last executing test programs: 25.046569194s ago: executing program 1 (id=108): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) capset(&(0x7f00000005c0)={0x20080522}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x76}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x400008}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94) 25.046406284s ago: executing program 1 (id=109): r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x40140) poll(&(0x7f00000001c0)=[{r1, 0x20}, {r0, 0x4044}], 0x2, 0xffffff04) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2803, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000003c0)={0x3, 0x9, "8ac214", 0x2, 0xff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000008085992b19f2889624b9682236a4520e0000b85712f8af9e790736193c4100000056034b6c0266"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x2, 0x10c) read$snddsp(r4, &(0x7f00000007c0)=""/211, 0xd3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/size\x00', 0x2, 0x0) 24.325996108s ago: executing program 1 (id=112): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="70e0b81fde5ee533b108844d6399a84cc88d17", 0x13, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="cfe2261e623ef2b19db6b131a566339aff99a0f3a7bda68f25d85e08ce2b36dfd8a19b31c7572cfd0d86dafb9024d3db25ca5466c6cf682dd2d24f06615ce1faee34aa67fab220e6e6c7a167e12d3fb43322798eca54c61e0c691e", 0x5b, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="3426b3329693da09403585e0794d59fc3c532c0d04a6afc80d6f6bd30f97b64de1e5551143e8bdbe7d12750af7a9554803e163afcaa9474f27c8d56089290a6d6a46c8dc6cd2190fd9b40e8d1113946fe8c57828913fbc819dfc8195ccb12d0d20a1d86102a60d29412ad802e4d7f5b693c3f4ec5501b3fd6e0954baf82495628d8f33d7d21a777a7f6999a0346231b4d5f69c98b8d2ebbb6e2ba15cc031dc6295769ac2645f8015006f5fd60fd79c004a72995d644239e2cf3b6d45317ef988552dee297deac28f9e762320eddfec574b91313e2cf0eb7a28ff5160e52efe4f92fd6d3097", 0xe5, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000340)={r0, r1, r2}, &(0x7f0000000380)=""/30, 0x1e, &(0x7f00000004c0)={&(0x7f00000003c0)={'xxhash64\x00'}, &(0x7f0000000400)="6710ad87d4ceeeca06223cc9184649760d29d221964c453f6a0313e930b6e81f1630c56ed935100892688d76bb78ca811442be2c1bc33e08b6bf344e06a2831f1c34dfa6c5d9efb2588bbd877a9dd3e6e320406f181075120d04dedf92eab24cfee6dadd0e93e4007c1e457f9568b135ba0570bfbbc6cfc18a48c01d18fb2b0ec4b8f74f90ddaa40cc3675a6ecabd4941385be08f5af77953f60085d26eb4ed593ea0b87628d7a983f422b3a3e19dd066cf2c3907ac863", 0xb7}) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$negate(0xd, r1, 0xd66, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x82800, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x7ff, 0x2, 0x6, 0x400}}]}}, 0x15) r4 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000600), 0x131400, 0x0) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000640), 0x182, 0x0) ioctl$BLKOPENZONE(r5, 0x40101286, &(0x7f0000000680)={0x8001, 0x80000001}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f0000000700)={0x9, r4, 'id0\x00'}) r8 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, r3) syz_emit_vhci(&(0x7f0000000800)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x4, 0x2}, {0x16}}}}, 0xf) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0x19, 0x1, "b70310", 0x418c, 0x9}, {@none, 0x5, 0x7, 0x0, "8d8c96", 0x7780, 0x6}, {@any, 0x2, 0x6, 0x4, "e1158c", 0x91, 0x1}]}}}, 0x31) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x29) syz_emit_vhci(&(0x7f00000009c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_move_chan_cfm={{0x10, 0x10, 0x4}, {0xe, 0x6}}, @l2cap_move_chan_req={{0xe, 0x2b, 0x3}, {0x400, 0x5}}, @l2cap_move_chan_req={{0xe, 0xff, 0x3}, {0xd, 0x9}}, @l2cap_info_req={{0xa, 0x1, 0x2}, {0x8}}]}}, 0x25) r9 = add_key(&(0x7f0000000a00)='cifs.idmap\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)="95bd75887321e2ceb9be9972ea8314e3fe850913168420", 0x17, r8) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000ac0)={0x4}) accept4(r7, &(0x7f0000000b00)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000b80)=0x80, 0x0) clock_gettime(0x7, &(0x7f0000000bc0)) keyctl$join(0x1, &(0x7f0000000c00)={'syz', 0x2}) keyctl$search(0xa, r2, &(0x7f0000000c40)='rxrpc\x00', &(0x7f0000000c80)={'syz', 0x1}, r9) syz_emit_vhci(&(0x7f0000000cc0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xcf}, "53a8b3b8b45fd2a800f494f124416d6c16cbaf86f20aa36777dca4a9606f73c01d69549bd26c01b9caf3ce48bf8d70032affb7cc1dec256445851648617afb2e5ecc7c0789a62182d14f65d562e0953d9a621e5d43c6eeb02ea67b9f1c9f919e9c9bed7fbf6dc4742608f269c86542331756c13a162a0e018e748eab53cea6e83db0035166237b23e4cf567589736aa346548322a11788313d61b23dbc90f86a4585310fcd38d276961c5d94d922fef1d3746df0609d2f6a77c3720bf71cf8f5ee1c0e4ed96334eaac4cace6c3510a"}, 0xd3) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x7c, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x10) syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x7, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x4}}}, 0xe) 23.776581435s ago: executing program 1 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) close(0xffffffffffffffff) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x10000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0xa0201, 0x40) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) write$cgroup_pid(r2, &(0x7f0000000240)=0xffffffffffffffff, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x183) r3 = syz_open_dev$cec(&(0x7f0000000780), 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000800), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000840)=0x22) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000880)=0x82) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000400)='./file0\x00', 0x1e3342, 0x15b) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r5 = syz_usb_connect(0x1, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000a00)={0x18, &(0x7f0000000a40)={0x0, 0xe, 0x5, "0c9917e701"}, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000ac0)=0x4) 21.386462431s ago: executing program 1 (id=156): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) (async) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x182b}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) (async) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="e5ce0c55ade94b6868f21b86889b44040714fa2b7cb5cccc8922bebcf429b2d7c58b4b41e430b12d9f2a1d72163c3bba9ad0220f14eda34198d61ceac1d5ac42b5f7896333dc2a8484df21b526445ec4d8369a8a7eadb96d2d41f5d63d26c3e9e681e5178a1ef3f980a29d07272ab3bcc66ec0c6e01e2d6a0f4b3bc8a38ba971938e091390d0df3477cb5f0e7c996a475b1837261fbb7db3583fb8e1118f20508cf2a6236d73659f8b54a6b38c8786d9d4", 0xb1}, {&(0x7f0000001400)="172733c7c69d0336a26fe6292a0d960eda6a6479ab05cc23584fb9ac15bc11ac11cfdd7396dac8a3865118de5ae6639151da7b3288e6111bf3fdc850979ba07ec5df5d0d09097ecd41137041fd4c8540e32520ce71a4ba4135ce4c43fb16bbf6ed4ef918be621b9acc4b08c848c8d890719a3bc6e526fed96fbc", 0x7a}, {&(0x7f0000001480)="e6514679bfeb54864a2df6af77cb9499086c0a958c98c64d6d277779c5608ca8a3dc6a606f8551ccf5b51b15d337ec3632293b846f4697ec5b24458e13ceebb05e7a3e56d4a82a9a9ff782ddf0a36dbcbba9f3779927614f798ba855d02446946baa7c7f0d7c3932a580", 0x6a}, {&(0x7f0000001500)="bac2cfaa9a4c054cc7a16ac77029d8b96775c869ef9d35ef63c2259e23d89fb83e654f0a7c37c2ee8974043608d28fceb4a052", 0x33}], 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000300)="703a732f70202e2f66696c65303a3074f27a920fe0d1ce70a77d244627077d150e4794fad8c1d7bfaf8c187cb06d1a157ba1e225", 0x34) 21.006834088s ago: executing program 1 (id=157): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x2, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x2, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa3, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x3, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xffff, 0x4, 0x2, 0x7, 0x6, 0x2, 0x1, 0x4e162a2a, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1001, 0x80000004, 0x6, 0x438, 0x5, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x2, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x7973, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='27', 0x2) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000300)) add_key$fscrypt_v1(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 20.981737959s ago: executing program 32 (id=157): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x2, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x2, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa3, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x3, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xffff, 0x4, 0x2, 0x7, 0x6, 0x2, 0x1, 0x4e162a2a, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1001, 0x80000004, 0x6, 0x438, 0x5, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x2, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x7973, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='27', 0x2) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000300)) add_key$fscrypt_v1(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.285912481s ago: executing program 4 (id=249): syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syslog(0x9, &(0x7f00000005c0)=""/114, 0x72) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="0fc7193ede73b848b8b5ce0000000000000f23d80f21f835400000600f23f8672ef26d410f18dc42d9fa4f0fc7580a66b89f008ec8f26f66ba4200ec", 0x3c}], 0x1, 0x25, &(0x7f0000000240)=[@dstype3={0x7, 0xc}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000340)=0x200) write$dsp(r3, &(0x7f0000000380)="5cba91a4", 0xffffffd9) write$dsp(r3, &(0x7f00000003c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x100000, 0xe000, 0xd000, 0x40000], 0x5, 0x82, 0xff5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.475122108s ago: executing program 0 (id=260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.907994047s ago: executing program 0 (id=264): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x2, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x2, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x2009, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x1, 0x809, 0x4, 0xa3, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x3, 0x4c2b36d3, 0x4, 0x1000001, 0xfffffff8, 0x401, 0x46, 0xffff, 0x4, 0x2, 0x7, 0x6, 0x2, 0x1, 0x4e162a2a, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1001, 0x80000004, 0x6, 0x438, 0x5, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x2, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x4, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x12fa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x7973, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.076129373s ago: executing program 2 (id=270): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0x900}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900, 0x100000000000000}, 0x0) 2.995676917s ago: executing program 4 (id=272): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) writev(r0, &(0x7f0000002500)=[{&(0x7f0000000100)="aefdda9d24f57f02633aeff0f64e42e23a98435c677cf426072a00"/42, 0x2a}], 0x1) 2.942144836s ago: executing program 2 (id=273): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000100)) 2.864888458s ago: executing program 2 (id=276): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x2}]}}, &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d01, &(0x7f0000000040)="0000010000000000000001") ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000100)) 2.858712642s ago: executing program 0 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/64, 0x40) 2.858556658s ago: executing program 4 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "0f08f4"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18}], 0x7b}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.726140802s ago: executing program 2 (id=279): clock_nanosleep(0x0, 0x0, &(0x7f0000000100)={0x0, 0x2faf0800}, 0x0) 2.663179754s ago: executing program 0 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='core\n\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='mem\n\x00', 0x4) close(r2) 2.523149499s ago: executing program 3 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/kallsyms\x00', 0x0, 0x0) 2.446487423s ago: executing program 3 (id=282): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8) close$binfmt(r1) execveat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), &(0x7f00000028c0), 0x0) 2.386274217s ago: executing program 3 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000800000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.835578711s ago: executing program 2 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000300)='./trace\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/events/sched/sched_switch/enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x1) 