last executing test programs: 12.098626293s ago: executing program 2 (id=336): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pause() r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_RANGEINFO(r5, 0x80106408, &(0x7f0000003f80)={0xa, 0x0}) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 11.159396249s ago: executing program 2 (id=338): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000010000001000feffffffe000000200000000000000000000000000000000000000000000ffff0a01010200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000001000000000000003300000000000000000000000000ffff7f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c00170000000000ffffffff0000000000000022000000000000000048000100736861323536"], 0x15c}}, 0x0) 11.097378238s ago: executing program 2 (id=339): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a00ffffffff"], 0x5c}}, 0x800) 10.9898854s ago: executing program 2 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000000049c3"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xd0) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) write$UHID_INPUT2(r1, &(0x7f0000000080)={0xc, {0x1c, "1014b204699c4f9e263c9dba5da28b51b840189031c6b9c0d65bf4dd"}}, 0x22) (async) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000200)={0xc, {0x1, ' '}}, 0x7) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) (async) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'bond_slave_1\x00', 0x7f}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) r10 = accept$inet(r9, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) fsetxattr(r10, &(0x7f0000000180)=@known='trusted.syz\x00', &(0x7f00000001c0)='\x00', 0x1, 0x3) (async) ioprio_set$pid(0x0, 0x0, 0x6000) ioctl$XFS_IOC_BULKSTAT(r9, 0x8040587f, &(0x7f0000000bc0)={{0xfffffffffffffff7, 0x6, 0x8000, 0x5, 0x1}, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) (async) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) (async) semctl$IPC_RMID(0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newnexthop={0x17, 0x68, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x19) 3.731046701s ago: executing program 1 (id=409): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x80000, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xec7}]}, 0x28}}, 0x0) ioctl$MEMGETOOBSEL(r1, 0x80c84d0a, 0x0) 3.649934885s ago: executing program 1 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000004400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) listen(r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) close(r8) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000100)={0x18, 0x0, {0x100, @multicast, 'wg2\x00'}}, 0x1e) (async) connect$pppoe(r9, &(0x7f0000000100)={0x18, 0x0, {0x100, @multicast, 'wg2\x00'}}, 0x1e) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@getpolicy={0x5700, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in=@multicast1, @in6=@loopback, 0x4e23, 0x0, 0x4e20, 0x3, 0xa, 0x20, 0x20, 0x21}, 0x6e6bb7}}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@getpolicy={0x5700, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in=@multicast1, @in6=@loopback, 0x4e23, 0x0, 0x4e20, 0x3, 0xa, 0x20, 0x20, 0x21}, 0x6e6bb7}}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, r4, r5, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002200)={0x10, 0x0, r10}, 0x10) write$FUSE_IOCTL(r1, &(0x7f0000000140)={0x20, 0x0, r10, {0x800, 0x4, 0x80000001, 0xa}}, 0x20) (async) write$FUSE_IOCTL(r1, &(0x7f0000000140)={0x20, 0x0, r10, {0x800, 0x4, 0x80000001, 0xa}}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104ffffffff0400000000000000b6c01e64db30e8d5b14c0d4f89a1d5b2408703b6a74b127e66b02a91392ceb2facb78d28cb9b2c80699c8f07134f446d8b12e42f0a15b1c2bcc2f32c1e4e8e6fb03c761bd3714d5713ad1fa2811a3de4c61078f8cc7f05f7f2b29b29f2e6d03166fc0f1d925608aef09e07c249bb0018860aea9ca1d8113aa9fe29c540902a71d53942f15ea42e6629bcd8099714fe97f381c752", @ANYRES32=0x0, @ANYBLOB="410d0000008001002000128008000100687372001400028008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x400c090) 3.450180693s ago: executing program 1 (id=411): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11"], 0x17) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d05000002", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r2}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open(0x0, 0x0, 0x100) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x2, {{}, 0x1}}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x12, 0x80, 0x8, 0xe, 0x8, 0xff}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x4, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20004080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) getsockname$inet(r6, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffb, 0x9, 0x100003, 0x7fffffff, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) pread64(r8, 0x0, 0x0, 0x2f6) ioctl$COMEDI_BUFCONFIG(r8, 0x8020640d, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x134, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x4, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1000}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x8, 0x7, 0xff, 0x0, 0x2, 0x4, 0x2}}, {0x8, 0x2, [0xfff, 0x3]}}, {{0x1c, 0x1, {0x4, 0x0, 0x7, 0x7, 0x1, 0x100, 0x8, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x5, 0x0, 0x7b, 0x5857, 0x2, 0x7, 0x7, 0x3}}, {0xa, 0x2, [0x9, 0xff, 0x8103]}}, {{0x1c, 0x1, {0x6, 0x10, 0x9, 0x80000000, 0x1, 0x2b, 0x48, 0x1}}, {0x6, 0x2, [0x7fbf]}}, {{0x1c, 0x1, {0x0, 0x7, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3}}, {0xa, 0x2, [0x1, 0x3ff, 0x1ff]}}, {{0x1c, 0x1, {0x81, 0x2, 0x1, 0x2, 0x0, 0x40, 0xfffffffe, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x134}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 3.235676778s ago: executing program 1 (id=413): r0 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/44, 0x2c}], 0x1, 0x800008, 0x7) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x40000000}]}]}}, 0x0, 0x4a}, 0x20) r3 = openat(0xffffffffffffffff, 0x0, 0x40, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r7, @ANYRES16=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in=@local, @in=@multicast2, 0x4e23, 0x0, 0x4e21, 0xf, 0xa, 0x80, 0x20, 0x8}, {0x9, 0x200, 0x3, 0x1, 0x9, 0xffffffffffffffff, 0x1, 0x8000000000000001}, {0x3, 0x2, 0xff, 0x3}, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x2, @in=@remote, 0x3500, 0x0, 0x0, 0x5, 0x10a0, 0xa85, 0x4926}}, 0xe8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000002400)={0xc, {"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", 0x1025}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000dc0)={{r5, &(0x7f0000000080)=':\x00', 0x24000, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x3]}, {0x7fff, 0x6, 0xf, 0x49}}, 0x8, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x6}, 0x6, &(0x7f0000000d00)=[{0x2, 0xe00, &(0x7f0000000380)='bond0\x00', &(0x7f0000000700)="4f185aee70d187724843af23601995d9a206b07e4f0832dfb24f3c83a05d9854972c715fc4784523fb7ac900e647ccc40425228e276b940ad16198ad5fd45d0345dc9c4484ef0bdc14b27e8dd19f24475b31f22255a747e607def463b499a2f6fbadfe5597937c012963d4b0ded82589912a59f9bf5f336a77fc2ae72b9969b98dc9955d282f76524a5cc943abe6a820f4992dfa2d0f9f5fee50d07466eaf4313577951f4a2c7bbf75940215ee3ff777f9", 0xb1, 0x32}, {0x3, 0x80, &(0x7f00000007c0)='\x00', &(0x7f0000000800)="ed2b3d92bd34a39a78bab50b9afadf4d62e0e7060b8b3d5300a73e67f39ff14132b8c4abb7b15c484d851521f61fdf29a39a87b46b0a247c1677ff22df1d6a794dfab3755a729052a14e598ed9f82d6c16dfce3f565fdb059a1278dbb51c092e7cbaed2fd5bc86efeb13eed7fb71be5ce59118fc36aec96f02cdb585e51a767ae90097e0974a04a432bc6db62e13346ec9e7647e391d3e87bb33212e0727ac5f64fbafb916fbd50d574d79930ded8fd2f6ed2bad7c6130c6563714dbb2154d433fe000a0b84f5907f6bd29181a810069347db5c81326", 0xd6, 0x2}, {0x1, 0x1, &(0x7f0000000900)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000940)="dec3681e1e6d9daa1057b44ff5e6bb213b36319d9edac1d00c2bad9ea5714f5d2cebae729f8de205f9f1b41a93fae2a989b159b10f6187cfa76290104202b096df3fb7bffd7d8697b59864d3b341a02b4dcc0788fa487566658e2b834aefdfa05a802d03a49c6d8716e8899b2690c567cd3e98d28b61ab6e6d8ccc81fc42290fca98495d4cbae6af0aacc6d173552238fa8f11f15c3276bd7e0fbc9bc318363533d06959d21e53e08eb3c792d60290d019e5ec19ef97", 0xb6, 0x10}, {0x1, 0xd, &(0x7f0000000a00)='tracefs\x00', &(0x7f0000000a40)="0d3e9545571212b2601e58bfb74ec2c874b50c72dff8f1e987c4d00c7ccd01d794c75c4d5f76b2f28c8a25fdaf1b04a25279aae0879fdd3aac3302c7168764cec7057b7bd957e038bc277d51d714a73b3fdfe85f9f49ead09459cd152c0b2dd66f58844e9244f75ae6dc823fecd155ca661a05872b17211ed1a4dd8a20fc63aa787f503a7aaa51e31d6af38179534549151cfda47725917b21923c9f83a1", 0x9e, 0xe21a62a5cff39503}, {0x3, 0x3d8, &(0x7f0000000b00)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000b40)="a23fa6c08ba4b5301e7fd997ede8c16d340ae9f0e11a51fc500e09036c43f85731dcf36a7502619d2a99a6c83c9a3a9486bbbda335a1af80cb1cce2d90e33230022121affbbd3d30c4bb5845f63af0078c833746d58dccd0d8ab5849b2630161b2fc1590b7166ef843791a8f6e80bec595293bf28c5672daea1fa4685680713494017e8a6093e47cd9f0085e1aeda2", 0x8f, 0x2a}, {0x2, 0x10800000, &(0x7f0000000c00)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000c40)="95fa85648612239398709fcf92ad2cd79ca595659bc01adaa3aba8b7676fbd8d1bb83b8b1a128b4dcece16f0596db9023bd7902c8aabfa980b02b9c5b25cc218c06dfd708fcd7643a318e9673f4325b94bf87966ca02d6a93639886a14550ee12ee16066944b527e760d9a86c05a08bb4e8b909a21db5c2ae51d9396c3ce692625e11c2ea1296618d1ab9c438f21dc846fb93bb4a7cbbccb28b2e617c8fbd503501d04b364c6bd8989c66056a025162d24", 0xb1}]}) bind$unix(r10, &(0x7f0000000e40)=@file={0x0, './tracefs\x00'}, 0x6e) sendto$packet(r0, &(0x7f00000002c0)="05030e00d1fd14000000476b031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x5c) 3.02086708s ago: executing program 3 (id=415): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000), 0x10000000000000c5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2503000000200001800cffffff7f00"/46], 0x34}}, 0x4000000) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x40106150, &(0x7f0000000000)) 2.938579945s ago: executing program 1 (id=417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000180)=0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x7, 0x2}, 0x90) (async) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="54f20f70a10f000bf30fe606f1e40fc71a66b96e03000066b8e0a54e5266ba000000000f30ba4300ec0f00100f32440f20c066350d000000440f22c0baf80c66b8e680378d66efbafc0ced", 0x4b}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000280)="660f388065f0baf80c66b84049cd8c0f01c5bafc0ced0f40a800402e663e660ff7c726660f7ed3f20f38f0102e64660f6996e60066b8060000000f23d00f21f86635200000070f23f8a16f7af2f2f30f001e0700", 0x54}], 0x1, 0x7f64cef40ec0eff4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x20001, 0x0) write(r8, &(0x7f0000000150)='33', 0x2) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000400)="7f", 0x1}], 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0xff, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.270994193s ago: executing program 2 (id=420): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10001201}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c4084}, 0x10004800) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x1f, &(0x7f0000000080)={0x1000d, 0x23, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xffff}, {0xffff}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 2.150925551s ago: executing program 2 (id=421): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6005, &(0x7f0000000540)=0xa, 0x6, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)="c66835cbf1c2901cdc01050653f15ad74e03a5bd284e1b2f39666ef06878ae14cca2b90af5812441e516a609515a9aa284dad7749441155987", 0x39) (async) write$binfmt_misc(r0, &(0x7f0000000180)="c66835cbf1c2901cdc01050653f15ad74e03a5bd284e1b2f39666ef06878ae14cca2b90af5812441e516a609515a9aa284dad7749441155987", 0x39) r1 = epoll_create1(0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) getpid() (async) getpid() sched_setaffinity(0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x193) msgrcv(r3, 0x0, 0x0, 0x0, 0x2000) open(0x0, 0x50c943, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0xa, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000300)='memory.high\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x4) (async) sendfile(r6, r6, 0x0, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x9, 0x0, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0xfffffae3, 0x1, 0x4, 0x42, 0x2b, {}, {0x2, 0xc, 0xff, 0x7, 0x5, 0x8, "eb62e952"}, 0x10, 0x1, {&(0x7f0000000340)=[{0x6b24b64b, 0x2002, {0x5}}, {0xffff0001, 0x80000003, {0x100}}]}, 0x3}) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/167, 0xa7, 0x9e) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000180)=@userptr={0xfffffffe, 0xc, 0x4, 0x100, 0x6, {0x0, 0x2710}, {0x2, 0x8, 0x8, 0x6, 0x3, 0x8, 'BE\x00e'}, 0x1d98d517, 0x2, {0x0}, 0x3}) (async) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000180)=@userptr={0xfffffffe, 0xc, 0x4, 0x100, 0x6, {0x0, 0x2710}, {0x2, 0x8, 0x8, 0x6, 0x3, 0x8, 'BE\x00e'}, 0x1d98d517, 0x2, {0x0}, 0x3}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) socket$inet(0x2, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'ipvlan0\x00', 0x1000}) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'ipvlan0\x00', 0x1000}) 1.967845187s ago: executing program 1 (id=422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000000700)=""/230, 0xe6}], 0x1) readv(r1, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) bpf$MAP_CREATE(0x0, 0x0, 0x40) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r2, @ANYBLOB="000227bd7000fedbdf25870000000800030084353e7d95c5d93245500dbcdf0b8da20a9aad6966b6e1e69ad3bf8a4ac853cc84429f8179adc62417eec11582f38135254974673b897ba6468a5076bc6042e0edeb6ed62db600c90565cea8a2462261afc2672e385dfe5d638f991c70723b4ae9f4b1cd89e8ea4f7a49348385850391b128e58d16a4fb4a018a6a165d10833ea44b219ec8989cdf88adb7fc8b3b0a93ad10c80bdb97f602d961cd41c2382a2027806da242e09542eeb1128052ab48bf7ebf412e504cadb385835588b96253", @ANYRES32=r7, @ANYBLOB="06004800550000000c002a007606ff0d3f00f1ff6c002a00100111250301ab4501060c01968100c8dd56efd80e2a9c540aff7a4e153dae846643247f152c99f78e5fe69f8953a4fc4ba3384297ccc681923f4af7de3beef72927aceb6ad4849736a5e0242eeacc40f9c964da0cabc7b4499586d6fcb6b0b2aee37e90c480c258060048002e0000000a000600ffffffffffff0000"], 0xb0}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000000) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x100010, r4, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1904003}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x60, r2, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcd15, 0x4d}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x80}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xe}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x87}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 1.848109963s ago: executing program 3 (id=423): modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x400}, 0x10) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x381410c, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x102) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x2, 0x8}, 0x18) file_setattr(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x843, 0x9, 0x3, 0x1000000, 0x7}, 0x18, 0x1000) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x400}, 0x10) (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x381410c, 0x0) (async) creat(&(0x7f0000000180)='./file0\x00', 0x102) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x2, 0x8}, 0x18) (async) file_setattr(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x843, 0x9, 0x3, 0x1000000, 0x7}, 0x18, 0x1000) (async) 