ 217.362355][ C0] x86_64_start_reservations+0x24/0x30 [ 217.364043][ C0] x86_64_start_kernel+0x12b/0x130 [ 217.365639][ C0] common_startup_64+0x13e/0x158 [ 217.367242][ C0] [ 217.447534][T13617] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 217.718203][ T7137] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 217.881097][ T7137] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 217.884211][ T7137] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.886619][ T7137] usb 11-1: Product: syz [ 217.888877][ T7137] usb 11-1: Manufacturer: syz [ 217.890476][ T7137] usb 11-1: SerialNumber: syz [ 217.893492][ T7137] usb 11-1: config 0 descriptor?? [ 218.102173][ T7137] usb 11-1: USB disconnect, device number 26 [ 218.660432][ T42] audit: type=1400 audit(1785745715.135:933): avc: denied { recv } for pid=13742 comm="syz.8.3036" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 218.710422][ T42] audit: type=1400 audit(1785745715.195:934): avc: denied { write } for pid=13746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.755100][ T42] audit: type=1400 audit(1785745715.235:935): avc: denied { write } for pid=13757 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.033474][T13814] netlink: 'syz.8.3068': attribute type 10 has an invalid length. [ 219.045601][T13814] nicvf0: Device veth0 is of different type [ 220.087105][T13918] usb 1-1: USB disconnect, device number 2 [ 220.191146][T13927] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 220.192073][T13928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.194499][T13927] bridge0: entered allmulticast mode [ 220.203079][T13928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.237969][T13932] netlink: 'syz.6.3124': attribute type 10 has an invalid length. [ 220.302407][ T42] audit: type=1400 audit(1785745716.785:936): avc: denied { write } for pid=13939 comm="syz.6.3128" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 220.774966][T13972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.784112][T13972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.888482][ T24] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 222.043387][T14059] pi3usb30532 0-0059: Error reading config register -6 [ 222.045799][T14059] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x59 [ 222.101657][ T24] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 222.105293][ T24] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 222.109366][ T24] usb 1-1: Product: QEMU USB Tablet [ 222.111748][ T24] usb 1-1: Manufacturer: QEMU [ 222.113222][ T24] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 222.134694][ T24] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000D/input/input33 [ 222.200831][ T24] hid-generic 0003:0627:0001.000D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 222.208701][T14017] usb 1-1: USB disconnect, device number 3 [ 222.317607][ T7799] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 222.334206][T14071] fido_id[14071]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.7/usb1/report_descriptor': No such file or directory [ 222.477505][ T7799] usb 11-1: Using ep0 maxpacket: 8 [ 222.480446][ T7799] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.483638][ T7799] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.486711][ T7799] usb 11-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 222.491522][ T7799] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 222.494965][ T7799] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 222.498154][ T7799] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.502154][ T7799] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.504903][ T7799] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.713893][ T7799] usb 11-1: usb_control_msg returned -71 [ 222.715645][ T7799] usbtmc 11-1:16.0: can't read capabilities [ 222.726831][ T7799] usb 11-1: USB disconnect, device number 27 [ 223.079892][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 223.134931][T14153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.139936][T14153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.507421][ T7137] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 223.659182][ T7137] usb 11-1: Using ep0 maxpacket: 8 [ 223.662453][ T7137] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 223.668396][ T7137] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 223.671698][T14182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.672052][T14182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.674293][ T7137] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.680398][ T7137] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.683520][ T7137] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.688580][ T7137] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.691479][ T7137] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.900053][ T7137] usb 11-1: GET_CAPABILITIES returned 0 [ 223.901921][ T7137] usbtmc 11-1:16.0: can't read capabilities [ 224.104702][T14169] usbtmc 11-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 224.108121][ T5832] usb 11-1: USB disconnect, device number 28 [ 224.223299][T14200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.229318][T14200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.635008][ T42] audit: type=1400 audit(1785745721.115:937): avc: denied { write } for pid=14248 comm="syz.6.3275" name="functions" dev="configfs" ino=8159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.671722][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3277'. [ 224.726214][T14263] overlayfs: failed to clone upperpath [ 224.777854][ T42] audit: type=1400 audit(1785745721.265:938): avc: denied { map } for pid=14269 comm="syz.0.3286" path="socket:[61226]" dev="sockfs" ino=61226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.787734][ T42] audit: type=1400 audit(1785745721.265:939): avc: denied { read } for pid=14269 comm="syz.0.3286" path="socket:[61226]" dev="sockfs" ino=61226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.903749][ T42] audit: type=1400 audit(1785745721.385:940): avc: denied { create } for pid=14292 comm="syz.8.3297" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 224.923162][ T42] audit: type=1400 audit(1785745721.405:941): avc: denied { unlink } for pid=8525 comm="syz-executor" name="file0" dev="tmpfs" ino=3683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 224.944023][T14297] gretap0: entered promiscuous mode [ 225.199390][ T5748] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 225.275473][ T42] audit: type=1400 audit(1785745721.755:942): avc: denied { create } for pid=14330 comm="syz.6.3315" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 225.282091][ T42] audit: type=1400 audit(1785745721.755:943): avc: denied { associate } for pid=14330 