449.031929ms ago: executing program 2 (id=285): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x1f, {"48bf0000050000000000f0ff07f4"}}], 0x1f}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 448.873182ms ago: executing program 4 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/firmware/acpi/tables/APIC\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/4096, 0x1000) close(r0) 415.029257ms ago: executing program 3 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-asm)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-x86_64)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-ni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) 414.798593ms ago: executing program 0 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/1/root/lib/modules\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/1024, 0x400) 325.742694ms ago: executing program 3 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000150)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/pm_test\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/64, 0x40) 325.550626ms ago: executing program 0 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='mem\n', 0x4) close(r2) 325.398481ms ago: executing program 4 (id=291): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) 96.144493ms ago: executing program 3 (id=292): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='on\x00', 0x3) close(r1) mkdirat(r0, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r2 = openat(r0, &(0x7f0000000240)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)="f300000000000000", 0x8, 0x83f) pwrite64(r2, &(0x7f0000000100)="f300040000000000", 0x8, 0x830) r3 = openat(r0, &(0x7f0000000280)='./dev/cpu/1/msr\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)="f300000000000000", 0x8, 0x83f) pwrite64(r3, &(0x7f0000000100)="f300040000000000", 0x8, 0x830) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 4 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/cpu/freeze_on_smi\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) write(r0, &(0x7f0000000180)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/event_source/devices/cpu/freeze_on_smi\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) write(r1, &(0x7f0000000280)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0\n', 0x2) write(r2, &(0x7f0000000380)='1\n', 0x2) close(r2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:35416' (ED25519) to the list of known hosts. [ 38.976010][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 38.976028][ T43] audit: type=1400 audit(1792145332.773:138): avc: denied { name_bind } for pid=5719 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.021857][ T43] audit: type=1400 audit(1792145332.823:139): avc: denied { execute } for pid=5720 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.022183][ T43] audit: type=1400 audit(1792145332.823:140): avc: denied { execute_no_trans } for pid=5720 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.648967][ T43] audit: type=1400 audit(1792145335.443:141): avc: denied { mounton } for pid=5720 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.660036][ T43] audit: type=1400 audit(1792145335.453:142): avc: denied { mount } for pid=5720 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.662604][ T5720] cgroup: Unknown subsys name 'net' [ 41.664414][ T43] audit: type=1400 audit(1792145335.463:143): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.794300][ T5720] cgroup: Unknown subsys name 'cpuset' [ 41.798315][ T5720] cgroup: Unknown subsys name 'rlimit' [ 41.994939][ T43] audit: type=1400 audit(1792145335.793:144): avc: denied { setattr } for pid=5720 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.997379][ T43] audit: type=1400 audit(1792145335.793:145): avc: denied { create } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.997409][ T43] audit: type=1400 audit(1792145335.793:146): avc: denied { write } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.997430][ T43] audit: type=1400 audit(1792145335.793:147): avc: denied { read } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.064411][ T5725] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.775350][ T5720] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.249926][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 47.250147][ T43] audit: type=1400 audit(1792145341.043:154): avc: denied { execmem } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.469537][ T43] audit: type=1400 audit(1792145341.263:155): avc: denied { create } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.470772][ T43] audit: type=1400 audit(1792145341.273:156): avc: denied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.471361][ T43] audit: type=1400 audit(1792145341.273:157): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.489534][ T43] audit: type=1400 audit(1792145341.283:158): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[2714]" dev="sockfs" ino=2714 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.534219][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.537671][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.538213][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.539017][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.542169][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.543369][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.543825][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.544396][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.547231][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.547493][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.549678][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.550493][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.551030][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.551403][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.556260][ T43] audit: type=1400 audit(1792145341.353:159): avc: denied { read } for pid=5731 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.556301][ T43] audit: type=1400 audit(1792145341.353:160): avc: denied { open } for pid=5731 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.558870][ T43] audit: type=1400 audit(1792145341.353:161): avc: denied { mounton } for pid=5731 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.559600][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.562159][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.562208][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.562315][ T43] audit: type=1400 audit(1792145341.363:162): avc: denied { module_request } for pid=5731 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.563614][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.563974][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.564231][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.567042][ T43] audit: type=1400 audit(1792145341.363:163): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.818122][ T5739] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.822419][ T5733] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.827197][ T5737] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.827646][ T5733] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.828952][ T5733] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.831935][ T5731] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.978995][ T5733] infiniband rxe0: set active [ 47.980106][ T5733] infiniband rxe0: added rxe_eth0 [ 47.981018][ T71] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.994885][ T5733] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.994912][ T5733] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.994939][ T5733] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 48.019121][ T5733] RDS/IB: rxe0: added [ 48.019232][ T5733] smc: adding ib device rxe0 with port count 1 [ 48.019272][ T5733] smc: ib device rxe0 port 1 has no pnetid [ 48.029523][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.057323][ T5733] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.195404][ T5733] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.254725][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.254771][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.254829][ T5739] bridge_slave_0: entered allmulticast mode [ 48.255724][ T5739] bridge_slave_0: entered promiscuous mode [ 48.258555][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.258610][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.258812][ T5739] bridge_slave_1: entered allmulticast mode [ 48.260104][ T5739] bridge_slave_1: entered promiscuous mode [ 48.302000][ T5733] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.347646][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.347791][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.347869][ T5737] bridge_slave_0: entered allmulticast mode [ 48.349103][ T5737] bridge_slave_0: entered promiscuous mode [ 48.358491][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.367344][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.367386][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.367442][ T5737] bridge_slave_1: entered allmulticast mode [ 48.368293][ T5737] bridge_slave_1: entered promiscuous mode [ 48.378476][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.415896][ T5739] team0: Port device team_slave_0 added [ 48.415984][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.416054][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.416108][ T5731] bridge_slave_0: entered allmulticast mode [ 48.416912][ T5731] bridge_slave_0: entered promiscuous mode [ 48.420022][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.421475][ T5739] team0: Port device team_slave_1 added [ 48.422889][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.422962][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.423071][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.423127][ T5731] bridge_slave_1: entered allmulticast mode [ 48.423917][ T5731] bridge_slave_1: entered promiscuous mode [ 48.456059][ T5737] team0: Port device team_slave_0 added [ 48.461358][ T5737] team0: Port device team_slave_1 added [ 48.467899][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.468345][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.468359][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.468378][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.472244][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.472253][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.472265][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.487100][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.502495][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.502506][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.502518][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.512585][ T5733] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.514612][ T5731] team0: Port device team_slave_0 added [ 48.516342][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.516353][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.516372][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.528347][ T5731] team0: Port device team_slave_1 added [ 48.562262][ T5739] hsr_slave_0: entered promiscuous mode [ 48.562819][ T5739] hsr_slave_1: entered promiscuous mode [ 48.572136][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.572147][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.572211][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.586322][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.586332][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.586344][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.598407][ T5737] hsr_slave_0: entered promiscuous mode [ 48.599278][ T5737] hsr_slave_1: entered promiscuous mode [ 48.599593][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.599641][ T5737] Cannot create hsr debugfs directory [ 48.664906][ T5731] hsr_slave_0: entered promiscuous mode [ 48.665352][ T5731] hsr_slave_1: entered promiscuous mode [ 48.665674][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.665690][ T5731] Cannot create hsr debugfs directory [ 48.949523][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.956428][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.961359][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.970781][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.972632][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.980759][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.981537][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.985453][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.102377][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.104816][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.105296][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.105419][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.105515][ T5733] bridge_slave_0: entered allmulticast mode [ 49.107002][ T5733] bridge_slave_0: entered promiscuous mode [ 49.113075][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.116250][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.116700][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.119613][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.120071][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.120260][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.120357][ T5733] bridge_slave_1: entered allmulticast mode [ 49.121679][ T5733] bridge_slave_1: entered promiscuous mode [ 49.138761][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.145356][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.184643][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.192967][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.245752][ T5733] team0: Port device team_slave_0 added [ 49.245777][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.247953][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.256736][ T5733] team0: Port device team_slave_1 added [ 49.259145][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.261838][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.286313][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.286329][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.286349][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.289819][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.295854][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.301229][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.301243][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.301264][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.310725][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.317157][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.375678][ T5733] hsr_slave_0: entered promiscuous mode [ 49.376087][ T5733] hsr_slave_1: entered promiscuous mode [ 49.376475][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 49.376486][ T5733] Cannot create hsr debugfs directory [ 49.385187][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.446729][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.479653][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.479729][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.482626][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.482756][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.563749][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.571592][ T5734] Bluetooth: hci3: command tx timeout [ 49.571767][ T5734] Bluetooth: hci2: command tx timeout [ 49.571824][ T5734] Bluetooth: hci0: command tx timeout [ 49.605690][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.608906][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.620751][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.622786][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.623580][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.625835][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.627658][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.630923][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.636461][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.644811][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.649086][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.649130][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.660830][ T5743] Bluetooth: hci1: command tx timeout [ 49.664040][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.664090][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.674900][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.687498][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.687542][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.702175][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.702219][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.710501][ T5737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.787392][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.801851][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.817024][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.817091][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.823508][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.823552][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.992042][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.010261][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.028957][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.065034][ T5739] veth0_vlan: entered promiscuous mode [ 50.084721][ T5737] veth0_vlan: entered promiscuous mode [ 50.085358][ T5739] veth1_vlan: entered promiscuous mode [ 50.100926][ T5731] veth0_vlan: entered promiscuous mode [ 50.111408][ T5737] veth1_vlan: entered promiscuous mode [ 50.122548][ T5731] veth1_vlan: entered promiscuous mode [ 50.136300][ T5739] veth0_macvtap: entered promiscuous mode [ 50.144834][ T5739] veth1_macvtap: entered promiscuous mode [ 50.160482][ T5731] veth0_macvtap: entered promiscuous mode [ 50.168273][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.169595][ T5731] veth1_macvtap: entered promiscuous mode [ 50.172534][ T5737] veth0_macvtap: entered promiscuous mode [ 50.175086][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.177883][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.179475][ T5737] veth1_macvtap: entered promiscuous mode [ 50.204804][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.218176][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.242177][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.250784][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.251172][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.251205][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.259348][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.289517][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.289545][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.293070][ T5807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.293400][ T5807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.299712][ T5733] veth0_vlan: entered promiscuous mode [ 50.329631][ T5733] veth1_vlan: entered promiscuous mode [ 50.342857][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.342872][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.380344][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.380354][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.381524][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.381578][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.381623][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.381653][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.381683][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.381713][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.417398][ T5733] veth0_macvtap: entered promiscuous mode [ 50.429246][ T5739] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.437506][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.437522][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.439475][ T5733] veth1_macvtap: entered promiscuous mode [ 50.470946][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.471787][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.471802][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.498567][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.499477][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.499494][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.507623][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.513799][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.513836][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.550341][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.550624][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.597564][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.597584][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.618189][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.618207][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.669043][ T5891] ima: policy update failed [ 50.704143][ T5893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.724381][ T5896] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 50.725227][ T5896] Zero length message leads to an empty skb [ 50.734832][ T5896] jffs2: notice: (5896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.650934][ T5743] Bluetooth: hci0: command tx timeout [ 51.650967][ T5743] Bluetooth: hci2: command tx timeout [ 51.650984][ T5743] Bluetooth: hci3: command tx timeout [ 51.730189][ T5734] Bluetooth: hci1: command tx timeout [ 52.610637][ T5887] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 53.730185][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 53.730221][ T5734] Bluetooth: hci2: command tx timeout [ 53.730242][ T5734] Bluetooth: hci0: command tx timeout [ 53.810120][ T5743] Bluetooth: hci1: command tx timeout [ 53.881905][ T43] kauditd_printk_skb: 59 callbacks suppressed [ 53.881918][ T43] audit: type=1400 audit(1792145347.683:223): avc: denied { read write } for pid=5922 comm="syz.3.11" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.882120][ T43] audit: type=1400 audit(1792145347.683:224): avc: denied { open } for pid=5922 comm="syz.3.11" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.882986][ T43] audit: type=1400 audit(1792145347.683:225): avc: denied { map } for pid=5922 comm="syz.3.11" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.888914][ T43] audit: type=1400 audit(1792145347.683:226): avc: denied { read write } for pid=5922 comm="syz.3.11" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.889053][ T43] audit: type=1400 audit(1792145347.683:227): avc: denied { mount } for pid=5924 comm="syz.2.12" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.889220][ T43] audit: type=1400 audit(1792145347.683:228): avc: denied { open } for pid=5922 comm="syz.3.11" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.889635][ T43] audit: type=1400 audit(1792145347.683:229): avc: denied { ioctl } for pid=5922 comm="syz.3.11" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.890605][ T43] audit: type=1400 audit(1792145347.693:230): avc: denied { mount } for pid=5924 comm="syz.2.12" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.894008][ T43] audit: type=1800 audit(1792145347.693:231): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.12" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 53.917525][ T43] audit: type=1400 audit(1792145347.713:232): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.150275][ T5849] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.250145][ T5813] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 54.311471][ T5849] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 54.313407][ T5849] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 54.313429][ T5849] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.313443][ T5849] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 54.313477][ T5849] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.316290][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 54.316312][ T5849] usb 8-1: Product: syz [ 54.316324][ T5849] usb 8-1: Manufacturer: syz [ 54.331002][ T5849] cdc_wdm 8-1:1.0: skipping garbage [ 54.331018][ T5849] cdc_wdm 8-1:1.0: skipping garbage [ 54.336264][ T5849] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 54.336281][ T5849] cdc_wdm 8-1:1.0: Unknown control protocol [ 54.430752][ T5813] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.431696][ T5813] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 54.431721][ T5813] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 54.431741][ T5813] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.432669][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 54.432687][ T5813] usb 7-1: SerialNumber: syz [ 54.436940][ T5932] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 54.437088][ T5932] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 54.529350][ T9] usb 8-1: USB disconnect, device number 2 [ 54.641918][ T5932] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 54.642062][ T5932] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 54.914288][ T5939] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 54.970111][ T42] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.974322][ T5951] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23'. [ 