1.847778161s ago: executing program 3 (id=424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xc}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801") sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 1.740755845s ago: executing program 3 (id=425): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x26) sendto$inet(r1, 0x0, 0x0, 0x4004004, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000100)=0x3, 0x4) recvmmsg(r1, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010000, 0x0) listen(r1, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r3, &(0x7f00000001c0)='0\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x44}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x800) 1.669189181s ago: executing program 3 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x40}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000001100)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 1.600273891s ago: executing program 3 (id=430): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x2) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xfffffffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) write(r4, &(0x7f0000000140)="aa4283c1827434106356ecc779dfed6c", 0x10) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xc0) setresgid(0x0, 0x0, 0xee00) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10000, {{@in=@remote, @in=@remote, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x86, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x4004) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x5f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r7, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1.170230215s ago: executing program 0 (id=434): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa00000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) (async) listen(r1, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4) (async) fstat(r0, &(0x7f00000000c0)) (async) setreuid(r2, r2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa00000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x28) (async) 1.120807368s ago: executing program 0 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001a0)={'wlan1\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'wlan1\x00', @ifru_flags=0x1}) io_setup(0xeb0, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x40000000000007b, 0x4004) io_getevents(r1, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={r2, r3+10000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000400)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x0, r5, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000100)={0x18}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000580)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r6 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r7, &(0x7f0000000700)='bind', 0x4) r8 = eventfd(0x5) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r10, r10, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r10, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$pppoe(0x18, 0x1, 0x0) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r12, 0x0, 0xd) io_submit(r1, 0x4, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x5, r6, &(0x7f00000000c0)="d53876929bfc9bb7b0099cb6532828b122f4c8db2df11c7a7ebf3affc5f7ab47d3bdadce927935cd888d8ed2b105521aa7301fd3c34870a0f9ef3acfa8f06f579c8297d5e78bc4b0d8b11d6f99accdb9f5c7e017af5609aa5c82ee1f4c567c7c779946402253d67b2053410ca110b895761d7c0523", 0x75, 0xa, 0x0, 0x1, r7}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x9, r6, &(0x7f0000000240)="72be10afe4251fb79d2ffb0e49e0202346d566dde914c95b04d04c2e928dc32176956f69203877682d51d4729090a0cb4d8f63ef7796d5a4d9284b50ddb81146a99f5d5650df720ebed6ef4a137b4317bda198d3a7f88ddad5e89caee491d759a6d8020ffe13ab819ccbf791779b16", 0x6f, 0x380, 0x0, 0x2, r8}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000300)="9c8ce4903d4b0fa4443706c046f8977c585e", 0x12, 0x5, 0x0, 0x1, r11}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x9, r6, &(0x7f00000003c0)="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", 0xfd, 0x41, 0x0, 0x1, r12}]) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 180.631011ms ago: executing program 0 (id=436): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x2c, 0x28, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0x10}, {0xc, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x2c}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xc}]}}]}, 0x3c}}, 0x20004055) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180), &(0x7f0000000340)=ANY=[@ANYBLOB="00fb550009349dfd0fcf95c44d7d42e606a617b7e2e3398fcea16c49fa71e3da90656d5ea8dfd23e4f30c21043e76c0a53a8c91ae5a9a5baaf9e16cb01d596e164c6983d027e54a6000000000000d39bef34a78daf1ecbc64cb87c6ed2fdcb989d0069363a3b9082a14899b01c92275213368263fe6be20c47dd5d658c524645df0533abae52af2f6d2a235e0e38a542f0"], 0x55, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000400), 0x84800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) 180.439799ms ago: executing program 0 (id=437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000010000001000feffffffe000000200000000000000000000000000000000000000000000ffff0a01010200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000001d000000000000000000000000003300000000000000000000000000ffff7f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c00170000000000ffffffff0000000000000022000000000000000048000100736861323536"], 0x15c}}, 0x0) 100.994134ms ago: executing program 0 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdffb, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x8000400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000000)={0xc00000, [[0x200, 0x7fffffff, 0x7fffffff, 0xb7de, 0x6, 0x101, 0x3f615d60, 0x7], [0xfffffff2, 0xffffffc0, 0x800, 0xeb7, 0x838, 0x8001, 0x4, 0xfffffffa], [0x3, 0x6, 0x1, 0x3, 0x6, 0x5, 0x7000, 0x16002]], '\x00', [{0x458, 0x7fff, 0x1}, {0x44c5, 0x2, 0x0, 0x1, 0x0, 0x1}, {0xffffffff, 0x8000, 0x0, 0x1, 0x1}, {0x8, 0x6}, {0x2, 0x8, 0x1, 0x0, 0x1, 0x1}, {0xdd, 0xff, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0x1000, 0x1, 0x1, 0x1}, {0xabe, 0xfffffffa, 0x1, 0x1, 0x1}, {0x4, 0x9, 0x1}, {0x8, 0x5, 0x0, 0x0, 0x1}], '\x00', 0xf7d}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000513000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000034a000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc801) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3e45, 0x1c080, 0x10040, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:59318' (ED25519) to the list of known hosts. [ 40.107306][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.107321][ T43] audit: type=1400 audit(1789812546.373:138): avc: denied { name_bind } for pid=5718 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.153594][ T43] audit: type=1400 audit(1789812546.413:139): avc: denied { execute } for pid=5719 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.154368][ T43] audit: type=1400 audit(1789812546.413:140): avc: denied { execute_no_trans } for pid=5719 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.675952][ T43] audit: type=1400 audit(1789812548.943:141): avc: denied { mounton } for pid=5719 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.677693][ T43] audit: type=1400 audit(1789812548.943:142): avc: denied { mount } for pid=5719 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.681316][ T5719] cgroup: Unknown subsys name 'net' [ 42.683138][ T43] audit: type=1400 audit(1789812548.943:143): avc: denied { unmount } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.820028][ T5719] cgroup: Unknown subsys name 'cpuset' [ 42.824232][ T5719] cgroup: Unknown subsys name 'rlimit' [ 42.977343][ T43] audit: type=1400 audit(1789812549.243:144): avc: denied { setattr } for pid=5719 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.977584][ T43] audit: type=1400 audit(1789812549.243:145): avc: denied { create } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.977924][ T43] audit: type=1400 audit(1789812549.243:146): avc: denied { write } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.978311][ T43] audit: type=1400 audit(1789812549.243:147): avc: denied { read } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 43.057556][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 43.851952][ T5719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.723693][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 47.723710][ T43] audit: type=1400 audit(1789812553.983:158): avc: denied { execmem } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.983492][ T43] audit: type=1400 audit(1789812554.243:159): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.984110][ T43] audit: type=1400 audit(1789812554.243:160): avc: denied { read write } for pid=5730 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.984992][ T43] audit: type=1400 audit(1789812554.253:161): avc: denied { open } for pid=5730 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.993886][ T43] audit: type=1400 audit(1789812554.253:162): avc: denied { ioctl } for pid=5730 comm="syz-executor" path="socket:[6755]" dev="sockfs" ino=6755 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.049124][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.050183][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.051959][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.055425][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.056938][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.058695][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.059432][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.061021][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.061987][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.062576][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.062603][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.062920][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.064173][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.064305][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.066482][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.067388][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.067636][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.070139][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.071643][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.072466][ T43] audit: type=1400 audit(1789812554.333:163): avc: denied { read } for pid=5730 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.073042][ T43] audit: type=1400 audit(1789812554.333:164): avc: denied { open } for pid=5730 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.083075][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.089091][ T43] audit: type=1400 audit(1789812554.343:165): avc: denied { mounton } for pid=5730 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.095091][ T43] audit: type=1400 audit(1789812554.363:166): avc: denied { module_request } for pid=5738 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.127105][ T43] audit: type=1400 audit(1789812554.383:167): avc: denied { sys_module } for pid=5731 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.738843][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.738933][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.738998][ T5731] bridge_slave_0: entered allmulticast mode [ 48.739779][ T5731] bridge_slave_0: entered promiscuous mode [ 48.742761][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.742801][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.742950][ T5731] bridge_slave_1: entered allmulticast mode [ 48.743719][ T5731] bridge_slave_1: entered promiscuous mode [ 48.799086][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.799176][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.799214][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.799376][ T5737] bridge_slave_0: entered allmulticast mode [ 48.800374][ T5737] bridge_slave_0: entered promiscuous mode [ 48.806694][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.806767][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.807293][ T5737] bridge_slave_1: entered allmulticast mode [ 48.809161][ T5737] bridge_slave_1: entered promiscuous mode [ 48.822787][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.822829][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.822990][ T5738] bridge_slave_0: entered allmulticast mode [ 48.823699][ T5738] bridge_slave_0: entered promiscuous mode [ 48.825802][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.825863][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.825945][ T5738] bridge_slave_1: entered allmulticast mode [ 48.827150][ T5738] bridge_slave_1: entered promiscuous mode [ 48.830286][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.858189][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.858271][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.859505][ T5730] bridge_slave_0: entered allmulticast mode [ 48.860879][ T5730] bridge_slave_0: entered promiscuous mode [ 48.882456][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.885808][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.885930][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.885968][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.886022][ T5730] bridge_slave_1: entered allmulticast mode [ 48.886812][ T5730] bridge_slave_1: entered promiscuous mode [ 48.902482][ T5731] team0: Port device team_slave_0 added [ 48.905567][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.919465][ T5731] team0: Port device team_slave_1 added [ 48.921613][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.929116][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.932104][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.949941][ T5737] team0: Port device team_slave_0 added [ 48.986835][ T5737] team0: Port device team_slave_1 added [ 48.988837][ T5738] team0: Port device team_slave_0 added [ 48.989623][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.989636][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.989659][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.015502][ T5738] team0: Port device team_slave_1 added [ 49.026270][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.026285][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.026306][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.027318][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.027331][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.027351][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.029669][ T5730] team0: Port device team_slave_0 added [ 49.049585][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.049602][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.049622][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.051589][ T5730] team0: Port device team_slave_1 added [ 49.100073][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.100089][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.100108][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.101970][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.101983][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.102003][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.103445][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.103452][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.103464][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.115896][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.115911][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.115933][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.121879][ T5731] hsr_slave_0: entered promiscuous mode [ 49.122746][ T5731] hsr_slave_1: entered promiscuous mode [ 49.162438][ T5737] hsr_slave_0: entered promiscuous mode [ 49.163191][ T5737] hsr_slave_1: entered promiscuous mode [ 49.163722][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 49.163792][ T5737] Cannot create hsr debugfs directory [ 49.191619][ T5730] hsr_slave_0: entered promiscuous mode [ 49.192381][ T5730] hsr_slave_1: entered promiscuous mode [ 49.193018][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 49.193031][ T5730] Cannot create hsr debugfs directory [ 49.250638][ T5738] hsr_slave_0: entered promiscuous mode [ 49.251131][ T5738] hsr_slave_1: entered promiscuous mode [ 49.251435][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 49.251447][ T5738] Cannot create hsr debugfs directory [ 49.616190][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.626444][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.627139][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.631821][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.638307][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.641584][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.642056][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.644063][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.705147][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.709182][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.710245][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.717917][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.725151][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.729075][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.729801][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.733164][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.818273][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.821147][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.821670][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.823831][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.829718][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.833646][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.840862][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.847525][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.888419][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.930141][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.935668][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.936426][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.940936][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.951560][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.954403][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.955719][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.961006][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.974436][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.990206][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.990331][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.994490][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.015822][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.015908][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.045962][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.068453][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.068537][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.082853][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.082931][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.106028][ T5734] Bluetooth: hci1: command tx timeout [ 50.106241][ T66] Bluetooth: hci0: command tx timeout [ 50.107231][ T5744] Bluetooth: hci3: command tx timeout [ 50.107420][ T5741] Bluetooth: hci2: command tx timeout [ 50.147768][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.180616][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.190526][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.190672][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.197691][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.197774][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.201317][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.233637][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.262305][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.262465][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.280265][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.280313][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.505809][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.536594][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.544549][ T5737] veth0_vlan: entered promiscuous mode [ 50.553065][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.553456][ T5737] veth1_vlan: entered promiscuous mode [ 50.581477][ T5737] veth0_macvtap: entered promiscuous mode [ 50.600361][ T5737] veth1_macvtap: entered promiscuous mode [ 50.602075][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.621872][ T5730] veth0_vlan: entered promiscuous mode [ 50.622599][ T5731] veth0_vlan: entered promiscuous mode [ 50.649193][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.653063][ T5730] veth1_vlan: entered promiscuous mode [ 50.659845][ T5731] veth1_vlan: entered promiscuous mode [ 50.663952][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.695131][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.713912][ T5738] veth0_vlan: entered promiscuous mode [ 50.727021][ T5731] veth0_macvtap: entered promiscuous mode [ 50.731924][ T5731] veth1_macvtap: entered promiscuous mode [ 50.737504][ T5738] veth1_vlan: entered promiscuous mode [ 50.747604][ T5730] veth0_macvtap: entered promiscuous mode [ 50.758698][ T5730] veth1_macvtap: entered promiscuous mode [ 50.783360][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.783380][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.786398][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.794982][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.799229][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.806139][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.819952][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.831167][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.831180][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.846822][ T5738] veth0_macvtap: entered promiscuous mode [ 50.864819][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864851][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864878][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864908][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864927][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864946][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864965][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864984][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.865002][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.865021][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.881180][ T5738] veth1_macvtap: entered promiscuous mode [ 50.923950][ T5737] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.939555][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.943009][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.943028][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.975593][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.975613][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.989529][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.022036][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.022048][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.042740][ T226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.042760][ T226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.065776][ T5808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.065916][ T5808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.081102][ T5808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.111659][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.111673][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.140404][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.140426][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.156775][ T5808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.169823][ T5885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5'. [ 51.321626][ T5903] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7'. [ 51.386050][ T5741] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 51.386065][ T5741] CPU: 0 UID: 0 PID: 5741 Comm: kworker/u34:3 Not tainted syzkaller #0 PREEMPT(full) [ 51.386080][ T5741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.386088][ T5741] Workqueue: hci1 hci_rx_work [ 51.386107][ T5741] Call Trace: [ 51.386111][ T5741] [ 51.386116][ T5741] dump_stack_lvl+0x100/0x190 [ 51.386136][ T5741] sysfs_warn_dup.cold+0x1c/0x28 [ 51.386154][ T5741] sysfs_create_dir_ns+0x24b/0x2b0 [ 51.386171][ T5741] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 51.386185][ T5741] ? find_held_lock+0x2b/0x80 [ 51.386201][ T5741] ? kobject_add_internal+0x25f/0x930 [ 51.386215][ T5741] ? kobject_add_internal+0x25f/0x930 [ 51.386230][ T5741] ? do_raw_spin_unlock+0x145/0x1e0 [ 51.386246][ T5741] kobject_add_internal+0x2c8/0x930 [ 51.386261][ T5741] kobject_add+0x16a/0x1e0 [ 51.386273][ T5741] ? __pfx_kobject_add+0x10/0x10 [ 51.386285][ T5741] ? class_to_subsys+0x10f/0x150 [ 51.386304][ T5741] ? kobject_put+0xb9/0x640 [ 51.386314][ T5741] ? _raw_spin_unlock+0x28/0x50 [ 51.386333][ T5741] device_add+0x294/0x1970 [ 51.386349][ T5741] ? __pfx_dev_set_name+0x10/0x10 [ 51.386373][ T5741] ? __pfx_device_add+0x10/0x10 [ 51.386390][ T5741] ? mgmt_send_event_skb+0x2fb/0x460 [ 51.386410][ T5741] hci_conn_add_sysfs+0x1a3/0x260 [ 51.386428][ T5741] le_conn_complete_evt+0x122f/0x2130 [ 51.386445][ T5741] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 51.386459][ T5741] ? hci_event_packet+0x186/0xcd0 [ 51.386473][ T5741] ? hci_event_packet+0x186/0xcd0 [ 51.386490][ T5741] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 51.386507][ T5741] ? skb_pull_data+0x15f/0x1e0 [ 51.386526][ T5741] hci_le_meta_evt+0x34a/0x5f0 [ 51.386542][ T5741] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 51.386558][ T5741] hci_event_packet+0x51c/0xcd0 [ 51.386572][ T5741] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 51.386586][ T5741] ? __pfx_hci_event_packet+0x10/0x10 [ 51.386603][ T5741] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.386621][ T5741] hci_rx_work+0x451/0xfc0 [ 51.386637][ T5741] process_one_work+0xac7/0x1b10 [ 51.386660][ T5741] ? __pfx_process_one_work+0x10/0x10 [ 51.386677][ T5741] ? lock_acquire+0x1d1/0x380 [ 51.386693][ T5741] ? __pfx_hci_rx_work+0x10/0x10 [ 51.386723][ T5741] worker_thread+0x5ef/0xe50 [ 51.386748][ T5741] ? kthread+0x13a/0x450 [ 51.386764][ T5741] ? __pfx_worker_thread+0x10/0x10 [ 51.386782][ T5741] kthread+0x373/0x450 [ 51.386798][ T5741] ? __pfx_kthread+0x10/0x10 [ 51.386815][ T5741] ret_from_fork+0x730/0xd60 [ 51.386831][ T5741] ? __pfx_ret_from_fork+0x10/0x10 [ 51.386845][ T5741] ? __switch_to+0x800/0x10f0 [ 51.386861][ T5741] ? __pfx_kthread+0x10/0x10 [ 51.386877][ T5741] ret_from_fork_asm+0x1a/0x30 [ 51.386896][ T5741] [ 51.386934][ T5741] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 51.386952][ T5741] Bluetooth: hci1: failed to register connection device [ 51.412050][ T5915] netlink: 'syz.1.11': attribute type 2 has an invalid length. [ 51.445991][ T5913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 51.446426][ T5913] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 51.452557][ T5913] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 51.459477][ T5913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 51.459877][ T5913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 51.465000][ T5913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 51.470089][ T5913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 51.472774][ T5913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 51.472903][ T5913] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 51.477440][ T5913] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 51.481164][ T5913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 51.481238][ T5913] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 51.483712][ T5915] ======================================================= [ 51.483712][ T5915] WARNING: The mand mount option has been deprecated and [ 51.483712][ T5915] and is ignored by this kernel. Remove the mand [ 51.483712][ T5915] option from the mount to silence this warning. [ 51.483712][ T5915] ======================================================= [ 51.484534][ T5913] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 51.683806][ T5927] Zero length message leads to an empty skb [ 51.717333][ T5930] netlink: zone id is out of range [ 51.717349][ T5930] netlink: zone id is out of range [ 51.717355][ T5930] netlink: zone id is out of range [ 51.717386][ T5930] netlink: set zone limit has 4 unknown bytes [ 51.941692][ T5940] 8021q: VLANs not supported on vcan0 [ 52.009057][ T5947] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 52.090251][ T5954] 9p: Bad value for 'rfdno' [ 52.162197][ T5956] vlan2: entered promiscuous mode [ 52.162220][ T5956] hsr0: entered promiscuous mode [ 52.162659][ T5956] vlan2: entered allmulticast mode [ 52.162674][ T5956] hsr0: entered allmulticast mode [ 52.162686][ T5956] hsr_slave_0: entered allmulticast mode [ 52.162699][ T5956] hsr_slave_1: entered allmulticast mode [ 52.166900][ T5958] overlayfs: failed to resolve './bus': -2 [ 52.168097][ T5961] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 52.185566][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.240817][ T5971] netlink: 68 bytes leftover after parsing attributes in process `syz.2.28'. [ 52.247932][ T5973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.29'. [ 52.262691][ T5973] random: crng reseeded on system resumption [ 52.320755][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30'. [ 52.337748][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.341449][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.341485][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.341504][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.341537][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.376731][ T9] usb 6-1: config 0 descriptor?? [ 52.382765][ T5744] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 52.419646][ T5975] could not allocate digest TFM handle cryptd(blake2b-160) [ 52.546903][ T6001] ªªªªªª: renamed from vlan0 (while UP) [ 52.662811][ T6007] program syz.2.