comm="syz.6.3315" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 225.363233][T14341] fuse: fd is not a fuse device [ 225.365902][T14341] overlayfs: failed to clone lowerpath [ 225.778180][ T7799] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 225.947471][ T7799] usb 11-1: Using ep0 maxpacket: 16 [ 225.950383][ T7799] usb 11-1: config 0 has no interfaces? [ 225.953698][ T7799] usb 11-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 225.956597][ T7799] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.959183][ T7799] usb 11-1: Product: syz [ 225.960084][T14365] fuse: fd is not a fuse device [ 225.960489][ T7799] usb 11-1: Manufacturer: syz [ 225.963404][ T7799] usb 11-1: SerialNumber: syz [ 225.966563][ T7799] usb 11-1: config 0 descriptor?? [ 226.177581][ T7799] usb 11-1: USB disconnect, device number 29 [ 226.811637][T14413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.815321][T14413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.957424][ T7799] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 227.108954][ T7799] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 227.114476][ T7799] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.122280][ T7799] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.125762][ T7799] usb 11-1: config 0 interface 0 has no altsetting 0 [ 227.129222][ T7799] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.132121][ T7799] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.135527][ T7799] usb 11-1: config 0 interface 0 has no altsetting 0 [ 227.138558][ T7799] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.141412][ T7799] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.144826][ T7799] usb 11-1: config 0 interface 0 has no altsetting 0 [ 227.148029][ T7799] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.150922][ T7799] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.154384][ T7799] usb 11-1: config 0 interface 0 has no altsetting 0 [ 227.157338][ T7799] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.160225][ T7799] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.163598][ T7799] usb 11-1: config 0 interface 0 has no altsetting 0 [ 227.166442][ T7799] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.170229][ T7799] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.173640][ T7799] usb 11-1: config 0 interface 0 has no altsetting 0 [ 227.176528][ T7799] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.179634][ T7799] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.183124][ T7799] usb 11-1: config 0 interface 0 has no altsetting 0 [ 227.185940][ T7799] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.188860][ T7799] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.192266][ T7799] usb 11-1: config 0 interface 0 has no altsetting 0 [ 227.195876][ T7799] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 227.198804][ T7799] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 227.201593][ T7799] usb 11-1: Product: syz [ 227.202948][ T7799] usb 11-1: Manufacturer: syz [ 227.204429][ T7799] usb 11-1: SerialNumber: syz [ 227.207242][ T7799] usb 11-1: config 0 descriptor?? [ 227.212073][ T7799] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 227.610448][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.613415][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.258896][ T42] audit: type=1326 audit(1785745724.745:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.8.3391" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd23b39e019 code=0x0 [ 229.467582][ C0] usb 11-1: yurex_control_callback - control failed: -2 [ 229.470147][ C0] usb 11-1: yurex_control_callback - control failed: -32 [ 229.478995][ T7137] usb 11-1: USB disconnect, device number 30 [ 229.483516][ T7137] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 230.079919][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3410'. [ 230.146392][T14519] syz.9.3410 (14519) used greatest stack depth: 19120 bytes left [ 230.177577][T14545] block2mtd: error: cannot open device #! [ 230.701203][T14601] netlink: 'syz.8.3440': attribute type 2 has an invalid length. [ 230.703736][T14601] netlink: 'syz.8.3440': attribute type 2 has an invalid length. [ 230.880763][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3445'. [ 231.116047][T14651] VFS: file-max limit 0 reached [ 231.179732][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3456'. [ 231.291478][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'. [ 231.303586][T14682] bond3: entered promiscuous mode [ 231.306172][T14682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.333406][T14682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.337596][T14682] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 231.341325][T14682] bond3: (slave sit1): Error -95 calling set_mac_address [ 231.364132][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3469'. [ 231.465841][ T42] audit: type=1400 audit(1785745727.945:945): avc: denied { bind } for pid=14710 comm="syz.8.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.476158][ T42] audit: type=1400 audit(1785745727.945:946): avc: denied { listen } for pid=14710 comm="syz.8.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.443504][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3503'. [ 235.261974][T14761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.333363][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3515'. [ 235.356658][T14798] bond1: entered promiscuous mode [ 235.360159][T14798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.362137][T14804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.371971][T14804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.379263][T14798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.381538][T14798] bond1: (slave sit2): The slave device specified does not support setting the MAC address [ 235.384981][T14798] bond1: (slave sit2): Error -95 calling set_mac_address [ 235.483775][ T42] audit: type=1400 audit(1785745731.965:947): avc: denied { ioctl } for pid=14808 comm="syz.6.3518" path="socket:[63837]" dev="sockfs" ino=63837 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 235.852337][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3531'. [ 235.984380][ C1] Unknown status report in ack skb [ 236.090969][T14881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.094358][T14881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.599199][ T42] audit: type=1400 audit(1785745733.085:948): avc: denied { map } for pid=14907 comm="syz.9.3556" path="socket:[63906]" dev="sockfs" ino=63906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.688518][ T5788] bond0: (slave bond_slave_0): interface is now down [ 236.691867][ T5788] bond0: (slave bond_slave_1): interface is now down [ 236.703670][ T5788] bond0: now running without any active interface! [ 237.089014][T14935] fuse: fd is not a fuse device [ 237.103460][ T42] audit: type=1400 audit(1785745733.585:949): avc: denied { bind } for pid=14936 comm="syz.6.