54.979163][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.051746][ T5813] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 55.121232][ T42] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 55.123530][ T42] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 55.123545][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.123555][ T42] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 55.123575][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.124738][ T42] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 55.124749][ T42] usb 8-1: Product: syz [ 55.124756][ T42] usb 8-1: Manufacturer: syz [ 55.130629][ T42] cdc_wdm 8-1:1.0: skipping garbage [ 55.130639][ T42] cdc_wdm 8-1:1.0: skipping garbage [ 55.135599][ T5966] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 55.139452][ T42] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 55.139463][ T42] cdc_wdm 8-1:1.0: Unknown control protocol [ 55.246803][ T42] usb 7-1: USB disconnect, device number 2 [ 55.253432][ T42] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 55.811426][ T5743] Bluetooth: hci0: command tx timeout [ 55.811455][ T5743] Bluetooth: hci2: command tx timeout [ 55.811474][ T5743] Bluetooth: hci3: command 0x040f tx timeout [ 55.812560][ T5984] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 55.824098][ T5990] netlink: 243 bytes leftover after parsing attributes in process `syz.2.33'. [ 55.824131][ T5990] netlink: 243 bytes leftover after parsing attributes in process `syz.2.33'. [ 55.900319][ T5734] Bluetooth: hci1: command tx timeout [ 55.907659][ T6001] netlink: 'syz.0.37': attribute type 8 has an invalid length. [ 55.953418][ T6003] netlink: 68 bytes leftover after parsing attributes in process `syz.2.38'. [ 55.953528][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38'. [ 55.983661][ T6005] openvswitch: netlink: IPv4 tunnel dst address is zero [ 56.672944][ T6024] ima: policy update failed [ 57.276147][ T5849] usb 8-1: USB disconnect, device number 3 [ 57.355425][ T6016] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 57.386589][ T6038] warning: `syz.3.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.401468][ T6041] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.517147][ T6046] kvm: vcpu 0: requested 2 ns lapic timer period limited to 200000 ns [ 57.627471][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 57.638532][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 57.642471][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 57.642501][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.55'. [ 57.709360][ T6062] syzkaller0: entered promiscuous mode [ 57.709381][ T6062] syzkaller0: entered allmulticast mode [ 57.715915][ T6062] tipc: Started in network mode [ 57.715936][ T6062] tipc: Node identity 4a3f1d84af64, cluster identity 4711 [ 57.716135][ T6062] tipc: Enabled bearer , priority 0 [ 57.717099][ T6061] tipc: Resetting bearer [ 57.731290][ T6061] tipc: Disabling bearer [ 57.828428][ T6066] ima: policy update failed [ 57.891086][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 58.120303][ T5849] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.170014][ T5835] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 58.178663][ T5813] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.270823][ T5849] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.273344][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.273361][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.273372][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.273390][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.275596][ T5849] usb 5-1: config 0 descriptor?? [ 58.300045][ T5835] usb 6-1: device descriptor read/64, error -71 [ 58.330969][ T6083] netlink: Unknown NAT attribute (type=1025, max=9) [ 58.330998][ T6083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.431470][ T6089] netlink: 'syz.3.65': attribute type 14 has an invalid length. [ 58.540808][ T5835] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 58.670109][ T5835] usb 6-1: device descriptor read/64, error -71 [ 58.684778][ T5849] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 58.695600][ T5849] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 58.781199][ T5835] usb usb6-port1: attempt power cycle [ 58.942679][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.943050][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.946288][ T58] usb 5-1: USB disconnect, device number 2 [ 59.120281][ T5835] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 59.140820][ T5835] usb 6-1: device descriptor read/8, error -71 [ 59.380070][ T5835] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 59.400565][ T5835] usb 6-1: device descriptor read/8, error -71 [ 59.477747][ T43] kauditd_printk_skb: 120 callbacks suppressed [ 59.477758][ T43] audit: type=1400 audit(1792145353.273:353): avc: denied { watch watch_reads } for pid=6098 comm="syz.0.66" path="/29" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.478607][ T43] audit: type=1400 audit(1792145353.273:354): avc: denied { ioctl } for pid=6098 comm="syz.0.66" path="socket:[8904]" dev="sockfs" ino=8904 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.481139][ T43] audit: type=1400 audit(1792145353.283:355): avc: denied { write } for pid=6098 comm="syz.0.66" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.482268][ T6099] usb usb8: usbfs: process 6099 (syz.0.66) did not claim interface 0 before use [ 59.519617][ T43] audit: type=1400 audit(1792145353.313:356): avc: denied { getopt } for pid=6100 comm="syz.0.67" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.520701][ T5835] usb usb6-port1: unable to enumerate USB device [ 59.521470][ T43] audit: type=1400 audit(1792145353.323:357): avc: denied { prog_load } for pid=6100 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.605474][ T6103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. 68'. [ 59.605489][ T6103] netlink: 43 bytes leftover after parsing attributes in process `syz.0.68'. [ 59.605497][ T6103] netlink: 'syz.0.68': attribute type 6 has an invalid length. [ 59.605504][ T6103] netlink: 'syz.0.68': attribute type 5 has an invalid length. [ 59.608323][ T43] audit: type=1400 audit(1792145353.403:358): avc: denied { read write } for pid=6102 comm="syz.0.68" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.608447][ T43] audit: type=1400 audit(1792145353.403:359): avc: denied { open } for pid=6102 comm="syz.0.68" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.613209][ T43] audit: type=1400 audit(1792145353.413:360): avc: denied { mounton } for pid=6102 comm="syz.0.68" path="/31/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 59.633213][ T43] audit: type=1400 audit(1792145353.433:361): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.814054][ T43] audit: type=1400 audit(1792145353.613:362): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 59.865485][ T6107] ima: policy update failed [ 59.970007][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 60.837360][ T6115] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 60.862755][ T6119] netlink: 'syz.2.75': attribute type 4 has an invalid length. [ 60.862768][ T6119] __nla_validate_parse: 1 callbacks suppressed [ 60.862774][ T6119] netlink: 17 bytes leftover after parsing attributes in process `syz.2.75'. [ 60.971775][ T6126] netlink: 'syz.0.79': attribute type 2 has an invalid length. [ 61.365229][ T6085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.436261][ T6153] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.471944][ T6158] ima: policy update failed [ 61.731392][ T6169] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 62.052136][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 62.053238][ T6151] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 62.371081][ T5835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.400030][ T5813] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.407630][ T6198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.410620][ T6198] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 62.521096][ T5835] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 62.521992][ T5835] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 62.522006][ T5835] usb 7-1: config 0 has no interface number 0 [ 62.522023][ T5835] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.523826][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.523839][ T5835] usb 7-1: Product: syz [ 62.523846][ T5835] usb 7-1: Manufacturer: syz [ 62.523853][ T5835] usb 7-1: SerialNumber: syz [ 62.527003][ T5835] usb 7-1: config 0 descriptor?? [ 62.552978][ T5835] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 62.580008][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 62.580655][ T5813] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.581642][ T5813] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 62.581658][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 62.581669][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.581680][ T5813] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.581699][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.680094][ T5666] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 62.792311][ T5813] usb 5-1: GET_CAPABILITIES returned 0 [ 62.792334][ T5813] usbtmc 5-1:16.0: can't read capabilities [ 62.830765][ T5666] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 62.831898][ T5666] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 62.831923][ T5666] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 62.831943][ T5666] usb 8-1: config 0 interface 0 has no altsetting 0 [ 62.834821][ T5666] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 62.834841][ T5666] usb 8-1: Product: syz [ 62.834853][ T5666] usb 8-1: Manufacturer: syz [ 62.834863][ T5666] usb 8-1: SerialNumber: syz [ 62.837054][ T5666] usb 8-1: config 0 descriptor?? [ 62.837807][ T6200] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 62.844434][ T5666] usb 8-1: selecting invalid altsetting 0 [ 62.917921][ T851] usb 7-1: USB disconnect, device number 3 [ 62.937399][ T851] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 63.043819][ T6200] usb 8-1: BOGUS urb xfer, pipe 0 != type 1 [ 63.062976][ T5666] usb 8-1: USB disconnect, device number 4 [ 63.261054][ T6208] bridge0: port 3(syz_tun) entered blocking state [ 63.261178][ T6208] bridge0: port 3(syz_tun) entered disabled state [ 63.261305][ T6208] syz_tun: entered allmulticast mode [ 63.262821][ T6208] syz_tun: entered promiscuous mode [ 63.263378][ T6208] bridge0: port 3(syz_tun) entered blocking state [ 63.263452][ T6208] bridge0: port 3(syz_tun) entered forwarding state [ 63.274320][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.281306][ T6208] bridge_slave_0 (unregistering): left allmulticast mode [ 63.281320][ T6208] bridge_slave_0 (unregistering): left promiscuous mode [ 63.281356][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.860065][ T5885] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 64.010961][ T5885] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.012497][ T5885] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.012524][ T5885] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 64.012555][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.017021][ T6221] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.022725][ T5885] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.140098][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 64.140935][ T6216] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 64.225244][ T5885] usb 8-1: USB disconnect, device number 5 [ 64.345074][ T1358] cfg80211: failed to load regulatory.db [ 64.510935][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 64.510954][ T43] audit: type=1400 audit(1792145358.313:401): avc: denied { read } for pid=6229 comm="syz.2.115" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.511095][ T43] audit: type=1400 audit(1792145358.313:402): avc: denied { open } for pid=6229 comm="syz.2.115" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.512428][ T43] audit: type=1400 audit(1792145358.313:403): avc: denied { ioctl } for pid=6229 comm="syz.2.115" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.547492][ T43] audit: type=1400 audit(1792145358.343:404): avc: denied { read write } for pid=6231 comm="syz.2.116" name="vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.547539][ T43] audit: type=1400 audit(1792145358.343:405): avc: denied { open } for pid=6231 comm="syz.2.116" path="/dev/vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.549208][ T43] audit: type=1400 audit(1792145358.343:406): avc: denied { ioctl } for pid=6231 comm="syz.2.116" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.588417][ T43] audit: type=1400 audit(1792145358.383:407): avc: denied { ioctl } for pid=6234 comm="syz.2.117" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.590188][ T43] audit: type=1400 audit(1792145358.383:408): avc: denied { set_context_mgr } for pid=6234 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.591893][ T6235] binder: 6234:6235 ioctl c0306201 200000000480 returned -14 [ 64.602963][ T6235] binder_alloc: 6234: pid 6234 spamming oneway? 