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.676603][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 52.676702][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 52.686511][ T9] usb 6-1: USB disconnect, device number 2 [ 53.124295][ T43] kauditd_printk_skb: 130 callbacks suppressed [ 53.124333][ T43] audit: type=1400 audit(1789812559.383:298): avc: denied { setopt } for pid=6023 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.161560][ T6026] bridge0: port 3(veth0) entered blocking state [ 53.162352][ T6026] bridge0: port 3(veth0) entered disabled state [ 53.162488][ T6026] veth0: entered allmulticast mode [ 53.163862][ T6026] veth0: entered promiscuous mode [ 53.166783][ T6026] bridge0: port 3(veth0) entered blocking state [ 53.166864][ T6026] bridge0: port 3(veth0) entered forwarding state [ 53.252764][ T43] audit: type=1400 audit(1789812559.513:299): avc: denied { write } for pid=6031 comm="syz.1.41" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.256116][ T43] audit: type=1400 audit(1789812559.513:300): avc: denied { ioctl } for pid=6031 comm="syz.1.41" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.271710][ T6032] vlan2: entered promiscuous mode [ 53.271730][ T6032] hsr0: entered promiscuous mode [ 53.272894][ T6032] vlan2: entered allmulticast mode [ 53.272908][ T6032] hsr0: entered allmulticast mode [ 53.272915][ T6032] hsr_slave_0: entered allmulticast mode [ 53.272924][ T6032] hsr_slave_1: entered allmulticast mode [ 53.277120][ T43] audit: type=1400 audit(1789812559.543:301): avc: denied { ioctl } for pid=6031 comm="syz.1.41" path="socket:[9826]" dev="sockfs" ino=9826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.277168][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 53.278926][ T6032] hsr_slave_0: left promiscuous mode [ 53.283404][ T6032] hsr_slave_1: left promiscuous mode [ 53.429747][ T6034] netlink: 72 bytes leftover after parsing attributes in process `syz.0.42'. [ 53.433813][ T6034] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 53.466131][ T5744] Bluetooth: hci1: command 0x040f tx timeout [ 53.466145][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 53.569272][ T5741] Bluetooth: hci2: command 0x040f tx timeout [ 53.794104][ T6047] netlink: 'syz.2.47': attribute type 21 has an invalid length. [ 53.794139][ T6047] netlink: 'syz.2.47': attribute type 6 has an invalid length. [ 53.794146][ T6047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.47'. [ 53.795679][ T6047] netlink: 44 bytes leftover after parsing attributes in process `syz.2.47'. [ 53.880057][ T6051] netlink: zone id is out of range [ 53.880067][ T6051] netlink: zone id is out of range [ 53.880070][ T6051] netlink: zone id is out of range [ 53.880097][ T6051] netlink: set zone limit has 4 unknown bytes [ 53.977218][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 53.978798][ T6056] netlink: 'syz.1.52': attribute type 3 has an invalid length. [ 53.982894][ T6059] openvswitch: netlink: Flow key attr not present in new flow. [ 54.012499][ T43] audit: type=1400 audit(1789812560.273:302): avc: denied { write } for pid=6055 comm="syz.1.52" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 54.095139][ T43] audit: type=1400 audit(1789812560.363:303): avc: denied { ioctl } for pid=6065 comm="syz.2.53" path="socket:[13239]" dev="sockfs" ino=13239 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.119803][ T43] audit: type=1400 audit(1789812560.383:304): avc: denied { sys_module } for pid=6065 comm="syz.2.53" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.182597][ T43] audit: type=1400 audit(1789812560.443:305): avc: denied { setopt } for pid=6069 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.192241][ T43] audit: type=1400 audit(1789812560.443:306): avc: denied { write } for pid=6069 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.248727][ T6082] xfrm1: entered promiscuous mode [ 54.248741][ T6082] xfrm1: entered allmulticast mode [ 54.254099][ T6083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40645 sclass=netlink_route_socket pid=6083 comm=syz.2.57 [ 54.287794][ T43] audit: type=1400 audit(1789812560.553:307): avc: denied { read } for pid=6086 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.386538][ T6097] syz.1.60 uses obsolete (PF_INET,SOCK_PACKET) [ 54.714753][ T42] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 54.849977][ T6115] pimreg: tun_chr_ioctl cmd 1074025675 [ 54.849992][ T6115] pimreg: persist disabled [ 55.096945][ T6120] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 55.198015][ T6122] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(23) [ 55.198039][ T6122] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 55.198721][ T6122] vhci_hcd vhci_hcd.0: Device attached [ 55.346577][ T6125] vhci_hcd: connection closed [ 55.349200][ T13] vhci_hcd vhci_hcd.2: stop threads [ 55.349388][ T13] vhci_hcd vhci_hcd.2: release socket [ 55.349404][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 55.383908][ T42] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 55.385683][ T42] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 55.385714][ T42] usb 6-1: can't read configurations, error -71 [ 55.545636][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 55.545679][ T5744] Bluetooth: hci1: command 0x040f tx timeout [ 55.634672][ T5744] Bluetooth: hci2: command 0x040f tx timeout [ 55.794966][ T42] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 55.961209][ T6144] netlink: zone id is out of range [ 55.974633][ T42] usb 6-1: Invalid ep0 maxpacket: 64 [ 55.978282][ T42] usb usb6-port1: attempt power cycle [ 56.163234][ T6154] netlink: 'syz.3.78': attribute type 2 has an invalid length. [ 56.324730][ T42] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 56.346782][ T42] usb 6-1: Invalid ep0 maxpacket: 64 [ 56.355623][ T6157] warning: `syz.3.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.474670][ T42] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 56.498970][ T42] usb 6-1: Invalid ep0 maxpacket: 64 [ 56.499184][ T42] usb usb6-port1: unable to enumerate USB device [ 56.783069][ T6172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6172 comm=syz.2.83 [ 56.832346][ T6183] fuse: Bad value for 'fd' [ 56.832490][ T6183] fuse: Bad value for 'fd' [ 56.832607][ T6183] fuse: Bad value for 'fd' [ 56.832736][ T6183] fuse: Bad value for 'fd' [ 56.832882][ T6183] fuse: Bad value for 'fd' [ 56.833010][ T6183] fuse: Bad value for 'fd' [ 56.833124][ T6183] fuse: Bad value for 'fd' [ 56.833248][ T6183] fuse: Bad value for 'fd' [ 56.833361][ T6183] fuse: Bad value for 'fd' [ 56.833486][ T6183] fuse: Bad value for 'fd' [ 56.833602][ T6183] fuse: Bad value for 'fd' [ 56.833728][ T6183] fuse: Bad value for 'fd' [ 56.833863][ T6183] fuse: Bad value for 'fd' [ 56.833991][ T6183] fuse: Bad value for 'fd' [ 56.860402][ T6183] fuse: Bad value for 'fd' [ 56.860543][ T6183] fuse: Bad value for 'fd' [ 56.860661][ T6183] fuse: Bad value for 'fd' [ 56.860790][ T6183] fuse: Bad value for 'fd' [ 56.860897][ T6183] fuse: Bad value for 'fd' [ 56.861006][ T6183] fuse: Bad value for 'fd' [ 56.861115][ T6183] fuse: Bad value for 'fd' [ 56.861221][ T6183] fuse: Bad value for 'fd' [ 56.861327][ T6183] fuse: Bad value for 'fd' [ 56.861435][ T6183] fuse: Bad value for 'fd' [ 56.861543][ T6183] fuse: Bad value for 'fd' [ 56.861649][ T6183] fuse: Bad value for 'fd' [ 56.861762][ T6183] fuse: Bad value for 'fd' [ 56.861872][ T6183] fuse: Bad value for 'fd' [ 56.861985][ T6183] fuse: Bad value for 'fd' [ 56.862096][ T6183] fuse: Bad value for 'fd' [ 56.862205][ T6183] fuse: Bad value for 'fd' [ 56.862314][ T6183] fuse: Bad value for 'fd' [ 56.862420][ T6183] fuse: Bad value for 'fd' [ 56.876327][ T6184] 9pnet_virtio: no channels available for device  [ 56.950967][ T6196] No buffer was provided with the request [ 57.165759][ T6207] net_ratelimit: 3 callbacks suppressed [ 57.165777][ T6207] netlink: zone id is out of range [ 57.165784][ T6207] netlink: zone id is out of range [ 57.165790][ T6207] netlink: zone id is out of range [ 57.165818][ T6207] netlink: set zone limit has 4 unknown bytes [ 57.178196][ T6198] evm: overlay not supported [ 57.256326][ T6210] 9pnet_virtio: no channels available for device syz [ 57.434908][ T6214] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.435074][ T6214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.435213][ T6214] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.435373][ T6214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.724083][ T6228] capability: warning: `syz.0.96' uses deprecated v2 capabilities in a way that may be insecure [ 57.778790][ T6236] __nla_validate_parse: 7 callbacks suppressed [ 57.778809][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 57.795442][ T6241] capability: warning: `syz.3.98' uses 32-bit capabilities (legacy support in use) [ 57.854608][ T6247] qrtr: Invalid version 0 [ 57.963018][ T6254] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 58.001810][ T6256] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.104'. [ 58.002411][ T6257] netlink: 'syz.0.104': attribute type 4 has an invalid length. [ 58.003490][ T6256] netlink: 'syz.0.104': attribute type 23 has an invalid length. [ 58.004749][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.020945][ T6256] netlink: 'syz.0.104': attribute type 4 has an invalid length. [ 58.063685][ T6263] FAULT_INJECTION: forcing a failure. [ 58.063685][ T6263] name failslab, interval 1, probability 0, space 0, times 1 [ 58.063715][ T6263] CPU: 3 UID: 0 PID: 6263 Comm: syz.3.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.063737][ T6263] Tainted: [L]=SOFTLOCKUP [ 58.063742][ T6263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.063751][ T6263] Call Trace: [ 58.063757][ T6263] [ 58.063764][ T6263] dump_stack_lvl+0x100/0x190 [ 58.063795][ T6263] should_fail_ex.cold+0x5/0xa [ 58.063820][ T6263] should_failslab+0xc2/0x120 [ 58.063841][ T6263] __kmalloc_cache_noprof+0x91/0x6d0 [ 58.063867][ T6263] ? bpf_prog_alloc_no_stats+0x161/0x690 [ 58.063894][ T6263] bpf_prog_alloc_no_stats+0x161/0x690 [ 58.063918][ T6263] bpf_prog_alloc+0x3b/0x200 [ 58.063936][ T6263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.063958][ T6263] bpf_prog_load+0x49e/0x2a80 [ 58.063985][ T6263] ? __pfx_bpf_prog_load+0x10/0x10 [ 58.064042][ T6263] __sys_bpf+0x1f46/0x4a30 [ 58.064069][ T6263] ? __pfx___sys_bpf+0x10/0x10 [ 58.064086][ T6263] ? find_held_lock+0x2b/0x80 [ 58.064111][ T6263] ? futex_wake+0x4ea/0x5e0 [ 58.064154][ T6263] ? percpu_counter_add_batch+0xb9/0x230 [ 58.064178][ T6263] ? errseq_sample+0x51/0x70 [ 58.064199][ T6263] ? file_init_path+0x48e/0x670 [ 58.064237][ T6263] ? __x64_sys_futex+0x34f/0x4d0 [ 58.064259][ T6263] ? __x64_sys_futex+0x358/0x4d0 [ 58.064284][ T6263] ? __sys_socket+0xac/0x260 [ 58.064317][ T6263] ? xfd_validate_state+0x129/0x190 [ 58.064343][ T6263] ? __x64_sys_bpf+0xce/0x140 [ 58.064362][ T6263] __x64_sys_bpf+0xce/0x140 [ 58.064381][ T6263] ? do_syscall_64+0xae/0x790 [ 58.064403][ T6263] do_syscall_64+0x123/0x790 [ 58.064423][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.064436][ T6263] RIP: 0033:0x7fdb53d9e159 [ 58.064448][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.064459][ T6263] RSP: 002b:00007fdb54d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.064471][ T6263] RAX: ffffffffffffffda RBX: 00007fdb54025fa0 RCX: 00007fdb53d9e159 [ 58.064479][ T6263] RDX: 0000000000000090 RSI: 0000200000000a40 RDI: 0000000000000005 [ 58.064485][ T6263] RBP: 00007fdb53e3506b R08: 0000000000000000 R09: 0000000000000000 [ 58.064491][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.064498][ T6263] R13: 00007fdb54026038 R14: 00007fdb54025fa0 R15: 00007ffcb29d64c8 [ 58.064512][ T6263] [ 58.129715][ T43] kauditd_printk_skb: 62 callbacks suppressed [ 58.129784][ T43] audit: type=1400 audit(1789812564.393:370): avc: denied { write } for pid=6262 comm="syz.0.106" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 58.130231][ T43] audit: type=1400 audit(1789812564.393:371): avc: denied { write open } for pid=6262 comm="syz.0.106" path="/31/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 58.171694][ T42] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 58.189366][ T43] audit: type=1400 audit(1789812564.453:372): avc: denied { bind } for pid=6269 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.189418][ T43] audit: type=1400 audit(1789812564.453:373): avc: denied { write } for pid=6269 comm="syz.0.108" path="socket:[10144]" dev="sockfs" ino=10144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.192109][ T6270] Bluetooth: MGMT ver 1.23 [ 58.196191][ T6270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.108'. [ 58.201250][ T42] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 58.201265][ T42] usb 7-1: config 1 has no interface number 0 [ 58.201285][ T42] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x8 has an invalid bInterval 255, changing to 11 [ 58.226657][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.226672][ T42] usb 7-1: Product: syz [ 58.226680][ T42] usb 7-1: Manufacturer: syz [ 58.226687][ T42] usb 7-1: SerialNumber: syz [ 58.247089][ T42] usb 7-1: Error in usbnet_get_endpoints (-22) [ 58.253195][ T6273] syz.3.107: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 58.430344][ T43] audit: type=1400 audit(1789812564.693:374): avc: denied { mounton } for pid=6276 comm="syz.0.110" path="/34/proc" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.433170][ T6277] FAULT_INJECTION: forcing a failure. [ 58.433170][ T6277] name failslab, interval 1, probability 0, space 0, times 0 [ 58.433216][ T6277] CPU: 0 UID: 0 PID: 6277 Comm: syz.0.110 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.433250][ T6277] Tainted: [L]=SOFTLOCKUP [ 58.433258][ T6277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.433271][ T6277] Call Trace: [ 58.433279][ T6277] [ 58.433288][ T6277] dump_stack_lvl+0x100/0x190 [ 58.433326][ T6277] should_fail_ex.cold+0x5/0xa [ 58.433359][ T6277] should_failslab+0xc2/0x120 [ 58.433398][ T6277] kmem_cache_alloc_noprof+0x92/0x6a0 [ 58.433424][ T6277] ? d_instantiate+0x8a/0xb0 [ 58.433458][ T6277] ? alloc_empty_file+0x5b/0x1c0 [ 58.433495][ T6277] alloc_empty_file+0x5b/0x1c0 [ 58.433525][ T6277] alloc_file_pseudo+0x183/0x290 [ 58.433556][ T6277] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 58.433589][ T6277] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 58.433622][ T6277] sock_alloc_file+0x50/0x210 [ 58.433650][ T6277] __sys_socketpair+0x321/0x5b0 [ 58.433675][ T6277] ? __pfx___sys_socketpair+0x10/0x10 [ 58.433699][ T6277] ? __pfx___x64_sys_futex+0x10/0x10 [ 58.433773][ T6277] __x64_sys_socketpair+0x96/0x100 [ 58.433797][ T6277] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.433827][ T6277] do_syscall_64+0x123/0x790 [ 58.433863][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.433886][ T6277] RIP: 0033:0x7fcc7539e159 [ 58.433904][ T6277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.433924][ T6277] RSP: 002b:00007fcc762fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 58.433949][ T6277] RAX: ffffffffffffffda RBX: 00007fcc75625fa0 RCX: 00007fcc7539e159 [ 58.433964][ T6277] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 58.433976][ T6277] RBP: 00007fcc7543506b R08: 0000000000000000 R09: 0000000000000000 [ 58.433989][ T6277] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 58.434002][ T6277] R13: 00007fcc75626038 R14: 00007fcc75625fa0 R15: 00007ffefeb49158 [ 58.434032][ T6277] [ 58.507999][ T43] audit: type=1400 audit(1789812564.773:375): avc: denied { mounton } for pid=6276 comm="syz.0.110" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 58.520115][ T6278] qnx6: unable to set blocksize [ 58.542785][ T43] audit: type=1400 audit(1789812564.803:376): avc: denied { getopt } for pid=6279 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.638461][ T6282] overlayfs: failed to resolve './bus': -2 [ 58.669571][ T6283] smpboot: CPU 1 is now offline [ 58.692096][ T43] audit: type=1400 audit(1789812564.953:377): avc: denied { read } for pid=6281 comm="syz.1.112" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.692331][ T43] audit: type=1400 audit(1789812564.953:378): avc: denied { open } for pid=6281 comm="syz.1.112" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.692528][ T43] audit: type=1400 audit(1789812564.953:379): avc: denied { ioctl } for pid=6281 comm="syz.1.112" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.794087][ T6290] overlayfs: failed to resolve './file2': -2 [ 59.084723][ T6116] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.255489][ T6116] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.256435][ T6116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.256457][ T6116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.256472][ T6116] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.256500][ T6116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.260891][ T6116] usb 5-1: config 0 descriptor?? [ 59.464792][ T5744] Bluetooth: hci0: command 0x040f tx timeout [ 59.464839][ T5744] Bluetooth: hci1: command 0x040f tx timeout [ 59.464866][ T5744] Bluetooth: hci2: command 0x040f tx timeout [ 59.464894][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 59.684313][ T6116] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 59.700880][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 59.925534][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.117'. [ 59.928025][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.117'. [ 59.928285][ T6297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.117'. [ 59.929072][ T6296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.117'. [ 59.932021][ T6116] usb 5-1: USB disconnect, device number 2 [ 60.100480][ T6309] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.607572][ T6317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.122'. [ 60.763781][ T58] usb 7-1: USB disconnect, device number 2 [ 60.820557][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 60.874015][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 61.043728][ T6323] hpfs: Bad magic ... probably not HPFS [ 61.106117][ T6330] netlink: 'syz.3.126': attribute type 16 has an invalid length. [ 61.106139][ T6330] netlink: 'syz.3.126': attribute type 17 has an invalid length. [ 61.134462][ T6330] bridge0: port 3(veth0) entered disabled state [ 61.151229][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.157139][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.169876][ T5741] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 61.169916][ T5741] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 61.547163][ T5741] Bluetooth: hci3: command 0x040f tx timeout [ 61.547205][ T5741] Bluetooth: hci2: command 0x040f tx timeout [ 61.547228][ T5741] Bluetooth: hci1: command 0x040f tx timeout [ 61.547250][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 61.643699][ T6345] syz.2.131: attempt to access beyond end of device [ 61.643699][ T6345] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 61.643727][ T6345] gfs2: error -5 reading superblock [ 61.800348][ T6354] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.134:6354 [ 62.197831][ T6369] netlink: 'syz.3.139': attribute type 16 has an invalid length. [ 62.197845][ T6369] netlink: 'syz.3.139': attribute type 3 has an invalid length. [ 62.197851][ T6369] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 63.066256][ T6400] __nla_validate_parse: 4 callbacks suppressed [ 63.066271][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 63.068658][ T6400] netlink: 72 bytes leftover after parsing attributes in process `syz.3.148'. [ 63.070420][ T6400] x_tables: duplicate underflow at hook 1 [ 63.101886][ T6400] smpboot: CPU 3 is now offline [ 63.204037][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 63.204051][ T43] audit: type=1400 audit(1789812569.463:410): avc: denied { read write } for pid=6405 comm="syz.3.150" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.204075][ T43] audit: type=1400 audit(1789812569.463:411): avc: denied { open } for pid=6405 comm="syz.3.150" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.211849][ T43] audit: type=1400 audit(1789812569.473:412): avc: denied { ioctl } for pid=6405 comm="syz.3.150" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.448910][ T6414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.152'. [ 63.564818][ T6410] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 63.566593][ T5823] e1000 0000:00:06.0 eth0: Reset adapter [ 63.581240][ T43] audit: type=1400 audit(1789812569.843:413): avc: denied { write } for pid=6415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.627376][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 63.627415][ T5741] Bluetooth: hci1: command 0x040f tx timeout [ 63.627437][ T5741] Bluetooth: hci2: command 0x040f tx timeout [ 63.628023][ T5744] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 63.666272][ T43] audit: type=1400 audit(1789812569.933:414): avc: denied { write } for pid=6418 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.782945][ T6410] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 63.825072][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 63.979116][ T43] audit: type=1400 audit(1789812570.243:415): avc: denied { read } for pid=6429 comm="syz.1.156" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 63.979403][ T43] audit: type=1400 audit(1789812570.243:416): avc: denied { open } for pid=6429 comm="syz.1.156" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 63.981145][ T43] audit: type=1400 audit(1789812570.243:417): avc: denied { ioctl } for pid=6429 comm="syz.1.156" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 63.983338][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'. [ 63.983368][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'. [ 64.029602][ T43] audit: type=1400 audit(1789812570.293:418): avc: denied { write } for pid=6431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.034550][ T6430] team0: entered promiscuous mode [ 64.044865][ T6430] team_slave_0: entered promiscuous mode [ 64.044982][ T6430] team_slave_1: entered promiscuous mode [ 64.049565][ T6430] bond0: entered promiscuous mode [ 64.049584][ T6430] bond_slave_0: entered promiscuous mode [ 64.049742][ T6430] bond_slave_1: entered promiscuous mode [ 64.052664][ T6430] debugfs: 'hsr0' already exists in 'hsr' [ 64.052679][ T6430] Cannot create hsr debugfs directory [ 64.053645][ T6430] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 64.085741][ T6435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.170628][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.159'. [ 64.185521][ T43] audit: type=1400 audit(1789812570.443:419): avc: denied { write } for pid=6441 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.203861][ T6437] xt_connbytes: Forcing CT accounting to be enabled [ 64.203971][ T6437] set match dimension is over the limit! [ 64.259884][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 65.704830][ T5744] Bluetooth: hci1: command 0x040f tx timeout [ 66.025773][ T5521] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 68.783424][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 68.783441][ T43] audit: type=1400 audit(1789812575.043:428): avc: denied { write } for pid=6471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.860640][ T43] audit: type=1400 audit(1789812575.123:429): avc: denied { write } for pid=6474 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.310062][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.310099][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.311500][ T850] cfg80211: failed to load regulatory.db [ 72.533973][ T43] audit: type=1400 audit(1789812578.793:430): avc: denied { write } for pid=6478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.582884][ T43] audit: type=1400 audit(1789812578.843:431): avc: denied { write } for pid=6481 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.101535][ T43] audit: type=1400 audit(1789812583.363:432): avc: denied { create } for pid=6485 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.106563][ T43] audit: type=1400 audit(1789812583.373:433): avc: denied { block_suspend } for pid=6485 comm="syz.0.160" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.133633][ T6491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.163'. [ 77.229277][ T6498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6498 comm=syz.3.163 [ 77.252239][ T43] audit: type=1400 audit(1789812583.513:434): avc: denied { setopt } for pid=6485 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.267853][ T43] audit: type=1400 audit(1789812583.523:435): avc: denied { ioctl } for pid=6485 comm="syz.0.160" path="socket:[15114]" dev="sockfs" ino=15114 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.331163][ T43] audit: type=1400 audit(1789812583.593:436): avc: denied { mount } for pid=6511 comm="syz.0.168" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.366275][ T43] audit: type=1400 audit(1789812583.633:437): avc: denied { mounton } for pid=6505 comm="syz.2.166" path="/53/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 77.368884][ T43] audit: type=1400 audit(1789812583.633:438): avc: denied { getopt } for pid=6508 comm="syz.1.167" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.374374][ T43] audit: type=1400 audit(1789812583.633:439): avc: denied { setopt } for pid=6508 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.379192][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.2.166'. [ 77.379281][ T6507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.166'. [ 77.381597][ T43] audit: type=1400 audit(1789812583.643:440): avc: denied { view } for pid=6505 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.523575][ T43] audit: type=1400 audit(1789812583.783:441): avc: denied { append } for pid=6522 comm="syz.2.171" name="loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.533830][ T6523] loop6: detected capacity change from 0 to 2640 [ 77.537842][ T6523] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.537871][ T6523] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.537886][ T6523] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.537901][ T6523] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.537917][ T6523] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.537939][ T6523] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.537960][ T6523] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.537974][ T6523] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.537983][ T6523] ldm_validate_partition_table(): Disk read failed. [ 77.537996][ T6523] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.538011][ T6523] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.538033][ T6523] Dev loop6: unable to read RDB block 0 [ 77.538371][ T6523] loop6: unable to read partition table [ 77.538498][ T6523] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 77.558099][ T6521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6521 comm=syz.1.170 [ 77.568052][ T6521] process 'syz.1.170' launched './file0' with NULL argv: empty string added [ 77.574674][ T5823] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 77.725334][ T5823] usb 8-1: Using ep0 maxpacket: 8 [ 77.727179][ T5823] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.728403][ T5823] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.728425][ T5823] usb 8-1: config 0 has no interface number 0 [ 77.728457][ T5823] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.728485][ T5823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.746720][ T5823] usb 8-1: config 0 descriptor?? [ 77.783083][ T5823] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 77.805868][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 77.838193][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 78.093607][ T5877] usb 8-1: USB disconnect, device number 2 [ 78.188977][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189050][ T6567] [U] J"—e:ÀÆ" [ 78.189086][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189150][ T6567] [U] J"—e:ÀÆ" [ 78.189182][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189244][ T6567] [U] J"—e:ÀÆ" [ 78.189270][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189330][ T6567] [U] J"—e:ÀÆ" [ 78.189357][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189418][ T6567] [U] J"—e:ÀÆ" [ 78.189442][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189500][ T6567] [U] J"—e:ÀÆ" [ 78.189526][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189586][ T6567] [U] J"—e:ÀÆ" [ 78.189649][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189706][ T6567] [U] J"—e:ÀÆ" [ 78.189735][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189796][ T6567] [U] J"—e:ÀÆ" [ 78.189820][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189876][ T6567] [U] J"—e:ÀÆ" [ 78.189910][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.189968][ T6567] [U] J"—e:ÀÆ" [ 78.189994][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.190055][ T6567] [U] J"—e:ÀÆ" [ 78.190082][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.190143][ T6567] [U] J"—e:ÀÆ" [ 78.190168][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.192141][ T6567] [U] J"—e:ÀÆ" [ 78.193068][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.193132][ T6567] [U] J"—e:ÀÆ" [ 78.193164][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.193222][ T6567] [U] J"—e:ÀÆ" [ 78.193250][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.193311][ T6567] [U] J"—e:ÀÆ" [ 78.193339][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.193401][ T6567] [U] J"—e:ÀÆ" [ 78.193429][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.193489][ T6567] [U] J"—e:ÀÆ" [ 78.193516][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.193571][ T6567] [U] J"—e:ÀÆ" [ 78.193634][ T6567] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.291982][ T6567] [U] J"—e:ÀÆ" [ 78.366068][ T6579] netlink: 36 bytes leftover after parsing attributes in process `syz.0.182'. [ 78.366742][ T6577] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 78.385424][ T6586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.182'. [ 78.389706][ T6577] cramfs: wrong magic [ 78.422419][ T6591] input: syz0 as /devices/virtual/input/input7 [ 78.508284][ T6595] macvlan0: entered promiscuous mode [ 78.708515][ T5744] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 78.755519][ T6615] loop0: detected capacity change from 0 to 65536 [ 78.759740][ T6607] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.767519][ T6611] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 78.833043][ T6611] kvm: pic: single mode not supported [ 78.921473][ T6607] kvm: pic: level sensitive irq not supported [ 78.925428][ T6607] kvm: pic: level sensitive irq not supported [ 78.926439][ T6607] kvm: pic: level sensitive irq not supported [ 78.930140][ T6607] kvm: pic: single mode not supported [ 78.930146][ T6607] kvm: pic: level sensitive irq not supported [ 78.931093][ T6607] kvm: pic: single mode not supported [ 78.932594][ T6607] kvm: pic: level sensitive irq not supported [ 78.933460][ T6607] kvm: pic: single mode not supported [ 78.935879][ T6607] kvm: pic: level sensitive irq not supported [ 79.219448][ T6633] netlink: 'syz.1.196': attribute type 20 has an invalid length. [ 79.219469][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 79.236492][ T6633] netlink: 'syz.1.196': attribute type 20 has an invalid length. [ 79.236506][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 79.236982][ T5808] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.237533][ T5808] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.237645][ T5808] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.238069][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.240237][ T6633] jffs2: notice: (6633) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.329485][ T6635] binder: 6632:6635 ioctl c0481273 200000000440 returned -22 [ 79.726916][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.204'. [ 79.834518][ T6661] overlayfs: overlapping lowerdir path [ 79.867203][ T5521] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.025258][ T5521] usb 6-1: Using ep0 maxpacket: 8 [ 80.027851][ T5521] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 80.029071][ T5521] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.029090][ T5521] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.029126][ T5521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 80.029148][ T5521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 80.029180][ T5521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.074167][ T5521] hub 6-1:1.0: bad descriptor, ignoring hub [ 80.074182][ T5521] hub 6-1:1.0: probe with driver hub failed with error -5 [ 80.074420][ T5521] cdc_wdm 6-1:1.0: skipping garbage [ 80.074428][ T5521] cdc_wdm 6-1:1.0: skipping garbage [ 80.081464][ T5521] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 80.081481][ T5521] cdc_wdm 6-1:1.0: Unknown control protocol [ 80.143450][ T6691] xt_recent: Unsupported userspace flags (000000b2) [ 80.250691][ T6697] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 80.250717][ T6697] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 80.250741][ T6697] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 80.253093][ T6697] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.264304][ T6697] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.387570][ T5823] usb 6-1: USB disconnect, device number 7 [ 80.474695][ T5878] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.645993][ T5878] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 80.647169][ T5878] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.648360][ T5878] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.649980][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.649998][ T5878] usb 5-1: Product: syz [ 80.650009][ T5878] usb 5-1: Manufacturer: syz [ 80.650020][ T5878] usb 5-1: SerialNumber: syz [ 80.656075][ T5878] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 80.671060][ T5878] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 80.679108][ T5878] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 80.884758][ T5823] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.014903][ T5823] usb 6-1: device descriptor read/64, error -71 [ 81.065793][ T6713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.078304][ T6713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9216 sclass=netlink_route_socket pid=6713 comm=syz.3.219 [ 81.111095][ T6710] xt_CONNSECMARK: invalid mode: 0 [ 81.144859][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 81.151846][ T6715] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 81.151860][ T6715] CIFS mount error: No usable UNC path provided in device string! [ 81.151860][ T6715] [ 81.152047][ T6715] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.152278][ T6716] CIFS mount error: No usable UNC path provided in device string! [ 81.152278][ T6716] [ 81.152287][ T6716] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.254802][ T5823] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 81.385275][ T5823] usb 6-1: device descriptor read/64, error -71 [ 81.497598][ T5823] usb usb6-port1: attempt power cycle [ 81.834679][ T5823] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 81.855471][ T5823] usb 6-1: device descriptor read/8, error -71 [ 81.984809][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 82.094762][ T5823] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 82.115719][ T5823] usb 6-1: device descriptor read/8, error -71 [ 82.135191][ T10] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 82.139118][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.139134][ T10] usb 7-1: Product: syz [ 82.139141][ T10] usb 7-1: Manufacturer: syz [ 82.139148][ T10] usb 7-1: SerialNumber: syz [ 82.225109][ T5823] usb usb6-port1: unable to enumerate USB device [ 82.270861][ T6740] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 82.287985][ T6740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.298902][ T6740] openvswitch: netlink: Actions may not be safe on all matching packets [ 82.362184][ T6732] openvswitch: netlink: Key type 123 is out of range max 32 [ 82.400642][ T10] rtl8150 7-1:1.0: couldn't reset the device [ 82.400807][ T10] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 82.413673][ T10] usb 7-1: USB disconnect, device number 3 [ 82.432001][ T43] kauditd_printk_skb: 44 callbacks suppressed [ 82.432017][ T43] audit: type=1400 audit(1789812588.693:486): avc: denied { bind } for pid=6748 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.432478][ T43] audit: type=1400 audit(1789812588.693:487): avc: denied { node_bind } for pid=6748 comm="syz.3.230" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 82.556045][ T43] audit: type=1400 audit(1789812588.823:488): avc: denied { ioctl } for pid=6757 comm="syz.3.232" path="socket:[16782]" dev="sockfs" ino=16782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.573449][ T6758] macvtap1: entered allmulticast mode [ 82.573537][ T6758] veth1_vlan: entered allmulticast mode [ 82.586448][ T6758] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 82.597801][ T6758] rtrs_client L2101: : Failed to resolve address, err: -ENODEV [ 82.598427][ T6758] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 82.662247][ T43] audit: type=1400 audit(1789812588.923:489): avc: denied { bind } for pid=6759 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.662288][ T43] audit: type=1400 audit(1789812588.923:490): avc: denied { read } for pid=6759 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.713866][ T43] audit: type=1400 audit(1789812588.973:491): avc: denied { setopt } for pid=6759 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.725800][ T43] audit: type=1400 audit(1789812588.993:492): avc: denied { create } for pid=6762 comm="syz.3.234" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.803786][ T43] audit: type=1400 audit(1789812589.063:493): avc: denied { unlink } for pid=5738 comm="syz-executor" name="file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.843314][ T43] audit: type=1400 audit(1789812589.103:494): avc: denied { create } for pid=6770 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.943488][ T43] audit: type=1400 audit(1789812589.203:495): avc: denied { accept } for pid=6777 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.097527][ T6784] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 83.101425][ T6784] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 83.207523][ T6787] netlink: 'syz.2.239': attribute type 1 has an invalid length. [ 83.224989][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 83.277177][ T5878] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 83.342176][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.799094][ T6811] FAULT_INJECTION: forcing a failure. [ 83.799094][ T6811] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.799128][ T6811] CPU: 0 UID: 0 PID: 6811 Comm: syz.3.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.799152][ T6811] Tainted: [L]=SOFTLOCKUP [ 83.799158][ T6811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.799169][ T6811] Call Trace: [ 83.799175][ T6811] [ 83.799182][ T6811] dump_stack_lvl+0x100/0x190 [ 83.799231][ T6811] should_fail_ex.cold+0x5/0xa [ 83.799257][ T6811] strncpy_from_user+0x3b/0x2d0 [ 83.799286][ T6811] do_getname+0x78/0x390 [ 83.799315][ T6811] do_sys_openat2+0xc7/0x1e0 [ 83.799339][ T6811] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.799364][ T6811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.799403][ T6811] __x64_sys_openat+0x12d/0x210 [ 83.799428][ T6811] ? __pfx___x64_sys_openat+0x10/0x10 [ 83.799460][ T6811] do_syscall_64+0x123/0x790 [ 83.799487][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.799503][ T6811] RIP: 0033:0x7fdb53d5e98e [ 83.799515][ T6811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.799530][ T6811] RSP: 002b:00007fdb54d3cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.799547][ T6811] RAX: ffffffffffffffda RBX: 00007fdb54d3d6c0 RCX: 00007fdb53d5e98e [ 83.799558][ T6811] RDX: 0000000000000000 RSI: 00007fdb54d3cc00 RDI: ffffffffffffff9c [ 83.799568][ T6811] RBP: 00007fdb54d3cc00 R08: 0000000000000000 R09: 0000000000000000 [ 83.799578][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 83.799589][ T6811] R13: 00007fdb54026038 R14: 00007fdb54025fa0 R15: 00007ffcb29d64c8 [ 83.799612][ T6811] [ 83.892627][ T6812] FAULT_INJECTION: forcing a failure. [ 83.892627][ T6812] name fail_futex, interval 1, probability 0, space 0, times 1 [ 83.892689][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.3.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.892714][ T6812] Tainted: [L]=SOFTLOCKUP [ 83.892721][ T6812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.892732][ T6812] Call Trace: [ 83.892739][ T6812] [ 83.892746][ T6812] dump_stack_lvl+0x100/0x190 [ 83.892774][ T6812] should_fail_ex.cold+0x5/0xa [ 83.892798][ T6812] get_futex_key+0x293/0x14f0 [ 83.892823][ T6812] ? __pfx_get_futex_key+0x10/0x10 [ 83.892849][ T6812] ? __mutex_unlock_slowpath+0x35d/0x930 [ 83.892882][ T6812] futex_wake+0xf4/0x5e0 [ 83.892914][ T6812] ? __pfx_futex_wake+0x10/0x10 [ 83.892947][ T6812] ? lock_acquire+0x1d1/0x380 [ 83.892966][ T6812] ? detach_task_ctx_data+0x83/0x490 [ 83.893000][ T6812] do_futex+0x2b2/0x440 [ 83.893028][ T6812] ? __pfx_do_futex+0x10/0x10 [ 83.893051][ T6812] ? __might_fault+0xc5/0x140 [ 83.893085][ T6812] mm_exit_exec_release+0x256/0x2f0 [ 83.893127][ T6812] do_exit+0x707/0x2ae0 [ 83.893156][ T6812] ? __pfx_do_exit+0x10/0x10 [ 83.893178][ T6812] ? do_raw_spin_lock+0x128/0x260 [ 83.893198][ T6812] ? find_held_lock+0x2b/0x80 [ 83.893226][ T6812] ? get_signal+0x7e0/0x21e0 [ 83.893250][ T6812] do_group_exit+0xd5/0x2a0 [ 83.893275][ T6812] get_signal+0x1ec7/0x21e0 [ 83.893302][ T6812] ? putname+0xb1/0x110 [ 83.893329][ T6812] ? __pfx_get_signal+0x10/0x10 [ 83.893351][ T6812] ? do_futex+0x190/0x440 [ 83.893379][ T6812] arch_do_signal_or_restart+0x91/0x7e0 [ 83.893408][ T6812] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 83.893442][ T6812] ? __x64_sys_openat+0x12d/0x210 [ 83.893476][ T6812] exit_to_user_mode_loop+0x139/0x700 [ 83.893498][ T6812] ? rcu_is_watching+0x13/0xc0 [ 83.893527][ T6812] do_syscall_64+0x661/0x790 [ 83.893557][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.893577][ T6812] RIP: 0033:0x7fdb53d9e159 [ 83.893592][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.893608][ T6812] RSP: 002b:00007fdb54d1c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 83.893626][ T6812] RAX: fffffffffffffe00 RBX: 00007fdb54026098 RCX: 00007fdb53d9e159 [ 83.893638][ T6812] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb54026098 [ 83.893649][ T6812] RBP: 00007fdb54026090 R08: 0000000000000000 R09: 0000000000000000 [ 83.893660][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.893671][ T6812] R13: 00007fdb54026128 R14: 00007ffcb29d63e0 R15: 00007ffcb29d64c8 [ 83.893697][ T6812] [ 83.962217][ T6694] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 83.979086][ T6694] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 83.982192][ T5878] usb 5-1: USB disconnect, device number 3 [ 84.056789][ T5878] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 84.073396][ T5878] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 84.074108][ T5878] ti_usb_3410_5052 5-1:2.0: device disconnected [ 84.344023][ T6841] SELinux: Context system_u:object_r:modem_device_t:s0 is not valid (left unmapped). [ 84.379008][ T6841] __nla_validate_parse: 72 callbacks suppressed [ 84.379025][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.247'. [ 84.608599][ T6859] nbd: must specify an index to disconnect [ 84.718805][ T6865] vlan3: entered allmulticast mode [ 84.718819][ T6865] bond0: entered allmulticast mode [ 84.718826][ T6865] bond_slave_0: entered allmulticast mode [ 84.718834][ T6865] bond_slave_1: entered allmulticast mode [ 84.842333][ T6869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.135140][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 85.304879][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 85.381971][ T6887] bond2: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 85.381994][ T6887] bond2: entered allmulticast mode [ 85.536421][ T6896] ±ÿª¨úrBº“€: renamed from lo (while UP) [ 85.550627][ T74] IPVS: starting estimator thread 0... [ 85.635175][ T6897] IPVS: using max 30 ests per chain, 72000 per kthread [ 85.844743][ T5521] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 85.932178][ T6905] Mount JFS Failure: -22 [ 85.932192][ T6905] jfs_mount failed w/return code = -22 [ 85.996310][ T5521] usb 8-1: Using ep0 maxpacket: 8 [ 85.998244][ T5521] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.999080][ T5521] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.999102][ T5521] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.007449][ T5521] usb 8-1: config 0 descriptor?? [ 86.125644][ T6920] jffs2: notice: (6920) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 86.135178][ T6923] MTD: Couldn't look up '': -22 [ 86.227445][ T5521] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 86.393444][ T6935] hfs: unable to load iocharset "io#harset" [ 86.423814][ T6936] hfs: unable to load iocharset "io#harset" [ 86.518495][ T6946] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 86.518517][ T6946] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.519985][ T6946] vhci_hcd vhci_hcd.0: Device attached [ 86.524265][ T6947] vhci_hcd: connection closed [ 86.527428][ T13] vhci_hcd vhci_hcd.1: stop threads [ 86.527442][ T13] vhci_hcd vhci_hcd.1: release socket [ 86.527453][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 86.882999][ T6956] ntfs3(sr0): Primary boot signature is not NTFS. [ 86.883294][ T6956] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 87.389513][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 88.184012][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 88.184031][ T43] audit: type=1400 audit(1789812594.443:531): avc: denied { setattr } for pid=7006 comm="syz.2.293" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 88.203265][ T43] audit: type=1400 audit(1789812594.463:532): avc: denied { setattr } for pid=7006 comm="syz.2.293" name="buffer_size_kb" dev="tracefs" ino=2149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 88.366962][ T7016] ip6t_srh: unknown srh match flags 7700 [ 88.374760][ T43] audit: type=1400 audit(1789812594.633:533): avc: denied { setattr } for pid=7015 comm="syz.1.296" name="/" dev="9p" ino=76832911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.567138][ T43] audit: type=1400 audit(1789812594.823:534): avc: denied { load_policy } for pid=7021 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 88.569239][ T7022] SELinux: policydb string does not match my string SE Linux [ 88.569452][ T7022] SELinux: failed to load policy [ 88.638400][ T5521] usb 8-1: USB disconnect, device number 3 [ 88.678800][ T43] audit: type=1400 audit(1789812594.943:535): avc: denied { ioctl } for pid=7021 comm="syz.1.297" path="socket:[19692]" dev="sockfs" ino=19692 ioctlcmd=0x6e83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.708464][ T7023] netlink: 14 bytes leftover after parsing attributes in process `syz.1.297'. [ 89.002245][ T5744] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 89.003874][ T43] audit: type=1400 audit(1789812595.263:536): avc: denied { write } for pid=7029 comm="syz.3.299" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.128035][ T7034] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=941384584 (1882769168 ns) > initial count (626323280 ns). Using initial count to start timer. [ 89.128800][ T7032] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 89.475727][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 89.549975][ T7039] input: syz1 as /devices/virtual/input/input8 [ 89.630077][ T43] audit: type=1400 audit(1789812595.893:537): avc: denied { ioctl } for pid=7038 comm="syz.1.302" path="socket:[19861]" dev="sockfs" ino=19861 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.635147][ T7039] dlm: no locking on control device [ 89.658469][ T43] audit: type=1400 audit(1789812595.923:538): avc: denied { nlmsg_read } for pid=7045 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.693312][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 89.722753][ T43] audit: type=1400 audit(1789812595.983:539): avc: denied { create } for pid=7049 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 89.776515][ T43] audit: type=1400 audit(1789812596.043:540): avc: denied { name_bind 0x1000000 } for pid=7049 comm="syz.3.306" path="socket:[19870]" dev="sockfs" ino=19870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 89.936164][ T7067] SELinux: Context ? is not valid (left unmapped). [ 89.939421][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 89.940895][ T7064] bridge0: port 4(team0) entered blocking state [ 89.941975][ T7064] bridge0: port 4(team0) entered disabled state [ 89.942137][ T7064] team0: entered allmulticast mode [ 89.942147][ T7064] team_slave_0: entered allmulticast mode [ 89.942165][ T7064] team_slave_1: entered allmulticast mode [ 89.959956][ T7064] team0: entered promiscuous mode [ 89.959976][ T7064] team_slave_0: entered promiscuous mode [ 89.963766][ T7064] team_slave_1: entered promiscuous mode [ 90.007222][ T7065] team_slave_0 (unregistering): left promiscuous mode [ 90.007246][ T7065] team_slave_0 (unregistering): left allmulticast mode [ 90.011344][ T7065] team0: Port device team_slave_0 removed [ 90.145771][ T7077] netlink: 'syz.2.312': attribute type 6 has an invalid length. [ 90.148267][ T7078] netlink: 'syz.2.312': attribute type 6 has an invalid length. [ 90.201274][ T7084] netlink: 'syz.2.312': attribute type 6 has an invalid length. [ 90.670935][ T7093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.316'. [ 90.762788][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 91.029893][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'. [ 91.218915][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 91.404314][ T7119] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 91.490917][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'. [ 91.493859][ T7121] bond0: (slave bond_slave_0): Releasing backup interface [ 91.494421][ T7121] bond_slave_0: left promiscuous mode [ 91.538658][ T7121] bond_slave_0: entered promiscuous mode [ 91.538673][ T7121] bond_slave_0: entered allmulticast mode [ 91.584817][ T5877] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.721325][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 91.758542][ T5877] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 91.762552][ T5877] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 91.764223][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.764237][ T5877] usb 5-1: Product: syz [ 91.764245][ T5877] usb 5-1: Manufacturer: syz [ 91.764252][ T5877] usb 5-1: SerialNumber: syz [ 91.765861][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7135 comm=syz.1.328 [ 91.804408][ T7116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.806942][ T7135] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.806965][ T7135] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.072152][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 92.247533][ T5877] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 92.398842][ T5823] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0306.0003/input/input9 [ 92.423855][ T5444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.497605][ T5823] hid-generic 0005:0009:0306.0003: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 92.616345][ T5878] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 93.168104][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 93.392284][ T10] wiimote 0005:057E:0330.0004: hidraw2: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 93.402457][ T10] wiimote 0005:057E:0330.0004: New device registered [ 93.412305][ T7187] wiimote 0005:057E:0330.0004: Unhandled report 32 size 1 [ 93.628419][ T7186] wiimote 0005:057E:0330.0004: Device removed [ 93.826021][ T7208] Invalid source name [ 93.971296][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 94.000150][ T7218] binder: 7217:7218 ioctl c0306201 200000000080 returned -14 [ 94.003964][ T7218] binder: 7217:7218 ioctl c0306201 2000000003c0 returned -14 [ 94.022184][ T7220] CUSE: unknown device info "" [ 94.022194][ T7220] CUSE: unknown device info "" [ 94.022199][ T7220] CUSE: unknown device info "" [ 94.022204][ T7220] CUSE: unknown device info "" [ 94.022208][ T7220] CUSE: unknown device info "" [ 94.022212][ T7220] CUSE: zero length info key specified [ 94.024490][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 94.024500][ T43] audit: type=1400 audit(1789812600.283:567): avc: denied { ioctl } for pid=7213 comm="syz.3.346" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.362606][ T43] audit: type=1400 audit(1789812600.623:568): avc: denied { bind } for pid=7236 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.374107][ T5823] usb 5-1: USB disconnect, device number 4 [ 94.386801][ T43] audit: type=1400 audit(1789812600.653:569): avc: denied { write } for pid=7236 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.435544][ T10] wiimote 0005:057E:0330.0004: detected device: Nintendo Wii Remote Plus (Gen 2) [ 94.438490][ T5823] usblp0: removed [ 94.587935][ T10] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input11 [ 94.622676][ T10] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input12 [ 94.675973][ T10] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input10 [ 94.683415][ T7248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.714399][ T7248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.738755][ T43] audit: type=1400 audit(1789812601.003:570): avc: denied { read } for pid=7246 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.938391][ T7258] __nla_validate_parse: 2 callbacks suppressed [ 94.938405][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 95.002598][ T7262] netlink: 'syz.3.359': attribute type 64 has an invalid length. [ 95.002620][ T7262] netlink: 'syz.3.359': attribute type 4 has an invalid length. [ 95.002632][ T7262] netlink: 152 bytes leftover after parsing attributes in process `syz.3.359'. [ 95.130682][ T43] audit: type=1400 audit(1789812601.393:571): avc: denied { ioctl } for pid=7268 comm="syz.3.362" path="socket:[20940]" dev="sockfs" ino=20940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.224775][ T226] IPVS: starting estimator thread 0... [ 95.228329][ T7274] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 95.314856][ T7278] IPVS: using max 43 ests per chain, 103200 per kthread [ 95.614706][ T5878] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.768042][ T5878] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 95.768857][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.768881][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 95.768895][ T5878] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 95.768914][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.982399][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.366'. [ 96.189847][ T5878] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 96.189891][ T5878] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 96.189901][ T5878] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 96.201953][ T5878] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 96.204363][ T5878] usb 5-1: USB disconnect, device number 5 [ 96.244436][ T43] audit: type=1400 audit(1789812602.503:572): avc: denied { map } for pid=7295 comm="syz.3.369" path="socket:[20991]" dev="sockfs" ino=20991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 96.321066][ T43] audit: type=1400 audit(1789812602.583:573): avc: denied { bind } for pid=7295 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.350512][ T7299] Console: switching to colour dummy device 80x25 [ 96.514747][ T13] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.637460][ T7312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 96.681581][ T6514] block nbd64: NBD_DISCONNECT [ 96.689162][ T7312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 96.689180][ T7312] nbd: device at index 64 is going down [ 96.812915][ T43] audit: type=1400 audit(1789812603.073:574): avc: denied { read } for pid=7320 comm="syz.0.375" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.852634][ T43] audit: type=1400 audit(1789812603.113:575): avc: denied { write } for pid=7320 comm="syz.0.375" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.978596][ T7334] xt_bpf: check failed: parse error [ 97.041437][ T7337] Unsupported ieee802154 address type: 0 [ 97.042654][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 97.046291][ T7339] erspan0: entered promiscuous mode [ 97.197451][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 97.417644][ T7358] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.513642][ T7364] xt_cgroup: path and classid specified [ 98.412894][ T7392] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 99.127778][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 99.127789][ T43] audit: type=1400 audit(1789812605.393:584): avc: denied { create } for pid=7414 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 99.177831][ T43] audit: type=1400 audit(1789812605.443:585): avc: denied { remount } for pid=7414 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 99.181107][ T43] audit: type=1400 audit(1789812605.443:586): avc: denied { create } for pid=7414 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.183603][ T43] audit: type=1400 audit(1789812605.443:587): avc: denied { bind } for pid=7414 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.191337][ T43] audit: type=1400 audit(1789812605.453:588): avc: denied { mounton } for pid=7414 comm="syz.3.399" path="/98/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.261611][ T7423] overlayfs: failed to resolve 'work': -2 [ 99.267498][ T7423] overlayfs: failed to resolve 'work': -2 [ 99.376817][ T43] audit: type=1400 audit(1789812605.643:589): avc: denied { mmap_zero } for pid=7428 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 99.564674][ T1039] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 99.715220][ T1039] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 99.716126][ T1039] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.716149][ T1039] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 99.716162][ T1039] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 99.716181][ T1039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.930374][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 99.966430][ T1039] cxacru 6-1:1.0: receive of cm 0x90 failed (-71) [ 99.970916][ T7432] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 99.971216][ T43] audit: type=1400 audit(1789812606.233:590): avc: denied { firmware_load } for pid=7432 comm="cxacru" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 99.971279][ T7432] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 100.003307][ T1039] usb 6-1: USB disconnect, device number 13 [ 100.093898][ T43] audit: type=1400 audit(1789812606.353:591): avc: denied { write } for pid=7433 comm="syz.3.406" name="/" dev="9p" ino=76832911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.094024][ T43] audit: type=1400 audit(1789812606.353:592): avc: denied { create } for pid=7433 comm="syz.3.406" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.495698][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 100.683472][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.683802][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.710831][ T7451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.410'. [ 100.723843][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.727825][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.814795][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.814816][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.827574][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.827592][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.827664][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.827678][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.031821][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 101.031837][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.411'. [ 101.534797][ T5878] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 101.536784][ T7482] zram0: detected capacity change from 0 to 8 [ 101.686808][ T5878] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 101.687588][ T5878] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.687611][ T5878] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 101.687624][ T5878] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 101.687643][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.895761][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 101.924738][ T5878] usb 8-1: USB disconnect, device number 4 [ 102.113484][ T7503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7503 comm=syz.2.420 [ 102.113772][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 102.154469][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.156802][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.505511][ T7526] device-mapper: ioctl: name not supplied when creating device [ 102.510719][ T7527] input: syz0 as /devices/virtual/input/input13 [ 102.510768][ T7527] input: failed to attach handler leds to device input13, error: -6 [ 102.588115][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 102.643953][ T7534] netlink: 'syz.3.427': attribute type 10 has an invalid length. [ 102.650216][ T7534] bridge0: port 3(veth0) entered disabled state [ 102.650421][ T7534] veth0: left allmulticast mode [ 102.650433][ T7534] veth0: left promiscuous mode [ 102.650533][ T7534] bridge0: port 3(veth0) entered disabled state [ 102.657725][ T7534] veth0: entered promiscuous mode [ 102.657841][ T7534] veth0: entered allmulticast mode [ 102.658320][ T7534] team0: Port device veth0 added [ 102.663829][ T74] bridge0: port 4(team0) entered blocking state [ 102.663873][ T74] bridge0: port 4(team0) entered forwarding state [ 102.778441][ T7540] netlink: 104 bytes leftover after parsing attributes in process `syz.3.430'. [ 103.059665][ T7552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 103.237476][ T7560] CacheFiles: No cache directory specified [ 104.168623][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 104.483779][ T7577] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 104.494273][ T7577] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 104.494462][ T7577] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 104.494538][ T7577] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 104.494785][ T7577] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 104.495663][ T7577] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 104.513345][ T7577] pci 0000:00:01.0: Adding to iommu group 1 [ 104.518351][ T7577] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 104.518372][ T7577] pci 0000:00:01.0: vgaarb: bridge control possible [ 104.518384][ T7577] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 104.524364][ T7577] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 104.528133][ T7577] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 104.533744][ T7577] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 104.597019][ T7577] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 104.597102][ T7577] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 104.598062][ T7577] [drm] features: -virgl +edid -resource_blob -host_visible [ 104.598074][ T7577] [drm] features: -context_init -blob_alignment [ 104.605151][ T7577] ------------[ cut here ]------------ [ 104.605160][ T7577] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 104.605166][ T7577] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#2: syz.0.439/7577 [ 104.649212][ T7577] Modules linked in: [ 104.651564][ T7577] CPU: 2 UID: 0 PID: 7577 Comm: syz.0.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.655406][ T7577] Tainted: [L]=SOFTLOCKUP [ 104.656694][ T7577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.659615][ T7577] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 104.661477][ T7577] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 32 0e 70 09 85 c0 75 e0 48 8d 3d a7 f0 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 b2 0f 70 09 48 85 c0 0f [ 104.667658][ T7577] RSP: 0018:ffffc9000354ef18 EFLAGS: 00010246 [ 104.669591][ T7577] RAX: 0000000000000000 RBX: ffff888025491900 RCX: fffff520006a9dbe [ 104.672086][ T7577] RDX: 0000000000000000 RSI: ffffffff8c919fe0 RDI: ffffffff9149c980 [ 104.674515][ T7577] RBP: ffffffff8c919fe0 R08: 0000000000000000 R09: fffffbfff228a82b [ 104.677365][ T7577] R10: ffffc9000354ef18 R11: 0000000000000001 R12: 0000000000000000 [ 104.679857][ T7577] R13: ffffc9000354ef88 R14: 00000000000000d8 R15: ffff888062e94fce [ 104.682300][ T7577] FS: 00007fcc762d96c0(0000) GS:ffff8880d5d56000(0000) knlGS:0000000000000000 [ 104.685145][ T7577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.687201][ T7577] CR2: 000000110c2e9bf2 CR3: 0000000059914000 CR4: 0000000000352ef0 [ 104.689737][ T7577] Call Trace: [ 104.690808][ T7577] [ 104.691750][ T7577] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 104.693415][ T7577] ? __pfx__printk+0x10/0x10 [ 104.694950][ T7577] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 104.696809][ T7577] ? lockdep_init_map_type+0x5c/0x250 [ 104.698496][ T7577] virtio_gpu_init.cold+0x40d/0x1293 [ 104.700218][ T7577] ? vga_remove_vgacon.cold+0x1d/0x99 [ 104.701915][ T7577] ? __pfx_virtio_gpu_init+0x10/0x10 [ 104.703559][ T7577] ? is_console_locked+0x9/0x20 [ 104.705191][ T7577] ? con_is_bound+0x141/0x190 [ 104.706671][ T7577] ? vga_remove_vgacon+0x21/0x30 [ 104.708268][ T7577] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 104.710486][ T7577] virtio_gpu_probe+0x21c/0x360 [ 104.712009][ T7577] virtio_dev_probe+0x6a2/0xbe0 [ 104.713553][ T7577] ? __pfx_virtio_dev_probe+0x10/0x10 [ 104.715314][ T7577] ? kernfs_create_link+0x1bd/0x240 [ 104.716938][ T7577] ? kernfs_put+0x3f/0x60 [ 104.718312][ T7577] ? sysfs_do_create_link_sd+0xbb/0x140 [ 104.720025][ T7577] ? sysfs_create_link+0x68/0xc0 [ 104.721643][ T7577] ? __pfx_virtio_dev_probe+0x10/0x10 [ 104.723312][ T7577] really_probe+0x241/0xa60 [ 104.725902][ T7577] __driver_probe_device+0x210/0x460 [ 104.727590][ T7577] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.729446][ T7577] driver_probe_device+0x4a/0x140 [ 104.731070][ T7577] __device_attach_driver+0x1df/0x320 [ 104.732758][ T7577] ? __pfx___device_attach_driver+0x10/0x10 [ 104.734664][ T7577] bus_for_each_drv+0x159/0x1e0 [ 104.736184][ T7577] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.737904][ T7577] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.739541][ T7577] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.741384][ T7577] __device_attach+0x1e4/0x4d0 [ 104.742883][ T7577] ? __pfx___device_attach+0x10/0x10 [ 104.744736][ T7577] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.746419][ T7577] device_initial_probe+0xaf/0xd0 [ 104.748012][ T7577] bus_probe_device+0x64/0x160 [ 104.749536][ T7577] device_add+0x121d/0x1970 [ 104.750970][ T7577] ? __pfx_device_add+0x10/0x10 [ 104.752505][ T7577] ? __pfx___might_resched+0x10/0x10 [ 104.754172][ T7577] ? __init_waitqueue_head+0xca/0x150 [ 104.755929][ T7577] ? ioread8+0x8f/0xd0 [ 104.757271][ T7577] register_virtio_device+0x4f0/0x5d0 [ 104.758953][ T7577] ? __pfx_register_virtio_device+0x10/0x10 [ 104.760814][ T7577] ? __pfx_pcibios_set_master+0x10/0x10 [ 104.762549][ T7577] ? __raw_spin_lock_init+0x3a/0x110 [ 104.764219][ T7577] ? __pfx_virtio_pci_probe+0x10/0x10 [ 104.765985][ T7577] virtio_pci_probe+0x255/0x410 [ 104.767547][ T7577] local_pci_probe+0xdd/0x1b0 [ 104.769052][ T7577] pci_call_probe+0x176/0x800 [ 104.770571][ T7577] ? pci_match_device+0x147/0x7d0 [ 104.772144][ T7577] ? __pfx_pci_call_probe+0x10/0x10 [ 104.773775][ T7577] ? __pfx_pci_match_device+0x10/0x10 [ 104.775540][ T7577] ? pci_find_host_bridge+0x3c/0x80 [ 104.777203][ T7577] ? up_write+0x2dc/0x5b0 [ 104.778748][ T7577] pci_device_probe+0x25b/0x400 [ 104.780336][ T7577] ? __pfx_pci_device_probe+0x10/0x10 [ 104.782019][ T7577] ? kernfs_create_link+0x1bd/0x240 [ 104.783658][ T7577] ? sysfs_create_link+0x68/0xc0 [ 104.785445][ T7577] ? __pfx_pci_device_probe+0x10/0x10 [ 104.787128][ T7577] really_probe+0x241/0xa60 [ 104.788669][ T7577] __driver_probe_device+0x210/0x460 [ 104.790433][ T7577] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.792270][ T7577] driver_probe_device+0x4a/0x140 [ 104.793837][ T7577] __device_attach_driver+0x1df/0x320 [ 104.795586][ T7577] ? __pfx___device_attach_driver+0x10/0x10 [ 104.797503][ T7577] bus_for_each_drv+0x159/0x1e0 [ 104.799037][ T7577] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.800757][ T7577] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.802389][ T7577] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.804305][ T7577] __device_attach+0x1e4/0x4d0 [ 104.806104][ T7577] ? __pfx___device_attach+0x10/0x10 [ 104.807820][ T7577] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.809491][ T7577] device_initial_probe+0xaf/0xd0 [ 104.811131][ T7577] pci_bus_add_device+0xc5/0x100 [ 104.812701][ T7577] pci_bus_add_devices+0x9a/0x1f0 [ 104.814288][ T7577] pci_rescan_bus+0x2a/0x40 [ 104.815801][ T7577] rescan_store+0xfb/0x130 [ 104.817219][ T7577] ? __pfx_rescan_store+0x10/0x10 [ 104.818806][ T7577] ? sysfs_file_kobj+0xe4/0x290 [ 104.820351][ T7577] ? __pfx_rescan_store+0x10/0x10 [ 104.821950][ T7577] bus_attr_store+0x74/0xb0 [ 104.823391][ T7577] ? __pfx_bus_attr_store+0x10/0x10 [ 104.825190][ T7577] sysfs_kf_write+0xf2/0x150 [ 104.826651][ T7577] kernfs_fop_write_iter+0x3e0/0x5f0 [ 104.828313][ T7577] ? __pfx_sysfs_kf_write+0x10/0x10 [ 104.829960][ T7577] vfs_write+0x6af/0x1050 [ 104.831327][ T7577] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 104.833157][ T7577] ? __pfx_vfs_write+0x10/0x10 [ 104.834740][ T5744] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 104.834748][ T7577] ? find_held_lock+0x2b/0x80 [ 104.838167][ T7577] ksys_write+0x12a/0x250 [ 104.839553][ T7577] ? __pfx_ksys_write+0x10/0x10 [ 104.841279][ T7577] do_syscall_64+0x123/0x790 [ 104.843072][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.845042][ T7577] RIP: 0033:0x7fcc7539e159 [ 104.846444][ T7577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.852366][ T7577] RSP: 002b:00007fcc762d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.855087][ T7577] RAX: ffffffffffffffda RBX: 00007fcc75626090 RCX: 00007fcc7539e159 [ 104.857559][ T7577] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 104.859973][ T7577] RBP: 00007fcc7543506b R08: 0000000000000000 R09: 0000000000000000 [ 104.862437][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.865003][ T7577] R13: 00007fcc75626128 R14: 00007fcc75626090 R15: 00007ffefeb49158 [ 104.867489][ T7577] [ 104.868478][ T7577] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.870734][ T7577] CPU: 2 UID: 0 PID: 7577 Comm: syz.0.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.874001][ T7577] Tainted: [L]=SOFTLOCKUP [ 104.875361][ T7577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.878485][ T7577] Call Trace: [ 104.879539][ T7577] [ 104.880470][ T7577] dump_stack_lvl+0x100/0x190 [ 104.881964][ T7577] vpanic+0x553/0x970 [ 104.883239][ T7577] ? __pfx_vpanic+0x10/0x10 [ 104.884682][ T7577] panic+0xd1/0xe0 [ 104.885870][ T7577] ? __pfx_panic+0x10/0x10 [ 104.887313][ T7577] check_panic_on_warn.cold+0x19/0x34 [ 104.888984][ T7577] ? __kmem_cache_create_args+0xa9/0x430 [ 104.890740][ T7577] __warn.cold+0x191/0x318 [ 104.892153][ T7577] __report_bug+0x30f/0x440 [ 104.893628][ T7577] ? __kmem_cache_create_args+0xa9/0x430 [ 104.895775][ T7577] ? __pfx___report_bug+0x10/0x10 [ 104.897770][ T7577] ? __mutex_lock+0x26c/0x1bd0 [ 104.899561][ T7577] ? __kmem_cache_create_args+0x44/0x430 [ 104.901631][ T7577] report_bug_entry+0xe2/0x290 [ 104.903393][ T7577] ? __kmem_cache_create_args+0xac/0x430 [ 104.905182][ T7577] handle_bug+0x1cd/0x2a0 [ 104.906542][ T7577] exc_invalid_op+0x17/0x50 [ 104.908008][ T7577] asm_exc_invalid_op+0x1a/0x20 [ 104.909557][ T7577] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 104.911606][ T7577] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 32 0e 70 09 85 c0 75 e0 48 8d 3d a7 f0 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 b2 0f 70 09 48 85 c0 0f [ 104.917591][ T7577] RSP: 0018:ffffc9000354ef18 EFLAGS: 00010246 [ 104.919495][ T7577] RAX: 0000000000000000 RBX: ffff888025491900 RCX: fffff520006a9dbe [ 104.921953][ T7577] RDX: 0000000000000000 RSI: ffffffff8c919fe0 RDI: ffffffff9149c980 [ 104.924424][ T7577] RBP: ffffffff8c919fe0 R08: 0000000000000000 R09: fffffbfff228a82b [ 104.926881][ T7577] R10: ffffc9000354ef18 R11: 0000000000000001 R12: 0000000000000000 [ 104.929364][ T7577] R13: ffffc9000354ef88 R14: 00000000000000d8 R15: ffff888062e94fce [ 104.931833][ T7577] ? __kmem_cache_create_args+0x9e/0x430 [ 104.933612][ T7577] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 104.935274][ T7577] ? __pfx__printk+0x10/0x10 [ 104.936740][ T7577] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 104.938611][ T7577] ? lockdep_init_map_type+0x5c/0x250 [ 104.940361][ T7577] virtio_gpu_init.cold+0x40d/0x1293 [ 104.942030][ T7577] ? vga_remove_vgacon.cold+0x1d/0x99 [ 104.943710][ T7577] ? __pfx_virtio_gpu_init+0x10/0x10 [ 104.945393][ T7577] ? is_console_locked+0x9/0x20 [ 104.946925][ T7577] ? con_is_bound+0x141/0x190 [ 104.948449][ T7577] ? vga_remove_vgacon+0x21/0x30 [ 104.950024][ T7577] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 104.952209][ T7577] virtio_gpu_probe+0x21c/0x360 [ 104.953750][ T7577] virtio_dev_probe+0x6a2/0xbe0 [ 104.955293][ T7577] ? __pfx_virtio_dev_probe+0x10/0x10 [ 104.956983][ T7577] ? kernfs_create_link+0x1bd/0x240 [ 104.958637][ T7577] ? kernfs_put+0x3f/0x60 [ 104.960000][ T7577] ? sysfs_do_create_link_sd+0xbb/0x140 [ 104.961745][ T7577] ? sysfs_create_link+0x68/0xc0 [ 104.963322][ T7577] ? __pfx_virtio_dev_probe+0x10/0x10 [ 104.965020][ T7577] really_probe+0x241/0xa60 [ 104.966452][ T7577] __driver_probe_device+0x210/0x460 [ 104.968122][ T7577] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.969949][ T7577] driver_probe_device+0x4a/0x140 [ 104.971532][ T7577] __device_attach_driver+0x1df/0x320 [ 104.973226][ T7577] ? __pfx___device_attach_driver+0x10/0x10 [ 104.975080][ T7577] bus_for_each_drv+0x159/0x1e0 [ 104.976626][ T7577] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.978323][ T7577] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.979994][ T7577] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.981836][ T7577] __device_attach+0x1e4/0x4d0 [ 104.983350][ T7577] ? __pfx___device_attach+0x10/0x10 [ 104.985035][ T7577] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.986672][ T7577] device_initial_probe+0xaf/0xd0 [ 104.988297][ T7577] bus_probe_device+0x64/0x160 [ 104.989849][ T7577] device_add+0x121d/0x1970 [ 104.991299][ T7577] ? __pfx_device_add+0x10/0x10 [ 104.992832][ T7577] ? __pfx___might_resched+0x10/0x10 [ 104.994626][ T7577] ? __init_waitqueue_head+0xca/0x150 [ 104.996890][ T7577] ? ioread8+0x8f/0xd0 [ 104.998612][ T7577] register_virtio_device+0x4f0/0x5d0 [ 105.000882][ T7577] ? __pfx_register_virtio_device+0x10/0x10 [ 105.002953][ T7577] ? __pfx_pcibios_set_master+0x10/0x10 [ 105.004777][ T7577] ? __raw_spin_lock_init+0x3a/0x110 [ 105.006999][ T7577] ? __pfx_virtio_pci_probe+0x10/0x10 [ 105.008980][ T7577] virtio_pci_probe+0x255/0x410 [ 105.010539][ T7577] local_pci_probe+0xdd/0x1b0 [ 105.012011][ T7577] pci_call_probe+0x176/0x800 [ 105.013496][ T7577] ? pci_match_device+0x147/0x7d0 [ 105.015055][ T7577] ? __pfx_pci_call_probe+0x10/0x10 [ 105.016692][ T7577] ? __pfx_pci_match_device+0x10/0x10 [ 105.018397][ T7577] ? pci_find_host_bridge+0x3c/0x80 [ 105.020227][ T7577] ? up_write+0x2dc/0x5b0 [ 105.021641][ T7577] pci_device_probe+0x25b/0x400 [ 105.023190][ T7577] ? __pfx_pci_device_probe+0x10/0x10 [ 105.024910][ T7577] ? kernfs_create_link+0x1bd/0x240 [ 105.026572][ T7577] ? sysfs_create_link+0x68/0xc0 [ 105.028157][ T7577] ? __pfx_pci_device_probe+0x10/0x10 [ 105.029969][ T7577] really_probe+0x241/0xa60 [ 105.031471][ T7577] __driver_probe_device+0x210/0x460 [ 105.033162][ T7577] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 105.034988][ T7577] driver_probe_device+0x4a/0x140 [ 105.036583][ T7577] __device_attach_driver+0x1df/0x320 [ 105.038287][ T7577] ? __pfx___device_attach_driver+0x10/0x10 [ 105.040165][ T7577] bus_for_each_drv+0x159/0x1e0 [ 105.041721][ T7577] ? __pfx_bus_for_each_drv+0x10/0x10 [ 105.043554][ T7577] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.045257][ T7577] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 105.047066][ T7577] __device_attach+0x1e4/0x4d0 [ 105.048621][ T7577] ? __pfx___device_attach+0x10/0x10 [ 105.050421][ T7577] ? do_raw_spin_unlock+0x145/0x1e0 [ 105.052073][ T7577] device_initial_probe+0xaf/0xd0 [ 105.053677][ T7577] pci_bus_add_device+0xc5/0x100 [ 105.055252][ T7577] pci_bus_add_devices+0x9a/0x1f0 [ 105.056840][ T7577] pci_rescan_bus+0x2a/0x40 [ 105.058323][ T7577] rescan_store+0xfb/0x130 [ 105.059779][ T7577] ? __pfx_rescan_store+0x10/0x10 [ 105.061349][ T7577] ? sysfs_file_kobj+0xe4/0x290 [ 105.062869][ T7577] ? __pfx_rescan_store+0x10/0x10 [ 105.064453][ T7577] bus_attr_store+0x74/0xb0 [ 105.065889][ T7577] ? __pfx_bus_attr_store+0x10/0x10 [ 105.067560][ T7577] sysfs_kf_write+0xf2/0x150 [ 105.069024][ T7577] kernfs_fop_write_iter+0x3e0/0x5f0 [ 105.070713][ T7577] ? __pfx_sysfs_kf_write+0x10/0x10 [ 105.072344][ T7577] vfs_write+0x6af/0x1050 [ 105.073717][ T7577] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 105.075546][ T7577] ? __pfx_vfs_write+0x10/0x10 [ 105.077048][ T7577] ? find_held_lock+0x2b/0x80 [ 105.078560][ T7577] ksys_write+0x12a/0x250 [ 105.079962][ T7577] ? __pfx_ksys_write+0x10/0x10 [ 105.081513][ T7577] do_syscall_64+0x123/0x790 [ 105.082967][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.084827][ T7577] RIP: 0033:0x7fcc7539e159 [ 105.086232][ T7577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.092173][ T7577] RSP: 002b:00007fcc762d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.094756][ T7577] RAX: ffffffffffffffda RBX: 00007fcc75626090 RCX: 00007fcc7539e159 [ 105.097209][ T7577] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 105.099750][ T7577] RBP: 00007fcc7543506b R08: 0000000000000000 R09: 0000000000000000 [ 105.103149][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.105792][ T7577] R13: 00007fcc75626128 R14: 00007fcc75626090 R15: 00007ffefeb49158 [ 105.108283][ T7577] [ 105.109928][ T7577] Kernel Offset: disabled [ 105.111297][ T7577] Rebooting in 86400 seconds..