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.109819][ T42] audit: type=1400 audit(1785745733.585:950): avc: denied { setopt } for pid=14936 comm="syz.6.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.249729][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3569'. [ 237.946825][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3579'. [ 238.113106][ T42] audit: type=1400 audit(1785745734.595:951): avc: denied { ioctl } for pid=14976 comm="syz.6.3585" path="socket:[64002]" dev="sockfs" ino=64002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.345943][T14981] md: could not open device unknown-block(0,0). [ 238.350266][T14981] md: error, md_import_device() returned -6 [ 238.775146][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'. [ 238.779863][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'. [ 238.794170][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'. [ 238.796938][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'. [ 238.833304][T15009] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 238.835895][T15009] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 238.839351][T15009] tipc: Resetting bearer [ 239.055215][T15023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3603'. [ 239.061447][ T42] audit: type=1400 audit(1785745735.545:952): avc: denied { append } for pid=15022 comm="syz.0.3603" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 239.124681][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3605'. [ 239.155556][ T42] audit: type=1400 audit(1785745735.635:953): avc: denied { relabelfrom } for pid=15028 comm="syz.6.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 239.164577][ T42] audit: type=1400 audit(1785745735.635:954): avc: denied { relabelto } for pid=15028 comm="syz.6.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 239.293826][T15038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.310065][T15038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.630655][ T5752] Bluetooth: hci0: adv larger than maximum supported [ 239.630683][ T5752] Bluetooth: hci0: Malformed LE Event: 0x0d [ 239.754736][T15058] md: could not open device unknown-block(0,0). [ 239.756787][T15058] md: error, md_import_device() returned -6 [ 239.758993][T15082] mac80211_hwsim hwsim20 syzkaller0: left promiscuous mode [ 239.761537][T15082] mac80211_hwsim hwsim20 syzkaller0: left allmulticast mode [ 240.071947][T15104] fuse: fd is not a fuse device [ 240.671792][T15127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.753522][ T42] audit: type=1400 audit(1785745737.235:955): avc: denied { ioctl } for pid=15134 comm="syz.8.3652" path="socket:[66696]" dev="sockfs" ino=66696 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 240.896355][ T42] audit: type=1400 audit(1785745737.375:956): avc: denied { watch } for pid=15147 comm="syz.6.3659" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 240.916246][ T42] audit: type=1400 audit(1785745737.375:957): avc: denied { watch_sb watch_reads } for pid=15147 comm="syz.6.3659" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 241.235547][ T5788] bond0: (slave bond_slave_0): interface is now down [ 241.254759][ T5788] bond0: now running without any active interface! [ 241.298836][ T5752] Bluetooth: Wrong link type (-22) [ 241.548312][T15189] __nla_validate_parse: 1 callbacks suppressed [ 241.548325][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3677'. [ 241.558001][T15182] md: array md2 already initialised! [ 241.785872][ T42] audit: type=1400 audit(1785745738.265:958): avc: denied { write } for pid=15197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.829020][ T42] audit: type=1400 audit(1785745738.315:959): avc: denied { write } for pid=15204 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.893839][ T42] audit: type=1400 audit(1785745738.375:960): avc: denied { write } for pid=15206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.947247][ T42] audit: type=1400 audit(1785745738.425:961): avc: denied { write } for pid=15209 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.026412][ T42] audit: type=1400 audit(1785745738.505:962): avc: denied { write } for pid=15215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.071030][ T42] audit: type=1400 audit(1785745738.555:963): avc: denied { write } for pid=15220 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.114460][T15227] fuse: fd is not a fuse device [ 242.290967][T15252] fuse: fd is not a fuse device [ 242.543553][T15276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.547941][T15276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.555392][T15278] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3708'. [ 242.558581][T15278] netlink: 'syz.8.3708': attribute type 7 has an invalid length. [ 242.561035][T15278] netlink: 'syz.8.3708': attribute type 8 has an invalid length. [ 242.563383][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3708'. [ 242.571216][T15278] syz_tun: entered promiscuous mode [ 242.576562][T15278] syz_tun: left promiscuous mode [ 243.056287][T15288] syzkaller0: entered promiscuous mode [ 243.058238][T15288] syzkaller0: entered allmulticast mode [ 243.266619][T15300] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 243.269214][T15300] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 243.272014][T15300] tipc: Resetting bearer [ 243.301545][T15302] syzkaller0: entered promiscuous mode [ 243.303406][T15302] syzkaller0: entered allmulticast mode [ 243.460245][T15317] overlayfs: failed to clone upperpath [ 243.681992][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3733'. [ 243.691085][T15330] hsr_slave_0: left promiscuous mode [ 243.694622][T15330] hsr_slave_1: left promiscuous mode [ 243.823544][T15342] syzkaller0: entered promiscuous mode [ 243.825414][T15342] syzkaller0: entered allmulticast mode [ 243.940372][ T42] audit: type=1400 audit(1785745740.425:964): avc: denied { cmd } for pid=15349 comm="syz.6.3743" path="socket:[66060]" dev="sockfs" ino=66060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 243.998442][T15360] binder_alloc: 15359: pid 15359 spamming oneway? 1 buffers allocated for a total size of 4096 [ 244.148454][T15372] syzkaller0: entered promiscuous mode [ 244.150334][T15372] syzkaller0: entered allmulticast mode [ 244.325981][T15385] binder_alloc: 15384: pid 15384 spamming oneway? 1 buffers allocated for a total size of 4096 [ 246.011124][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 246.030189][T15413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.106078][T15428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3772'. [ 246.109516][T15428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3772'. [ 246.725273][ T42] audit: type=1400 audit(1785745743.205:965): avc: denied { read } for pid=15445 comm="syz.0.3778" name="nullb" dev="configfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.732650][ T42] audit: type=1400 audit(1785745743.205:966): avc: denied { read open } for pid=15445 comm="syz.0.3778" path="/599/my_configfs/nullb" dev="configfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.741171][ T42] audit: type=1400 audit(1785745743.215:967): avc: denied { write } for pid=15445 comm="syz.0.3778" name="nullb" dev="configfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.748528][T15447] null_blk: nullb1: using native zone append [ 246.800903][T15447] null_blk: disk nullb1 created [ 246.969412][ T5837] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 246.995633][T15464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.101661][T15474] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3788'. [ 247.516686][T15486] batman_adv: batadv0: Adding interface: dummy0 [ 247.519271][T15486] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.527671][T15486] batman_adv: batadv0: Interface activated: dummy0 [ 247.533663][ T42] audit: type=1400 audit(1785745744.015:968): avc: denied { ioctl } for pid=15483 comm="syz.0.3802" path="socket:[66178]" dev="sockfs" ino=66178 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.553830][T15486] batadv0: mtu less than device minimum [ 247.556760][T15486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.561158][T15486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.564842][T15486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.568769][T15486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.572399][T15486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.576091][T15486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.579797][T15486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.583445][T15486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.588925][T15486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.929873][T15514] batman_adv: batadv0: Adding interface: dummy0 [ 247.931923][T15514] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.940158][T15514] batman_adv: batadv0: Interface activated: dummy0 [ 248.095626][T15534] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3814'. [ 248.345673][T15552] batman_adv: batadv0: Adding interface: dummy0 [ 248.349685][T15552] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 248.358918][T15552] batman_adv: batadv0: Interface activated: dummy0 [ 248.939638][ T42] audit: type=1400 audit(1785745745.415:969): avc: denied { write } for pid=15561 comm="syz.0.3827" name="720p" dev="configfs" ino=38003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.979425][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3829'. [ 248.982754][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3829'. [ 249.035622][T15573] syzkaller0: entered promiscuous mode [ 249.038700][T15573] syzkaller0: entered allmulticast mode [ 249.172939][T15586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3837'. [ 249.234496][T15592] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3842'. [ 249.237724][T15592] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3842'. [ 249.452417][ T42] audit: type=1400 audit(1785745745.935:970): avc: denied { read } for pid=15607 comm="syz.6.3844" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 250.236276][T15668] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3867'. [ 250.856970][ T42] audit: type=1400 audit(1785745747.335:971): avc: denied { write } for pid=15677 comm="syz.6.3871" name="720p" dev="configfs" ino=38003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.874824][T15682] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 250.908836][ T42] audit: type=1400 audit(1785745747.395:972): avc: denied { map } for pid=15683 comm="syz.6.3874" path="/dev/sda1" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.918550][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3873'. [ 250.923379][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3873'. [ 251.119494][T15710] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 251.330774][ T42] audit: type=1400 audit(1785745747.815:973): avc: denied { ioctl } for pid=15731 comm="syz.0.3898" path="socket:[68967]" dev="sockfs" ino=68967 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 251.371353][T15736] tipc: Enabling of bearer rejected, already enabled [ 251.420971][ T42] audit: type=1400 audit(1785745747.905:974): avc: denied { read write } for pid=15739 comm="syz.0.3902" name="file0" dev="9p" ino=77885993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 251.422187][T15740] netlink: 'syz.0.3902': attribute type 30 has an invalid length. [ 251.428637][ T42] audit: type=1400 audit(1785745747.905:975): avc: denied { open } for pid=15739 comm="syz.0.3902" path="/634/file0/file0" dev="9p" ino=77885993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 251.438252][ T42] audit: type=1400 audit(1785745747.905:976): avc: denied { listen } for pid=15739 comm="syz.0.3902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 251.449640][T15740] bond4: option arp_missed_max: invalid value (0) [ 251.451751][T15740] bond4: option arp_missed_max: allowed values 1 - 255 [ 251.454990][T15740] bond4 (unregistering): Released all slaves [ 251.703812][T15761] tipc: Enabling of bearer rejected, already enabled [ 251.938109][T15782] loop6: detected capacity change from 0 to 2640 [ 251.950227][T15782] buffer_io_error: 138 callbacks suppressed [ 251.950237][T15782] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.961079][T15782] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.963548][T15782] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.965974][T15782] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.970600][T15782] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.973124][T15782] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.976017][T15782] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.981247][T15782] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.983793][T15782] ldm_validate_partition_table(): Disk read failed. [ 251.986818][T15782] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.989795][T15782] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.992292][T15782] Dev loop6: unable to read RDB block 0 [ 251.994225][T15782] loop6: unable to read partition table [ 251.994866][T15788] blk_print_req_error: 103 callbacks suppressed [ 251.994878][T15788] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 21 prio class 2 [ 251.996194][T15782] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 252.010724][T15788] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 21 prio class 2 [ 252.018167][T15788] I/O error, dev loop6, sector 2560 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 252.021466][T15788] I/O error, dev loop6, sector 2560 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 252.104709][T15792] SELinux: invalid class [ 252.124010][T15792] SELinux: failed to load policy [ 252.128715][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.133762][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.152853][T15799] syzkaller0: entered promiscuous mode [ 252.154616][T15799] syzkaller0: entered allmulticast mode [ 252.293069][ T42] audit: type=1400 audit(1785745748.775:977): avc: denied { write } for pid=15800 comm="syz.6.3929" name="usb_gadget" dev="configfs" ino=2321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.874879][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 252.887985][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 252.888000][ T42] audit: type=1400 audit(1785745749.365:982): avc: denied { write } for pid=15819 comm="syz.0.3937" name="c.1" dev="configfs" ino=14975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.900015][ T42] audit: type=1400 audit(1785745749.375:983): avc: denied { write } for pid=15819 comm="syz.0.3937" name="c.1" dev="configfs" ino=14975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.959881][T15826] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 252.989549][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 253.034430][ T5823] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 253.052504][ T5823] bond0: active interface up! [ 253.473518][T15878] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 253.479715][T15878] tipc: Cannot configure node identity twice [ 253.481765][T15878] tipc: Cannot configure node identity twice [ 253.539311][ T5752] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 253.565040][T15898] __nla_validate_parse: 1 callbacks suppressed [ 253.565052][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3976'. [ 253.571470][T15898] net_ratelimit: 54 callbacks suppressed [ 253.571524][T15898] openvswitch: netlink: Missing key (keys=40, expected=80) [ 253.655882][T15912] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 253.677181][T15912] tipc: Cannot configure node identity twice [ 253.680674][T15912] tipc: Cannot configure node identity twice [ 255.551848][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.787466][ T5748] Bluetooth: hci1: command 0x0406 tx timeout [ 259.434629][ T42] audit: type=1400 audit(1785745755.915:984): avc: denied { append } for pid=16047 comm="syz.0.4048" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 259.478272][ T5748] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 259.580387][ T5748] Bluetooth: hci1: unexpected event for opcode 0x202d [ 259.698283][T16092] netlink: 'syz.6.4068': attribute type 2 has an invalid length. [ 259.700747][T16092] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4068'. [ 259.886913][T16128] comedi comedi3: pcl818: I/O base address not correctly aligned [ 259.921821][T16140] /dev/sg0: Can't lookup blockdev [ 259.927825][ T42] audit: type=1400 audit(1785745756.415:985): avc: denied { create } for pid=16141 comm="syz.0.4094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 260.256486][T16202] netlink: 'syz.8.4122': attribute type 12 has an invalid length. [ 260.259211][T16202] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4122'. [ 260.306899][T16211] program syz.6.4127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.344137][ T42] audit: type=1400 audit(1785745756.825:986): avc: denied { remount } for pid=16217 comm="syz.6.4131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 260.445935][ T42] audit: type=1400 audit(1785745756.925:987): avc: denied { append } for pid=16236 comm="syz.6.4140" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 260.455643][ T42] audit: type=1400 audit(1785745756.935:988): avc: denied { map } for pid=16236 comm="syz.6.4140" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 260.464938][ T42] audit: type=1400 audit(1785745756.935:989): avc: denied { write execute } for pid=16236 comm="syz.6.4140" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 260.655471][ T42] audit: type=1400 audit(1785745757.135:990): avc: denied { getopt } for pid=16269 comm="syz.6.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.814048][T16292] comedi comedi3: unsupported base address 0x2000 [ 260.848235][ T42] audit: type=1400 audit(1785745757.335:991): avc: denied { read } for pid=16295 comm="syz.6.4169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 260.852867][T16299] tipc: Enabling of bearer rejected, failed to enable media [ 261.023384][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4174'. [ 261.434214][T16351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.439264][T16351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.495875][T16355] "syz.6.4197" (16355) uses obsolete ecb(arc4) skcipher [ 261.549499][ T7799] hid_parser_main: 91 callbacks suppressed [ 261.549512][ T7799] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 261.553712][ T7799] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 261.556000][ T7799] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 261.559178][ T7799] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 261.561672][ T7799] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 261.563971][ T7799] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 261.566269][ T7799] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 261.568940][ T7799] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 261.571298][ T7799] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 261.573614][ T7799] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 261.587046][ T7799] hid-generic 0006:0008:0008.000E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 261.611804][T16360] fido_id[16360]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.010426][T16386] overlayfs: failed to clone lowerpath [ 262.046530][T16384] IPVS: You probably need to specify IP address on multicast interface. [ 262.049542][T16384] IPVS: Error connecting to the multicast addr [ 262.193157][ T42] audit: type=1400 audit(1785745758.675:992): avc: denied { write } for pid=16408 comm="syz.0.4222" path="socket:[70950]" dev="sockfs" ino=70950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 262.276437][ C1] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 262.279777][ C1] sr 2:0:0:0: [sr0] tag#10 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 262.324532][ T42] audit: type=1400 audit(1785745758.805:993): avc: denied { mount } for pid=16422 comm="syz.9.4229" name="/" dev="rpc_pipefs" ino=68491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 262.515643][T16452] xt_connbytes: Forcing CT accounting to be enabled [ 262.518522][T16452] set match dimension is over the limit! [ 262.681147][T16476] xt_hashlimit: size too large, truncated to 1048576 [ 262.827372][ T5752] Bluetooth: hci0: command 0x0406 tx timeout [ 262.827430][ T5748] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 262.843852][T16499] usb usb9: usbfs: process 16499 (syz.6.4264) did not claim interface 5 before use [ 262.848692][T16497] overlayfs: failed to clone upperpath [ 262.893386][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4266'. [ 262.996759][T16493] infiniband syz1: set down [ 262.999319][T16493] infiniband syz1: added ipvlan0 [ 263.021238][T16493] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 263.026864][T16493] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 263.032370][T16493] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 263.068075][T16493] RDS/IB: syz1: added [ 263.074502][T16493] smc: adding ib device syz1 with port count 1 [ 263.076686][T16493] smc: ib device syz1 port 1 has no pnetid [ 263.415822][T16542] program syz.6.4285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.842815][T16570] dummy0: left promiscuous mode [ 263.856177][T16570] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 264.165161][ T5748] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 264.718204][T16637] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.4332' sets config #2187 [ 264.877393][T16646] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 264.958145][T16653] fuse: Invalid rootmode [ 264.994092][T16659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.998728][T16659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.171584][T16676] program syz.6.4350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.307856][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 265.307868][ T42] audit: type=1400 audit(1785745761.795:1000): avc: denied { remount } for pid=16689 comm="syz.6.4357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 265.307969][T16690] devtmpfs: Cannot change global quota limit on remount [ 265.583374][T16700] netlink: 'syz.0.4362': attribute type 1 has an invalid length. [ 265.585880][T16700] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4362'. [ 265.589058][T16700] netlink: 'syz.0.4362': attribute type 1 has an invalid length. [ 265.598227][ T848] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 265.636748][T16704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.640511][T16704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.747344][ T848] usb 11-1: Using ep0 maxpacket: 32 [ 265.750618][ T848] usb 11-1: unable to get BOS descriptor or descriptor too short [ 265.756431][ T848] usb 11-1: string descriptor 0 read error: -22 [ 265.760938][ T848] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 265.766052][ T848] usb 11-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 265.773669][ T848] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 265.776249][ T848] dw2102: su3000_power_ctrl: 1, initialized 0 [ 265.779468][ T848] dvb-usb: bulk message failed: -22 (2/0) [ 265.788788][ T848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.794235][ T848] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 265.799180][ T848] usb 11-1: media controller created [ 265.800878][ T848] dvb-usb: bulk message failed: -22 (6/0) [ 265.806375][ T848] dw2102: i2c transfer failed. [ 265.808074][ T848] dvb-usb: bulk message failed: -22 (6/0) [ 265.809874][ T848] dw2102: i2c transfer failed. [ 265.811412][ T848] dvb-usb: bulk message failed: -22 (6/0) [ 265.813211][ T848] dw2102: i2c transfer failed. [ 265.814758][ T848] dvb-usb: bulk message failed: -22 (6/0) [ 265.824602][ T848] dw2102: i2c transfer failed. [ 265.826145][ T848] dvb-usb: bulk message failed: -22 (6/0) [ 265.828077][ T848] dw2102: i2c transfer failed. [ 265.829595][ T848] dvb-usb: bulk message failed: -22 (6/0) [ 265.831434][ T848] dw2102: i2c transfer failed. [ 265.832965][ T848] dvb-usb: MAC address: 02:02:02:02:02:02 [ 265.840275][ T848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.855007][ T848] dvb-usb: bulk message failed: -22 (3/0) [ 265.856830][ T848] dw2102: command 0x0e transfer failed. [ 265.860250][ T848] dvb-usb: bulk message failed: -22 (3/0) [ 265.862149][ T848] dw2102: command 0x0e transfer failed. [ 266.013816][T16731] fuse: fd is not a fuse device [ 266.167391][ T848] dvb-usb: bulk message failed: -22 (3/0) [ 266.169246][ T848] dw2102: command 0x0e transfer failed. [ 266.171257][ T848] dvb-usb: bulk message failed: -22 (3/0) [ 266.173131][ T848] dw2102: command 0x0e transfer failed. [ 266.174930][ T848] dvb-usb: bulk message failed: -22 (1/0) [ 266.176780][ T848] dw2102: command 0x51 transfer failed. [ 266.182202][T16694] dvb-usb: bulk message failed: -22 (4/0) [ 266.191444][T16694] dw2102: i2c transfer failed. [ 266.198621][ T848] DVB: Unable to find symbol ds3000_attach() [ 266.200211][T16750] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4386'. [ 266.200595][ T848] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 266.223923][ T42] audit: type=1400 audit(1785745762.705:1001): avc: denied { setopt } for pid=16749 comm="syz.9.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 266.257625][ T848] rc_core: IR keymap rc-su3000 not found [ 266.259495][ T848] Registered IR keymap rc-empty [ 266.262106][ T848] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 266.270960][ T848] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input34 [ 266.288024][ T848] dvb-usb: schedule remote query interval to 150 msecs. [ 266.293933][ T848] dw2102: su3000_power_ctrl: 0, initialized 1 [ 266.295892][ T848] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 266.309062][ T848] usb 11-1: USB disconnect, device number 31 [ 266.344853][ T848] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 266.971300][T16824] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.088360][T16824] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.163828][T16824] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.270452][T16824] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.299494][T16858] netlink: 'syz.9.4437': attribute type 12 has an invalid length. [ 267.332923][T16758] Set syz1 is full, maxelem 65536 reached [ 267.416806][ T42] audit: type=1400 audit(1785745763.895:1002): avc: denied { open } for pid=16869 comm="syz.6.4442" path="/dev/ptyr1" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 267.427500][ T5815] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.432799][ T5815] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.438709][ T42] audit: type=1400 audit(1785745763.925:1003): avc: denied { ioctl } for pid=16869 comm="syz.6.4442" path="/dev/ptyr1" dev="devtmpfs" ino=144 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 267.439754][ T5815] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.458841][ T5837] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.823513][T16939] netlink: 'syz.0.4475': attribute type 1 has an invalid length. [ 267.828830][T16939] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4475'. [ 267.839078][T16939] netlink: 'syz.0.4475': attribute type 2 has an invalid length. [ 267.841782][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4475'. [ 268.004091][T16971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.011085][T16971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.302776][T17009] tipc: Enabled bearer , priority 10 [ 268.372385][T17015] Bluetooth: MGMT ver 1.23 [ 268.456729][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4518'. [ 268.545524][T17035] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 268.556316][T17035] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 268.825159][ T5748] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 269.297663][ T24] tipc: Node number set to 3409492636 [ 269.608409][T17205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.612239][T17205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.897569][ T2331] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 270.047392][ T2331] usb 11-1: Using ep0 maxpacket: 8 [ 270.050454][ T2331] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 270.054096][ T2331] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 270.057361][ T2331] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.060478][ T2331] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.064653][ T2331] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.067955][ T2331] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.275107][ T2331] usb 11-1: GET_CAPABILITIES returned 0 [ 270.276932][ T2331] usbtmc 11-1:16.0: can't read capabilities [ 270.480623][ T5845] usb 11-1: USB disconnect, device number 32 [ 270.527259][T17228] bridge0: left allmulticast mode [ 270.612636][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4629'. [ 270.618969][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4629'. [ 270.788840][T17258] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 270.794981][T17258] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.799047][T17258] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.802201][T17258] bridge0: entered allmulticast mode [ 271.096650][T17278] netlink: 'syz.6.4640': attribute type 11 has an invalid length. [ 271.099597][T17278] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4640'. [ 271.366467][ T42] audit: type=1400 audit(1785745767.845:1004): avc: denied { accept } for pid=17299 comm="syz.0.4660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.453178][T17316] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.513075][ T5748] Bluetooth: hci0: unexpected event for opcode 0x202d [ 272.725241][T17393] WARNING! power/level is deprecated; use power/control instead [ 273.343551][T17416] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 273.384305][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.389023][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.409322][T17416] bridge0: entered allmulticast mode [ 273.462341][T17421] ------------[ cut here ]------------ [ 273.464948][T17421] !chanctx_conf [ 273.464962][T17421] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5b6/0x710, CPU#2: syz.6.4712/17421 [ 273.474588][T17421] Modules linked in: [ 273.479987][T17421] CPU: 2 UID: 0 PID: 17421 Comm: syz.6.4712 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.491117][T17421] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 273.504869][T17421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.522207][T17421] RIP: 0010:rate_control_rate_init+0x5b6/0x710 [ 273.539083][T17421] Code: 48 8d 35 00 00 00 00 e8 88 7e b5 f6 e8 f3 df be f6 e9 15 fe ff ff e8 29 e8 d9 f6 90 0f 0b 90 e9 07 fe ff ff e8 1b e8 d9 f6 90 <0f> 0b 90 eb b1 e8 10 e8 d9 f6 e8 db ea bd f6 31 ff 89 c3 89 c6 e8 [ 273.539932][ T42] audit: type=1400 audit(1785745769.975:1005): avc: denied { write } for pid=5719 comm="syz-executor" path="pipe:[6712]" dev="pipefs" ino=6712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 273.548187][T17421] RSP: 0018:ffffc90006b17220 EFLAGS: 00010287 [ 273.576719][T17421] RAX: 000000000000063c RBX: ffff88805bae8000 RCX: ffffc900045e1000 [ 273.581705][T17421] RDX: 0000000000080000 RSI: ffffffff8b307a05 RDI: ffff888025310000 [ 273.586081][T17421] RBP: ffff888059dfa4e0 R08: 0000000000000005 R09: 0000000000000000 [ 273.599070][T17421] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 273.603862][T17421] R13: 0000000000000000 R14: ffff888048690f40 R15: ffff888043a48000 [ 273.607747][T17421] FS: 00007f4405a176c0(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 273.614097][T17421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.618989][T17421] CR2: 00007fffc1bf8d50 CR3: 000000003a9ec000 CR4: 0000000000352ef0 [ 273.622422][T17421] Call Trace: [ 273.624990][T17421] [ 273.626080][T17421] rate_control_rate_init_all_links+0x76/0x1f0 [ 273.628734][T17421] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 273.630800][T17421] sta_apply_parameters+0x132f/0x21e0 [ 273.632732][T17421] ? __sta_info_alloc+0x1143/0x1cc0 [ 273.638916][T17421] ieee80211_add_station+0x3ff/0x760 [ 273.652920][T17421] nl80211_new_station+0x14a9/0x20e0 [ 273.655981][T17421] ? __pfx_nl80211_new_station+0x10/0x10 [ 273.663102][T17421] ? nl80211_pre_doit+0x19a/0xae0 [ 273.666230][T17421] genl_family_rcv_msg_doit+0x214/0x300 [ 273.670035][T17421] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 273.674653][T17421] ? bpf_lsm_capable+0x9/0x10 [ 273.677153][T17421] ? security_capable+0x80/0x260 [ 273.679856][T17421] ? ns_capable+0xd2/0xf0 [ 273.681862][T17421] genl_rcv_msg+0x560/0x800 [ 273.684296][T17421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.687128][T17421] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 273.689993][T17421] ? __pfx_nl80211_new_station+0x10/0x10 [ 273.692507][T17421] ? __pfx_nl80211_post_doit+0x10/0x10 [ 273.698272][T17421] ? __lock_acquire+0x49f/0x1a40 [ 273.702956][T17421] netlink_rcv_skb+0x159/0x420 [ 273.707523][T17421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.710479][T17421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.713500][T17421] ? netlink_deliver_tap+0x1ae/0xcc0 [ 273.718605][T17421] genl_rcv+0x28/0x40 [ 273.722826][T17421] netlink_unicast+0x585/0x850 [ 273.725609][T17421] ? __pfx_netlink_unicast+0x10/0x10 [ 273.735292][T17421] netlink_sendmsg+0x8b0/0xda0 [ 273.738601][T17421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.741849][T17421] ? selinux_socket_sendmsg+0x198/0x2f0 [ 273.744901][T17421] ____sys_sendmsg+0xa4d/0xbe0 [ 273.747081][T17421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.749590][T17421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.751906][T17421] ___sys_sendmsg+0x190/0x1e0 [ 273.754151][T17421] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.757037][T17421] ? __lock_acquire+0x49f/0x1a40 [ 273.760411][T17421] __sys_sendmsg+0x160/0x210 [ 273.763505][T17421] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.780342][T17421] do_syscall_64+0x115/0x870 [ 273.782656][T17421] ? clear_bhb_loop+0x40/0x90 [ 273.784753][T17421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.788238][T17421] RIP: 0033:0x7f4404b9e019 [ 273.790506][T17421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.819957][T17421] RSP: 002b:00007f4405a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.823975][T17421] RAX: ffffffffffffffda RBX: 00007f4404e25fa0 RCX: 00007f4404b9e019 [ 273.830384][T17421] RDX: 0000000004040004 RSI: 0000200000001080 RDI: 0000000000000003 [ 273.833696][T17421] RBP: 00007f4404c3500c R08: 0000000000000000 R09: 0000000000000000 [ 273.849826][T17421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.855024][T17421] R13: 00007f4404e26038 R14: 00007f4404e25fa0 R15: 00007ffe0137e3f8 [ 273.860073][T17421] [ 273.861936][T17421] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.880028][T17421] CPU: 2 UID: 0 PID: 17421 Comm: syz.6.4712 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.885921][T17421] Tainted: [L]=SOFTLOCKUP [ 273.888356][T17421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.892862][T17421] Call Trace: [ 273.909487][T17421] [ 273.910783][T17421] dump_stack_lvl+0x100/0x190 [ 273.912863][T17421] vpanic+0x552/0x970 [ 273.924852][T17421] ? __pfx_vpanic+0x10/0x10 [ 273.926854][T17421] panic+0xd1/0xe0 [ 273.928578][T17421] ? __pfx_panic+0x10/0x10 [ 273.930529][T17421] check_panic_on_warn.cold+0x19/0x34 [ 273.932854][T17421] ? rate_control_rate_init+0x5b6/0x710 [ 273.942390][T17421] __warn.cold+0x191/0x318 [ 273.944455][T17421] __report_bug+0x30f/0x440 [ 273.946472][T17421] ? rate_control_rate_init+0x5b6/0x710 [ 273.948854][T17421] ? __pfx___report_bug+0x10/0x10 [ 273.967688][T17421] ? ieee80211_add_station+0x5f1/0x760 [ 273.970347][T17421] ? nl80211_new_station+0x14a9/0x20e0 [ 273.973304][T17421] ? genl_family_rcv_msg_doit+0x214/0x300 [ 273.983161][T17421] ? genl_rcv_msg+0x560/0x800 [ 273.985265][T17421] ? netlink_rcv_skb+0x159/0x420 [ 273.987562][T17421] ? genl_rcv+0x28/0x40 [ 273.995345][T17421] ? netlink_unicast+0x585/0x850 [ 273.997460][T17421] ? netlink_sendmsg+0x8b0/0xda0 [ 273.999518][T17421] ? ____sys_sendmsg+0xa4d/0xbe0 [ 274.005956][T17421] ? ___sys_sendmsg+0x190/0x1e0 [ 274.008383][T17421] ? __sys_sendmsg+0x160/0x210 [ 274.017006][T17421] ? do_syscall_64+0x115/0x870 [ 274.019113][T17421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.028957][T17421] ? rate_control_rate_init+0x5b6/0x710 [ 274.031542][T17421] report_bug+0xb2/0x220 [ 274.057577][T17421] ? rate_control_rate_init+0x5b6/0x710 [ 274.060529][T17421] handle_bug+0x16a/0x2a0 [ 274.069870][T17421] exc_invalid_op+0x17/0x50 [ 274.071921][T17421] asm_exc_invalid_op+0x1a/0x20 [ 274.090532][T17421] RIP: 0010:rate_control_rate_init+0x5b6/0x710 [ 274.093234][T17421] Code: 48 8d 35 00 00 00 00 e8 88 7e b5 f6 e8 f3 df be f6 e9 15 fe ff ff e8 29 e8 d9 f6 90 0f 0b 90 e9 07 fe ff ff e8 1b e8 d9 f6 90 <0f> 0b 90 eb b1 e8 10 e8 d9 f6 e8 db ea bd f6 31 ff 89 c3 89 c6 e8 [ 274.102157][T17421] RSP: 0018:ffffc90006b17220 EFLAGS: 00010287 [ 274.105081][T17421] RAX: 000000000000063c RBX: ffff88805bae8000 RCX: ffffc900045e1000 [ 274.116988][T17421] RDX: 0000000000080000 RSI: ffffffff8b307a05 RDI: ffff888025310000 [ 274.120663][T17421] RBP: ffff888059dfa4e0 R08: 0000000000000005 R09: 0000000000000000 [ 274.132422][T17421] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 274.146984][T17421] R13: 0000000000000000 R14: ffff888048690f40 R15: ffff888043a48000 [ 274.151347][T17421] ? rate_control_rate_init+0x5b5/0x710 [ 274.154586][T17421] rate_control_rate_init_all_links+0x76/0x1f0 [ 274.157709][T17421] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 274.160147][T17421] sta_apply_parameters+0x132f/0x21e0 [ 274.163288][T17421] ? __sta_info_alloc+0x1143/0x1cc0 [ 274.174910][T17421] ieee80211_add_station+0x3ff/0x760 [ 274.177850][T17421] nl80211_new_station+0x14a9/0x20e0 [ 274.185035][T17421] ? __pfx_nl80211_new_station+0x10/0x10 [ 274.188190][T17421] ? nl80211_pre_doit+0x19a/0xae0 [ 274.190726][T17421] genl_family_rcv_msg_doit+0x214/0x300 [ 274.199046][T17421] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 274.213245][T17421] ? bpf_lsm_capable+0x9/0x10 [ 274.226282][T17421] ? security_capable+0x80/0x260 [ 274.228580][T17421] ? ns_capable+0xd2/0xf0 [ 274.230535][T17421] genl_rcv_msg+0x560/0x800 [ 274.232681][T17421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.236015][T17421] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 274.238804][T17421] ? __pfx_nl80211_new_station+0x10/0x10 [ 274.248270][T17421] ? __pfx_nl80211_post_doit+0x10/0x10 [ 274.251201][T17421] ? __lock_acquire+0x49f/0x1a40 [ 274.253581][T17421] netlink_rcv_skb+0x159/0x420 [ 274.271431][T17421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.274311][T17421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.276843][T17421] ? netlink_deliver_tap+0x1ae/0xcc0 [ 274.279165][T17421] genl_rcv+0x28/0x40 [ 274.280805][T17421] netlink_unicast+0x585/0x850 [ 274.282605][T17421] ? __pfx_netlink_unicast+0x10/0x10 [ 274.285381][T17421] netlink_sendmsg+0x8b0/0xda0 [ 274.289281][T17421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.292240][T17421] ? selinux_socket_sendmsg+0x198/0x2f0 [ 274.296296][T17421] ____sys_sendmsg+0xa4d/0xbe0 [ 274.299640][T17421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.302167][T17421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.304648][T17421] ___sys_sendmsg+0x190/0x1e0 [ 274.307326][T17421] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.309957][T17421] ? __lock_acquire+0x49f/0x1a40 [ 274.312042][T17421] __sys_sendmsg+0x160/0x210 [ 274.314981][T17421] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.318212][T17421] do_syscall_64+0x115/0x870 [ 274.320179][T17421] ? clear_bhb_loop+0x40/0x90 [ 274.322221][T17421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.325984][T17421] RIP: 0033:0x7f4404b9e019 [ 274.328923][T17421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.341779][T17421] RSP: 002b:00007f4405a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.347203][T17421] RAX: ffffffffffffffda RBX: 00007f4404e25fa0 RCX: 00007f4404b9e019 [ 274.352330][T17421] RDX: 0000000004040004 RSI: 0000200000001080 RDI: 0000000000000003 [ 274.358634][T17421] RBP: 00007f4404c3500c R08: 0000000000000000 R09: 0000000000000000 [ 274.363872][T17421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.368410][T17421] R13: 00007f4404e26038 R14: 00007f4404e25fa0 R15: 00007ffe0137e3f8 [ 274.373031][T17421] [ 274.376326][T17421] Kernel Offset: disabled [ 274.378685][T17421] Rebooting in 86400 seconds..