1 buffers allocated for a total size of 4096 [ 64.603237][ T6235] binder_alloc: 6234: pid 6234 spamming oneway? 2 buffers allocated for a total size of 5120 [ 64.606836][ T43] audit: type=1400 audit(1792145358.403:409): avc: denied { call } for pid=6234 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.717485][ T43] audit: type=1400 audit(1792145358.513:410): avc: denied { read } for pid=6239 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.910110][ T5666] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.967671][ T6242] 9pnet_virtio: no channels available for device syz [ 65.000106][ T5849] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 65.060613][ T5666] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 65.061496][ T5666] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 65.061514][ T5666] usb 7-1: config 0 has no interface number 0 [ 65.061532][ T5666] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.063256][ T5666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.063268][ T5666] usb 7-1: Product: syz [ 65.063275][ T5666] usb 7-1: Manufacturer: syz [ 65.063282][ T5666] usb 7-1: SerialNumber: syz [ 65.064743][ T5666] usb 7-1: config 0 descriptor?? [ 65.069880][ T5666] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 65.123614][ T6246] FAULT_INJECTION: forcing a failure. [ 65.123614][ T6246] name failslab, interval 1, probability 0, space 0, times 0 [ 65.123633][ T6246] CPU: 2 UID: 0 PID: 6246 Comm: syz.3.122 Not tainted syzkaller #0 PREEMPT(full) [ 65.123645][ T6246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.123651][ T6246] Call Trace: [ 65.123667][ T6246] [ 65.123673][ T6246] dump_stack_lvl+0x100/0x190 [ 65.123702][ T6246] should_fail_ex.cold+0x5/0xa [ 65.123718][ T6246] should_failslab+0xc2/0x120 [ 65.123738][ T6246] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 65.123753][ T6246] ? sock_alloc_inode+0x26/0x2c0 [ 65.123772][ T6246] ? __pfx_sock_alloc_inode+0x10/0x10 [ 65.123785][ T6246] sock_alloc_inode+0x26/0x2c0 [ 65.123797][ T6246] ? __pfx_sock_alloc_inode+0x10/0x10 [ 65.123809][ T6246] alloc_inode+0x68/0x250 [ 65.123822][ T6246] sock_alloc+0x44/0x280 [ 65.123832][ T6246] ? security_socket_create+0x7f/0x250 [ 65.123847][ T6246] __sock_create+0xc2/0x860 [ 65.123865][ T6246] __sys_socket+0x14d/0x260 [ 65.123879][ T6246] ? __pfx___sys_socket+0x10/0x10 [ 65.123898][ T6246] __x64_sys_socket+0x72/0xb0 [ 65.123911][ T6246] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.123930][ T6246] do_syscall_64+0x123/0x790 [ 65.123947][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.123958][ T6246] RIP: 0033:0x7fe3e0b9e559 [ 65.123967][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.123977][ T6246] RSP: 002b:00007fe3e1a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 65.123988][ T6246] RAX: ffffffffffffffda RBX: 00007fe3e0e25fa0 RCX: 00007fe3e0b9e559 [ 65.123995][ T6246] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 65.124002][ T6246] RBP: 00007fe3e0c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 65.124009][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.124015][ T6246] R13: 00007fe3e0e26038 R14: 00007fe3e0e25fa0 R15: 00007ffd6ef9e748 [ 65.124030][ T6246] [ 65.124065][ T6246] socket: no more sockets [ 65.125060][ T6246] ceph: No source [ 65.155902][ T5849] usb 6-1: unable to get BOS descriptor or descriptor too short [ 65.155939][ T5849] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 65.157564][ T5849] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 65.157584][ T5849] usb 6-1: config 142 has no interface number 0 [ 65.157611][ T5849] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 65.157629][ T5849] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 65.157646][ T5849] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 65.157663][ T5849] usb 6-1: config 142 interface 251 has no altsetting 0 [ 65.160692][ T5849] usb 6-1: string descriptor 0 read error: -22 [ 65.160746][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.163723][ T50] usb 5-1: USB disconnect, device number 3 [ 65.169593][ T6240] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 65.169643][ T6240] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 65.175849][ T5849] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 65.186006][ T5849] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 65.255165][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 65.258048][ T6252] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.394170][ T50] usb 7-1: USB disconnect, device number 4 [ 65.397627][ T50] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 65.528107][ T6264] syzkaller0: entered promiscuous mode [ 65.528122][ T6264] syzkaller0: entered allmulticast mode [ 65.597100][ T6268] netlink: 280 bytes leftover after parsing attributes in process `syz.0.129'. [ 65.742347][ T6274] netlink: 72 bytes leftover after parsing attributes in process `syz.0.132'. [ 66.080107][ T6284] syz.0.135 (6284) used greatest stack depth: 17224 bytes left [ 66.087399][ C3] usb 6-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 66.087424][ C3] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 66.087713][ C3] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 66.096488][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 66.122231][ T6291] FAULT_INJECTION: forcing a failure. [ 66.122231][ T6291] name failslab, interval 1, probability 0, space 0, times 0 [ 66.122251][ T6291] CPU: 2 UID: 0 PID: 6291 Comm: syz.0.137 Not tainted syzkaller #0 PREEMPT(full) [ 66.122263][ T6291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.122269][ T6291] Call Trace: [ 66.122273][ T6291] [ 66.122278][ T6291] dump_stack_lvl+0x100/0x190 [ 66.122308][ T6291] should_fail_ex.cold+0x5/0xa [ 66.122324][ T6291] should_failslab+0xc2/0x120 [ 66.122344][ T6291] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 66.122381][ T6291] ? __alloc_skb+0x5b7/0x710 [ 66.122395][ T6291] ? __alloc_skb+0x140/0x710 [ 66.122407][ T6291] __alloc_skb+0x140/0x710 [ 66.122415][ T6291] ? __alloc_skb+0x5b7/0x710 [ 66.122425][ T6291] ? __pfx___alloc_skb+0x10/0x10 [ 66.122454][ T6291] netlink_alloc_large_skb+0x69/0x150 [ 66.122479][ T6291] netlink_sendmsg+0x680/0xda0 [ 66.122505][ T6291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.122523][ T6291] ? selinux_socket_sendmsg+0x198/0x2f0 [ 66.122541][ T6291] ____sys_sendmsg+0xa4d/0xbe0 [ 66.122558][ T6291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.122585][ T6291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.122605][ T6291] ? lock_acquire+0x1d1/0x380 [ 66.122632][ T6291] ? get_pid_task+0x2a/0x250 [ 66.122655][ T6291] ___sys_sendmsg+0x190/0x1e0 [ 66.122678][ T6291] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.122700][ T6291] ? get_pid_task+0x106/0x250 [ 66.122722][ T6291] ? find_held_lock+0x2b/0x80 [ 66.122756][ T6291] __sys_sendmsg+0x160/0x210 [ 66.122775][ T6291] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.122804][ T6291] do_syscall_64+0x123/0x790 [ 66.122832][ T6291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.122849][ T6291] RIP: 0033:0x7fe17fb9e559 [ 66.122863][ T6291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.122877][ T6291] RSP: 002b:00007fe180b12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.122894][ T6291] RAX: ffffffffffffffda RBX: 00007fe17fe25fa0 RCX: 00007fe17fb9e559 [ 66.122903][ T6291] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 66.122909][ T6291] RBP: 00007fe180b12090 R08: 0000000000000000 R09: 0000000000000000 [ 66.122915][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.122922][ T6291] R13: 00007fe17fe26038 R14: 00007fe17fe25fa0 R15: 00007ffd909b51e8 [ 66.122936][ T6291] [ 66.210990][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 66.211316][ T6293] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 66.246994][ T6297] binder: 6294:6297 ioctl 4008ae9c 200000000680 returned -22 [ 66.469649][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.145'. [ 66.492317][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 66.561389][ T58] usb 6-1: USB disconnect, device number 6 [ 66.577087][ T58] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 66.577569][ T58] cypress_m8 6-1:142.251: device disconnected [ 66.650753][ T50] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 66.651689][ T50] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 66.651709][ T50] usb 7-1: config 0 has no interface number 0 [ 66.651739][ T50] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.653877][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.653897][ T50] usb 7-1: Product: syz [ 66.653908][ T50] usb 7-1: Manufacturer: syz [ 66.653919][ T50] usb 7-1: SerialNumber: syz [ 66.656235][ T50] usb 7-1: config 0 descriptor?? [ 66.660764][ T50] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 66.691118][ T6329] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 66.691139][ T6329] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 66.692854][ T6329] vhci_hcd vhci_hcd.0: Device attached [ 66.696743][ T6329] vhci_hcd vhci_hcd.0: port 0 already used [ 66.961647][ T5813] usb 44-1: SetAddress Request (2) to port 0 [ 66.961701][ T5813] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 66.964860][ T58] usb 7-1: USB disconnect, device number 5 [ 66.971108][ T58] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 67.017031][ T6351] loop0: detected capacity change from 0 to 3904 [ 67.068021][ T6351] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 67.068044][ T6351] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 67.068089][ T6351] loop0: [ 67.281204][ T5737] bridge0: port 3(syz_tun) entered disabled state [ 67.286573][ T5737] syz_tun (unregistering): left allmulticast mode [ 67.286588][ T5737] syz_tun (unregistering): left promiscuous mode [ 67.287265][ T5737] bridge0: port 3(syz_tun) entered disabled state [ 67.467810][ T5781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.565223][ T5781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.575554][ T6330] vhci_hcd: connection reset by peer [ 67.577038][ T13] vhci_hcd vhci_hcd.3: stop threads [ 67.577267][ T13] vhci_hcd vhci_hcd.3: release socket [ 67.578087][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 67.615203][ T6357] netlink: 236 bytes leftover after parsing attributes in process `syz.0.159'. [ 67.615218][ T6357] netlink: 236 bytes leftover after parsing attributes in process `syz.0.159'. [ 67.647917][ T5781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.656429][ T6359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.160'. [ 67.662684][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.666227][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.667041][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.667622][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.668400][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.727072][ T5781] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.747136][ T6370] xt_l2tp: invalid flags combination: 0 [ 67.908229][ T5781] bridge_slave_1: left allmulticast mode [ 67.908256][ T5781] bridge_slave_1: left promiscuous mode [ 67.908896][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.035885][ T5781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.039094][ T5781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.043477][ T5781] bond0 (unregistering): Released all slaves [ 68.064948][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.072218][ T6360] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.232429][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 68.290177][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 68.290744][ T6394] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 68.330060][ T50] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.438028][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 68.461972][ T5781] hsr_slave_0: left promiscuous mode [ 68.462720][ T5781] hsr_slave_1: left promiscuous mode [ 68.463193][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.463210][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.464317][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.464327][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.471023][ T5781] veth1_macvtap: left promiscuous mode [ 68.471052][ T5781] veth0_macvtap: left promiscuous mode [ 68.471096][ T5781] veth1_vlan: left promiscuous mode [ 68.471134][ T5781] veth0_vlan: left promiscuous mode [ 68.484041][ T50] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 68.492379][ T50] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 68.492402][ T50] usb 5-1: config 0 has no interface number 0 [ 68.492435][ T50] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.507528][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.507549][ T50] usb 5-1: Product: syz [ 68.507557][ T50] usb 5-1: Manufacturer: syz [ 68.507564][ T50] usb 5-1: SerialNumber: syz [ 68.518504][ T50] usb 5-1: config 0 descriptor?? [ 68.525892][ T50] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 68.570057][ T5666] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 68.636833][ T5781] team0 (unregistering): Port device team_slave_1 removed [ 68.650434][ T5781] team0 (unregistering): Port device team_slave_0 removed [ 68.713693][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.713766][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.713858][ T6360] bridge_slave_0: entered allmulticast mode [ 68.714970][ T6360] bridge_slave_0: entered promiscuous mode [ 68.719641][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.719712][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.719803][ T6360] bridge_slave_1: entered allmulticast mode [ 68.723913][ T5666] usb 7-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 68.727084][ T6360] bridge_slave_1: entered promiscuous mode [ 68.728805][ T5666] usb 7-1: config 1 has an invalid descriptor of length 79, skipping remainder of the config [ 68.728821][ T5666] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 68.731690][ T5666] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 68.731710][ T5666] usb 7-1: Manufacturer: syz [ 68.731722][ T5666] usb 7-1: SerialNumber: syz [ 68.758990][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.762090][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.781885][ T6360] team0: Port device team_slave_0 added [ 68.784785][ T6360] team0: Port device team_slave_1 added [ 68.804546][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.804561][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.804580][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.813345][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.813355][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.813367][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.846666][ T6360] hsr_slave_0: entered promiscuous mode [ 68.847471][ T6360] hsr_slave_1: entered promiscuous mode [ 68.847938][ T6360] debugfs: 'hsr0' already exists in 'hsr' [ 68.847954][ T6360] Cannot create hsr debugfs directory [ 68.896555][ T50] usb 5-1: USB disconnect, device number 4 [ 68.902386][ T50] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 68.982325][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 68.993123][ T6360] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.997275][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.998099][ T6360] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.999602][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.002109][ T6360] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.012522][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.013240][ T6360] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.017787][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.063407][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.077931][ T6360] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.084983][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.085028][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.092947][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.092994][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.220962][ T6204] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 69.308494][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.308801][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.336884][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.372397][ T6204] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 69.373278][ T6204] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 69.373299][ T6204] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 98, changing to 7 [ 69.375826][ T6204] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.375839][ T6204] usb 8-1: Product: syz [ 69.375846][ T6204] usb 8-1: Manufacturer: syz [ 69.375853][ T6204] usb 8-1: SerialNumber: syz [ 69.485529][ T6360] veth0_vlan: entered promiscuous mode [ 69.489719][ T6360] veth1_vlan: entered promiscuous mode [ 69.509639][ T6360] veth0_macvtap: entered promiscuous mode [ 69.515311][ T6360] veth1_macvtap: entered promiscuous mode [ 69.527626][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.537860][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.561235][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.563464][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.563495][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.563516][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.638226][ T6204] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 69.661135][ T6204] usb 8-1: USB disconnect, device number 6 [ 69.680081][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.730102][ T5734] Bluetooth: hci2: command tx timeout [ 70.188050][ T43] kauditd_printk_skb: 61 callbacks suppressed [ 70.188068][ T43] audit: type=1400 audit(1792145363.983:472): avc: denied { mount } for pid=6488 comm="syz.3.182" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 70.263907][ T43] audit: type=1400 audit(1792145364.063:473): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 70.340924][ T6491] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 70.340937][ T6491] audit: out of memory in audit_log_start [ 70.355322][ T43] audit: type=1400 audit(1792145364.153:474): avc: denied { ioctl } for pid=6490 comm="syz.3.183" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.356095][ T6491] Trying to write to read-only block-device nullb0 [ 70.370022][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 70.463736][ T6500] netlink: 'syz.3.185': attribute type 5 has an invalid length. [ 70.463755][ T6500] netlink: 36 bytes leftover after parsing attributes in process `syz.3.185'. [ 70.492341][ T43] audit: type=1400 audit(1792145364.293:475): avc: denied { setopt } for pid=6501 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.092528][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.092567][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.100072][ T58] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 71.260560][ T58] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 71.261474][ T58] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 71.261488][ T58] usb 8-1: config 0 has no interface number 0 [ 71.261505][ T58] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.263241][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.263253][ T58] usb 8-1: Product: syz [ 71.263261][ T58] usb 8-1: Manufacturer: syz [ 71.263268][ T58] usb 8-1: SerialNumber: syz [ 71.264542][ T58] usb 8-1: config 0 descriptor?? [ 71.270318][ T58] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 71.438881][ T851] usb 7-1: USB disconnect, device number 6 [ 71.464564][ T6512] netlink: 'syz.2.189': attribute type 2 has an invalid length. [ 71.464624][ T6512] netlink: 151 bytes leftover after parsing attributes in process `syz.2.189'. [ 71.465611][ T6512] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 71.478622][ T58] usb 8-1: USB disconnect, device number 7 [ 71.484697][ T58] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 71.669139][ T6517] XFS (mtdblock0): Invalid superblock magic number [ 71.810177][ T5734] Bluetooth: hci2: command tx timeout [ 72.050384][ T5813] usb 44-1: device descriptor read/8, error -110 [ 72.143431][ T43] audit: type=1400 audit(1792145365.943:476): avc: denied { create } for pid=6532 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.145854][ T43] audit: type=1400 audit(1792145365.943:477): avc: denied { read } for pid=6532 comm="syz.3.195" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.146018][ T43] audit: type=1400 audit(1792145365.943:478): avc: denied { open } for pid=6532 comm="syz.3.195" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.191481][ T43] audit: type=1400 audit(1792145365.993:479): avc: denied { ioctl } for pid=6532 comm="syz.3.195" path="socket:[13156]" dev="sockfs" ino=13156 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.450862][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 72.463515][ T5813] usb usb44-port1: attempt power cycle [ 72.519883][ T6479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.563255][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.563275][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.591899][ T6537] vivid-000: disconnect [ 72.592146][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.592165][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.890119][ T6204] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 72.998698][ T6536] vivid-000: reconnect [ 73.052657][ T5813] usb usb44-port1: unable to enumerate USB device [ 73.063659][ T6204] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.065002][ T6204] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.065025][ T6204] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.065057][ T6204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.190479][ T58] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 73.286203][ T5813] logitech-hidpp-device 0005:046D:B012.0003: item fetching failed at offset 3/4 [ 73.286580][ T5813] logitech-hidpp-device 0005:046D:B012.0003: hidpp_probe:parse failed [ 73.286613][ T5813] logitech-hidpp-device 0005:046D:B012.0003: probe with driver logitech-hidpp-device failed with error -22 [ 73.351470][ T58] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 73.353023][ T58] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 73.353044][ T58] usb 9-1: config 0 has no interface number 0 [ 73.353075][ T58] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.355906][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.355919][ T58] usb 9-1: Product: syz [ 73.355926][ T58] usb 9-1: Manufacturer: syz [ 73.355933][ T58] usb 9-1: SerialNumber: syz [ 73.361406][ T58] usb 9-1: config 0 descriptor?? [ 73.370076][ T58] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 73.405036][ T6562] Bluetooth: MGMT ver 1.23 [ 73.406598][ T6562] binder: 6561:6562 ioctl c00c620f 200000000280 returned -22 [ 73.482231][ T6541] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 73.506102][ T6204] usb 7-1: usb_control_msg returned -32 [ 73.506162][ T6204] usbtmc 7-1:16.0: can't read capabilities [ 73.533924][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 73.536629][ T6573] ======================================================= [ 73.536629][ T6573] WARNING: The mand mount option has been deprecated and [ 73.536629][ T6573] and is ignored by this kernel. Remove the mand [ 73.536629][ T6573] option from the mount to silence this warning. [ 73.536629][ T6573] ======================================================= [ 73.568207][ T6573] sctp: [Deprecated]: syz.3.206 (pid 6573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.568207][ T6573] Use struct sctp_sack_info instead [ 73.579799][ T6204] usb 9-1: USB disconnect, device number 2 [ 73.583470][ T6204] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 73.632373][ T6577] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 73.632390][ T6577] netlink: 17 bytes leftover after parsing attributes in process `syz.3.207'. [ 73.890539][ T5734] Bluetooth: hci2: command tx timeout [ 74.185217][ T6590] binder: 6589:6590 ioctl c0306201 200000000a00 returned -14 [ 74.187499][ T6590] binder: 6589:6590 ioctl c0306201 200000000b00 returned -14 [ 74.540026][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 75.824389][ T5849] usb 7-1: USB disconnect, device number 7 [ 76.003170][ T5734] Bluetooth: hci2: command tx timeout [ 76.085607][ T6603] overlay: Unknown parameter 'euid>00000000000000000000' [ 76.267013][ T6605] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.455948][ T6565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.618409][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 76.633628][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 76.633646][ T43] audit: type=1400 audit(1792145370.433:487): avc: denied { write } for pid=6613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.767901][ T43] audit: type=1400 audit(1792145370.563:488): avc: denied { write } for pid=6619 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.813322][ T6621] syzkaller0: entered promiscuous mode [ 76.813350][ T6621] syzkaller0: entered allmulticast mode [ 76.823195][ T6625] process 'syz.2.223' launched './file0' with NULL argv: empty string added [ 76.823654][ T43] audit: type=1400 audit(1792145370.623:489): avc: denied { execute_no_trans } for pid=6624 comm="syz.2.223" path="/50/file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.883269][ T5445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.926878][ T43] audit: type=1400 audit(1792145370.713:490): avc: denied { node_bind } for pid=6631 comm="syz.2.224" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 77.044561][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.152002][ T6636] afs: Bad value for 'flock' [ 77.160452][ T6636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'. [ 77.160470][ T6636] openvswitch: netlink: Flow key attr not present in new flow. [ 77.231053][ T5885] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 77.232528][ T5885] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 77.232555][ T5885] usb 5-1: config 0 has no interface number 0 [ 77.232590][ T5885] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.236018][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.236054][ T5885] usb 5-1: Product: syz [ 77.236069][ T5885] usb 5-1: Manufacturer: syz [ 77.236084][ T5885] usb 5-1: SerialNumber: syz [ 77.308136][ T5885] usb 5-1: config 0 descriptor?? [ 77.345239][ T5885] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 77.564975][ T5734] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 77.593600][ T5813] usb 5-1: USB disconnect, device number 5 [ 77.657357][ T5813] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 78.637886][ T6651] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.229'. [ 81.005044][ T6646] bridge0: port 3(syz_tun) entered blocking state [ 81.005142][ T6646] bridge0: port 3(syz_tun) entered disabled state [ 81.005264][ T6646] syz_tun: entered allmulticast mode [ 81.007283][ T6646] syz_tun: entered promiscuous mode [ 81.007698][ T6646] bridge0: port 3(syz_tun) entered blocking state [ 81.007765][ T6646] bridge0: port 3(syz_tun) entered forwarding state [ 81.014244][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.036131][ T6647] bridge_slave_0 (unregistering): left allmulticast mode [ 81.036157][ T6647] bridge_slave_0 (unregistering): left promiscuous mode [ 81.036211][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.112399][ T43] audit: type=1400 audit(1792145374.913:491): avc: denied { write } for pid=6661 comm="syz.4.232" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.112724][ T43] audit: type=1400 audit(1792145374.913:492): avc: denied { open } for pid=6661 comm="syz.4.232" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.112991][ T6662] random: crng reseeded on system resumption [ 81.125428][ T43] audit: type=1400 audit(1792145374.923:493): avc: denied { write } for pid=6657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.135251][ T43] audit: type=1400 audit(1792145374.933:494): avc: denied { ioctl } for pid=6661 comm="syz.4.232" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.165301][ T6670] netlink: 176 bytes leftover after parsing attributes in process `syz.2.231'. [ 81.185083][ T6665] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 81.185106][ T6665] netlink: 'syz.0.233': attribute type 2 has an invalid length. [ 81.187030][ T6670] comedi comedi2: pcl726: I/O base address or length out of range [ 81.197260][ T43] audit: type=1400 audit(1792145374.993:495): avc: denied { write } for pid=6668 comm="syz.3.234" name="/" dev="9p" ino=71827609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.202829][ T43] audit: type=1400 audit(1792145375.003:496): avc: denied { associate } for pid=6668 comm="syz.3.234" name="blkio.throttle.io_service_bytes" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.581758][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.242'. [ 81.670012][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 81.670034][ T43] audit: type=1400 audit(1792145375.463:511): avc: denied { write } for pid=6707 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.693112][ T6710] FAULT_INJECTION: forcing a failure. [ 81.693112][ T6710] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.693133][ T6710] CPU: 1 UID: 0 PID: 6710 Comm: syz.0.243 Not tainted syzkaller #0 PREEMPT(full) [ 81.693146][ T6710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.693153][ T6710] Call Trace: [ 81.693157][ T6710] [ 81.693162][ T6710] dump_stack_lvl+0x100/0x190 [ 81.693201][ T6710] should_fail_ex.cold+0x5/0xa [ 81.693219][ T6710] strncpy_from_user+0x3b/0x2d0 [ 81.693242][ T6710] do_getname+0x78/0x390 [ 81.693255][ T6710] do_sys_openat2+0xc7/0x1e0 [ 81.693266][ T6710] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.693283][ T6710] __x64_sys_openat+0x12d/0x210 [ 81.693294][ T6710] ? __pfx___x64_sys_openat+0x10/0x10 [ 81.693311][ T6710] do_syscall_64+0x123/0x790 [ 81.693333][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.693345][ T6710] RIP: 0033:0x7fe17fb9e559 [ 81.693354][ T6710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.693364][ T6710] RSP: 002b:00007fe180b12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.693376][ T6710] RAX: ffffffffffffffda RBX: 00007fe17fe25fa0 RCX: 00007fe17fb9e559 [ 81.693383][ T6710] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 81.693391][ T6710] RBP: 00007fe17fc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 81.693398][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.693405][ T6710] R13: 00007fe17fe26038 R14: 00007fe17fe25fa0 R15: 00007ffd909b51e8 [ 81.693420][ T6710] [ 81.700101][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 81.802141][ T43] audit: type=1400 audit(1792145375.603:512): avc: denied { write } for pid=6712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.871212][ T9] usb 8-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 1.00 [ 81.872428][ T9] usb 8-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 81.872461][ T9] usb 8-1: config 1 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 81.872490][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.912913][ T43] audit: type=1400 audit(1792145375.713:513): avc: denied { write } for pid=6716 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.052316][ T9] usb 8-1: reset high-speed USB device number 8 using dummy_hcd [ 82.078256][ T6728] jffs2: notice: (6728) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.094310][ T6728] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 82.101865][ T6728] netlink: 68 bytes leftover after parsing attributes in process `syz.2.247'. [ 82.141728][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 82.141750][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 82.148989][ T43] audit: type=1400 audit(1792145375.943:514): avc: denied { ioctl } for pid=6692 comm="syz.3.239" path="socket:[16346]" dev="sockfs" ino=16346 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 82.198944][ T43] audit: type=1400 audit(1792145375.993:515): avc: denied { unmount } for pid=6360 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 82.269006][ T43] audit: type=1400 audit(1792145376.063:516): avc: denied { setopt } for pid=6737 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.275018][ T6739] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.275261][ T6739] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.275455][ T6739] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.275639][ T6739] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.275825][ T6739] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.276013][ T6739] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.276199][ T6739] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.276391][ T6739] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.276588][ T6739] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.276829][ T6739] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.347645][ T43] audit: type=1400 audit(1792145376.143:517): avc: denied { create } for pid=6745 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.349016][ T43] audit: type=1400 audit(1792145376.143:518): avc: denied { getopt } for pid=6745 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.500821][ T43] audit: type=1400 audit(1792145376.293:519): avc: denied { wake_alarm } for pid=6751 comm="syz.0.253" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.810103][ T5835] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.970915][ T5835] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 82.972272][ T5835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.972314][ T5835] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 82.972336][ T5835] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 82.972356][ T5835] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 82.972375][ T5835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 82.972393][ T5835] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 82.972409][ T5835] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 82.975967][ T5835] usb 5-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 82.975995][ T5835] usb 5-1: Product: syz [ 82.976010][ T5835] usb 5-1: Manufacturer: syz [ 82.976027][ T5835] usb 5-1: SerialNumber: syz [ 82.981275][ T6755] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.981442][ T6755] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.981598][ T6755] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.987882][ T5835] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 82.988770][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 82.990351][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 82.990441][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 82.995442][ T5835] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 83.203620][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.205323][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.337688][ T5885] usb 5-1: USB disconnect, device number 6 [ 83.353992][ T6763] geneve2: entered promiscuous mode [ 83.367454][ T5885] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 83.367920][ T5885] keyspan 5-1:1.0: device disconnected [ 83.402093][ T9] usb 8-1: selecting invalid altsetting 8 [ 83.402115][ T9] usb 8-1: [UEAGLE-ATM] setting alternate 8 failed for 2 interface, using bulk mode [ 83.402168][ T9] usb 8-1: [UEAGLE-ATM] urb submission failed with error -19 [ 83.402237][ T9] ueagle-atm 8-1:1.0: usbatm_usb_probe: bind failed: -19! [ 83.418486][ T9] usb 8-1: USB disconnect, device number 8 [ 84.114092][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.260'. [ 84.287444][ T43] audit: type=1400 audit(1792145378.083:520): avc: denied { ioctl } for pid=6779 comm="syz.2.262" path="socket:[16736]" dev="sockfs" ino=16736 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.003596][ T6801] trusted_key: encrypted_key: insufficient parameters specified [ 85.325963][ T6788] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 85.810681][ T6825] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 85.834036][ T6825] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 85.854906][ T6830] PM: suspend entry (deep) [ 85.956201][ T5781] Filesystems sync: 0.096 seconds [ 86.530067][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 86.680887][ T6830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.683106][ T6830] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.703171][ T6830] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.715889][ T6830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.718734][ T6830] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.724908][ T6830] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.731123][ T6830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.731362][ T6830] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.764369][ T6830] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.767965][ T6830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.768107][ T6830] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.792708][ T6830] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.099772][ T6830] Freezing user space processes [ 87.180257][ T6830] Freezing user space processes completed (elapsed 0.080 seconds) [ 87.180521][ T6830] OOM killer disabled. [ 87.180530][ T6830] Freezing remaining freezable tasks [ 87.188947][ T6830] Freezing remaining freezable tasks completed (elapsed 0.008 seconds) [ 87.190063][ T6830] printk: Suspending console(s) (use no_console_suspend to debug) [ 87.562076][ T6830] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 87.562141][ T6830] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 87.562193][ T6830] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 87.562300][ T6830] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 87.562353][ T6830] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 87.562411][ T6830] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 87.562465][ T6830] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 87.562516][ T6830] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 87.562570][ T6830] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 87.562629][ T6830] vhci_hcd vhci_hcd.3: We have 1 active connection. Do not suspend. [ 87.562645][ T6830] vhci_hcd vhci_hcd.3: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 87.562876][ T6830] vhci_hcd vhci_hcd.3: PM: failed to suspend: error -16 [ 87.577346][ T6830] PM: Some devices failed to suspend, or early wake event detected [ 88.023081][ T6830] OOM killer enabled. [ 88.023093][ T6830] Restarting tasks: Starting [ 88.038474][ T6830] Restarting tasks: Done [ 88.038702][ T6830] random: crng reseeded on system resumption [ 88.042792][ T6830] hwrng_fill thread creation failed [ 88.043055][ T6830] PM: suspend exit [ 88.074653][ T5734] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.434719][ T6891] PM: suspend entry (deep) [ 88.514524][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 88.514541][ T43] audit: type=1400 audit(1792145382.303:530): avc: denied { read write } for pid=6892 comm="syz.3.292" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.514580][ T43] audit: type=1400 audit(1792145382.303:531): avc: denied { open } for pid=6892 comm="syz.3.292" path="/69/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.514707][ T5781] Filesystems sync: 0.071 seconds [ 88.594416][ C1] [ 88.596479][ C1] ============================= [ 88.603384][ C1] [ BUG: Invalid wait context ] [ 88.611861][ C1] syzkaller #0 Tainted: G S [ 88.616053][ C1] ----------------------------- [ 88.631014][ C1] syz-executor/6360 is trying to lock: [ 88.633415][ C1] ffff88801d040618 (&n->list_lock){-.-.}-{3:3}, at: __refill_objects_node+0x104/0xab0 [ 88.637283][ C1] other info that might help us debug this: [ 88.640689][ C1] context-{2:2} [ 88.642056][ C1] locks held by syz-executor/6360: 2, last CPU#1: [ 88.646231][ T9] usb usb44-port1: attempt power cycle [ 88.656515][ C1] #0: ffffffff8ff3de50 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4816/0x8380 [ 88.659817][ C1] #1: ffff88803e6d3440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 88.663034][ C1] stack backtrace: [ 88.664410][ C1] CPU: 1 UID: 0 PID: 6360 Comm: syz-executor Tainted: G S syzkaller #0 PREEMPT(full) [ 88.668325][ C1] Tainted: [S]=CPU_OUT_OF_SPEC [ 88.670073][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.673677][ C1] Call Trace: [ 88.674925][ C1] [ 88.675992][ C1] dump_stack_lvl+0x100/0x190 [ 88.677686][ C1] __lock_acquire+0xfcc/0x1f40 [ 88.679439][ C1] lock_acquire+0x1d1/0x380 [ 88.681062][ C1] ? __refill_objects_node+0x104/0xab0 [ 88.683035][ C1] ? debug_object_activate+0x343/0x4b0 [ 88.685026][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 88.686838][ C1] ? __refill_objects_node+0x104/0xab0 [ 88.688780][ C1] __refill_objects_node+0x104/0xab0 [ 88.690749][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 88.692911][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 88.694747][ C1] refill_objects+0x58/0x410 [ 88.696428][ C1] ? find_held_lock+0x2b/0x80 [ 88.698225][ C1] ? __pcs_replace_empty_main+0x132/0x650 [ 88.700189][ C1] __pcs_replace_empty_main+0x35e/0x650 [ 88.702505][ C1] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 88.704895][ C1] ? __sysvec_kvm_asyncpf_interrupt+0x309/0x610 [ 88.707514][ C1] ? __sysvec_kvm_asyncpf_interrupt+0x334/0x610 [ 88.710069][ C1] __sysvec_kvm_asyncpf_interrupt+0x334/0x610 [ 88.713340][ C1] sysvec_kvm_asyncpf_interrupt+0x9e/0xc0 [ 88.716021][ C1] [ 88.717063][ C1] [ 88.718103][ C1] asm_sysvec_kvm_asyncpf_interrupt+0x1a/0x20 [ 88.720342][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x40/0x70 [ 88.722638][ C1] Code: 81 13 48 63 c8 a9 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 44 17 00 00 85 c0 74 2b <8b> 82 18 17 00 00 83 f8 02 75 20 48 8b 8a 20 17 00 00 8b 92 1c 17 [ 88.729067][ C1] RSP: 0018:ffffc900069774c8 EFLAGS: 00000246 [ 88.731068][ C1] RAX: 8000000000000001 RBX: 0000000000000002 RCX: 0000000000000001 [ 88.734066][ C1] RDX: ffff888027a58000 RSI: ffffffff81ff91fe RDI: ffff888027a58000 [ 88.736798][ C1] RBP: ffff88806a443cc0 R08: 0000000000000005 R09: 0000000000000000 [ 88.740901][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1004f4b2b3 [ 88.743906][ C1] R13: 0000000000000003 R14: ffffed100d488799 R15: 0000000000000001 [ 88.746795][ C1] ? smp_call_function_many_cond+0x8ee/0x18c0 [ 88.748972][ C1] smp_call_function_many_cond+0x8ee/0x18c0 [ 88.751193][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 88.752878][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 88.755575][ C1] ? rcu_is_watching+0x13/0xc0 [ 88.757428][ C1] ? trace_tlb_flush+0x14b/0x1a0 [ 88.759060][ C1] kvm_flush_tlb_multi+0x238/0x3b0 [ 88.761168][ C1] ? __pfx_kvm_flush_tlb_multi+0x10/0x10 [ 88.763629][ C1] ? __rcu_read_lock+0x10/0x70 [ 88.765593][ C1] ? trace_contention_end+0x126/0x160 [ 88.767933][ C1] flush_tlb_mm_range+0x3c9/0x1370 [ 88.770230][ C1] ? ldt_dup_context+0x1a4/0x300 [ 88.772170][ C1] ? ldt_dup_context+0x1a4/0x300 [ 88.774679][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 88.777777][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.780363][ C1] ? dup_mmap+0x1560/0x2370 [ 88.782106][ C1] ? up_write+0x2dc/0x5b0 [ 88.783875][ C1] dup_mmap+0x157b/0x2370 [ 88.786360][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 88.788557][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.790785][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 88.793033][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 88.795432][ C1] ? lock_acquire+0x1d1/0x380 [ 88.797119][ C1] ? copy_process+0x4816/0x8380 [ 88.799129][ C1] copy_process+0x4821/0x8380 [ 88.801229][ C1] ? __pfx_copy_process+0x10/0x10 [ 88.803470][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 88.805620][ C1] kernel_clone+0x176/0x9d0 [ 88.807570][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 88.809369][ C1] ? __might_fault+0xc5/0x140 [ 88.811082][ C1] ? find_held_lock+0x2b/0x80 [ 88.813041][ C1] ? __might_fault+0xc5/0x140 [ 88.815286][ C1] __do_sys_clone+0xd9/0x120 [ 88.816925][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 88.818775][ C1] do_syscall_64+0x123/0x790 [ 88.820440][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.822540][ C1] RIP: 0033:0x7f19593c6fd2 [ 88.824152][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 88.830868][ C1] RSP: 002b:00007ffc4ac0e930 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 88.833902][ C1] RAX: ffffffffffffffda RBX: 00007ffc4ac0e930 RCX: 00007f19593c6fd2 [ 88.836798][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 88.840640][ C1] RBP: 00007ffc4ac0eabc R08: 0000000000000000 R09: 0000000000000001 [ 88.843937][ C1] R10: 000055558b6f97d0 R11: 0000000000000246 R12: 0000000000000001 [ 88.846769][ C1] R13: 00000000000927c0 R14: 00000000000158ef R15: 00007ffc4ac0eb10 [ 88.849865][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.853402][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.853429][ T5734] Bluetooth: hci3: command 0x040f tx timeout [ 88.891401][ T6891] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.891966][ T6891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.892055][ T6891] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.892138][ T6891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.892804][ T6891] Freezing user space processes [ 89.241447][ T5739] bridge0: port 3(syz_tun) entered disabled state [ 89.242682][ T9] usb usb44-port1: unable to enumerate USB device [ 89.251992][ T5739] syz_tun (unregistering): left allmulticast mode [ 89.252015][ T5739] syz_tun (unregistering): left promiscuous mode [ 89.252052][ T5739] bridge0: port 3(syz_tun) entered disabled state [ 89.508392][ T5807] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.627902][ T5807] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.675103][ T5807] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.892225][ T5807] bridge_slave_1: left allmulticast mode [ 89.892250][ T5807] bridge_slave_1: left promiscuous mode [ 89.892374][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.897805][ T5807] bridge_slave_0: left allmulticast mode [ 89.897828][ T5807] bridge_slave_0: left promiscuous mode [ 89.897933][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.985108][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.997764][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.998905][ T5807] bond0 (unregistering): Released all slaves [ 90.301115][ T5807] hsr_slave_0: left promiscuous mode [ 90.301516][ T5807] hsr_slave_1: left promiscuous mode [ 90.301934][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.301948][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.302601][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.302617][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.305688][ T5807] veth1_macvtap: left promiscuous mode [ 90.305713][ T5807] veth0_macvtap: left promiscuous mode [ 90.305760][ T5807] veth1_vlan: left promiscuous mode [ 90.305802][ T5807] veth0_vlan: left promiscuous mode [ 90.553936][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 90.579831][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 90.931023][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.115162][ T5807] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.188971][ T5807] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.263737][ T5807] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.315839][ T5807] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.404108][ T5807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.467417][ T5807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.518976][ T5807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.604063][ T5807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.664717][ T5807] bridge_slave_1: left allmulticast mode [ 91.664738][ T5807] bridge_slave_1: left promiscuous mode [ 91.664881][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.682936][ T5807] bridge_slave_1: left allmulticast mode [ 91.682958][ T5807] bridge_slave_1: left promiscuous mode [ 91.683076][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.684894][ T5807] bridge_slave_0: left allmulticast mode [ 91.684913][ T5807] bridge_slave_0: left promiscuous mode [ 91.685006][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.780109][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.781795][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.783935][ T5807] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 91.786479][ T5807] bond0 (unregistering): Released all slaves [ 91.831464][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.833225][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.834285][ T5807] bond0 (unregistering): Released all slaves [ 92.446141][ T5807] hsr_slave_0: left promiscuous mode [ 92.446742][ T5807] hsr_slave_1: left promiscuous mode [ 92.447076][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.447090][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.447758][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.447771][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.485049][ T5807] hsr_slave_0: left promiscuous mode [ 92.486390][ T5807] hsr_slave_1: left promiscuous mode [ 92.486793][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.486807][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.488047][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.488064][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.495581][ T5807] veth1_macvtap: left promiscuous mode [ 92.495605][ T5807] veth0_macvtap: left promiscuous mode [ 92.495649][ T5807] veth1_vlan: left promiscuous mode [ 92.495680][ T5807] veth0_vlan: left promiscuous mode [ 92.507961][ T5807] veth1_macvtap: left promiscuous mode [ 92.507988][ T5807] veth0_macvtap: left promiscuous mode [ 92.508046][ T5807] veth1_vlan: left promiscuous mode [ 92.508080][ T5807] veth0_vlan: left promiscuous mode [ 92.730527][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 92.736348][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 92.857169][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 92.872791][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 93.014528][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout