last executing test programs: 3m55.584685655s ago: executing program 1 (id=382): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x9000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48830}, 0x0) sendto$packet(r0, &(0x7f0000000000)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3m55.34921042s ago: executing program 1 (id=387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m54.646184223s ago: executing program 1 (id=392): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x2, 0x201, 0x6, 0xd, 0x5, 0x7, 0x3}, 0x20) 3m54.443817152s ago: executing program 1 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m54.071338482s ago: executing program 1 (id=399): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m52.937820624s ago: executing program 1 (id=407): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 3m52.40833391s ago: executing program 32 (id=407): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 3m45.149779585s ago: executing program 2 (id=428): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m45.005504395s ago: executing program 2 (id=429): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 3m44.844168896s ago: executing program 2 (id=431): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x83a3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xfffffffe}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42400, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 3m43.540780016s ago: executing program 2 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 3m43.304740668s ago: executing program 2 (id=435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x2c, 0x0, @opaque="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"}}}, 0x4c) 3m42.125582528s ago: executing program 2 (id=438): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="d3b6961c8b1591fa869ad7a2", 0xc}], 0x7}}], 0x1, 0x4008cd0) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000540)=0x40d, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 3m41.916903751s ago: executing program 33 (id=438): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="d3b6961c8b1591fa869ad7a2", 0xc}], 0x7}}], 0x1, 0x4008cd0) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000540)=0x40d, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 2m37.159031264s ago: executing program 5 (id=876): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) 2m36.805186484s ago: executing program 5 (id=880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) 2m36.627994145s ago: executing program 5 (id=882): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 2m36.343422587s ago: executing program 5 (id=885): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 2m36.170133098s ago: executing program 5 (id=888): syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2m34.944183226s ago: executing program 5 (id=895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000544000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x34b1301989002819, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001240)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x57}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m34.706230934s ago: executing program 34 (id=895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000544000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x34b1301989002819, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001240)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x57}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m12.603785137s ago: executing program 6 (id=1024): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) close(0x3) open_by_handle_at(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000400)='cifs\x00', 0x0, 0x0) 2m12.41574452s ago: executing program 6 (id=1025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x4, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x24048810) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m12.091644682s ago: executing program 6 (id=1026): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x21}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.836322487s ago: executing program 6 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) 2m11.671582227s ago: executing program 6 (id=1030): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x6b12, 0x20, 0x2, 0x213, 0x0, r1}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce99, 0x2000, 0x3, 0x316, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd09, 0x4, 0x1, 0x3ca, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9995, 0x400, 0x2, 0x33e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11de, 0x0, 0x2, 0xf6, 0x0, r1}}], 0x4, &(0x7f0000001980)={0x2e, 0x40, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xe8b}, 0x0, r6, '\x00', {0x0, 0x88e, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(r8, r7, 0x0, 0x0, 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r8, 0xc0107511, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) 2m10.912602452s ago: executing program 6 (id=1035): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0xf3, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) 2m10.602518243s ago: executing program 35 (id=1035): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0xf3, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) 1m58.692714441s ago: executing program 0 (id=1131): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1m57.792253872s ago: executing program 0 (id=1143): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xdc, 0x0, 0x0, 0x1000, 0x81, 0x0, 0x0, 0x20}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0x35a, 0x0, r0}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x3, 0x7e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20007682, 0x20000, 0xe, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbea7, 0x8, 0x2, 0x4b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6886, 0x5200, 0x2, 0x821b, 0x0, r0}}], 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1m57.763968459s ago: executing program 0 (id=1144): connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r1 = socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1m57.68621052s ago: executing program 0 (id=1147): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f0000001080)='./sys_link\x00', &(0x7f0000001040)='fusectl\x00', 0x11, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 1m57.638646493s ago: executing program 0 (id=1150): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) 1m56.914530337s ago: executing program 0 (id=1163): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x2, 0x0, &(0x7f0000000100)="469d", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x6e}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m56.905322313s ago: executing program 36 (id=1163): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x2, 0x0, &(0x7f0000000100)="469d", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x6e}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m33.112754072s ago: executing program 8 (id=1491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000003840)=[{0x0}, {&(0x7f00000027c0)="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", 0x204}], 0x2}}], 0x1, 0x80) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 1m33.062681015s ago: executing program 8 (id=1492): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000540)={0x50, 0x0, r1, {0x7, 0x1f, 0x400001, 0x400208, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x1}) 1m31.616457047s ago: executing program 7 (id=1517): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61145000000000001d430000000000007a0a00fe00581c1f61148d0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m31.372281958s ago: executing program 7 (id=1518): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m31.169457312s ago: executing program 7 (id=1523): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r8, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 1m30.9228614s ago: executing program 3 (id=1531): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202000200"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x409}}, {0x6, &(0x7f0000000380)=@string={0x6, 0x3, 'syz\x00'}}, {0x6, &(0x7f00000003c0)=@string={0x6, 0x3, 'syz\x00'}}, {0x6, &(0x7f0000000440)=@string={0x6, 0x3, 'syz\x00'}}, {0x6, &(0x7f0000000480)=@string={0x6, 0x3, 'syz\x00'}}, {0x6, &(0x7f00000004c0)=@string={0x6, 0x3, 'syz\x00'}}, {0x6, &(0x7f0000000540)=@string={0x6, 0x3, 'syz\x00'}}, {0x6, &(0x7f0000000580)=@string={0x6, 0x3, 'syz\x00'}}, {0x6, &(0x7f00000005c0)=@string={0x6, 0x3, 'syz\x00'}}]}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/100, 0x60) r1 = socket$inet(0x2, 0x1, 0x0) ioctl(r1, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) ioctl(r1, 0x8914, &(0x7f0000000500)='can0\x00'/40) 1m30.673068686s ago: executing program 4 (id=1534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffc4653600}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) 1m30.582794096s ago: executing program 4 (id=1535): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000540)="10fb478f8e4990cd962993ad8df206d2", 0x10}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m29.911211228s ago: executing program 7 (id=1536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 1m29.910875229s ago: executing program 8 (id=1537): setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 1m28.561006492s ago: executing program 4 (id=1538): ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0x404, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x4, 0x4, 0x1}], 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000540)=[@code={0xa, 0x5a, {"420f23ecf047804f0000f38aaca8080000000f32c4a2d93a748d053e41c32e41a766420f38823bc441b1689c1b0000000048b885000000000000000f23d80f21f835800000000f23f8"}}, @uexit={0x0, 0x18, 0x800}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x40000000}}], 0xba}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x404, 0xffffffffefffff14, 0x3, 0x100000000, 0x7, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m26.820004855s ago: executing program 8 (id=1546): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000008c0)=@gcm_128={{0x304}, "405bf3aa407a3d36", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f00000000c0)="58b1", 0x2, 0xc000, 0x0, 0x0) close(r0) 1m26.763023874s ago: executing program 4 (id=1539): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000090) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m26.762730258s ago: executing program 7 (id=1540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) 1m26.762502925s ago: executing program 3 (id=1541): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) dup(0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000480)={@random="1e4cc1cbc448", @local, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x3, 0x34, 0x68, 0x0, 0x5, 0x6, 0x0, @multicast1, @empty}, @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x1, 0x8, 0x2, 0x2, 0x32b, 0x0, 0x1, 0x9, 0x5, 0x3, 0x7, 0x279, 0x3, 0x4e21, 0x4e23}, 0x4, 0x2}}}}}}}, 0x0) 1m26.762222598s ago: executing program 8 (id=1542): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb8, 0x67, 0x0, 0x1, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0xe, 0x0, 0xe}]}}, {0x4e20, 0x4e21, 0xa0, 0x0, @wg=@data={0x4, 0x202, 0x1ff, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e6f1a06cf03a87aa2d2d74199bcafa0dc84a8ea112fba"}}}}, 0xc6) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="400104", @ANYRESOCT], 0x14) 1m26.728464982s ago: executing program 3 (id=1543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, 0x1c) 1m26.722111403s ago: executing program 7 (id=1544): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r1, 0x0) 1m26.721165861s ago: executing program 4 (id=1545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m23.802643948s ago: executing program 3 (id=1547): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040300880000001010203010902200001010080320904000002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyUSB0\x00', 0x2, 0x0) 1m17.732302936s ago: executing program 8 (id=1548): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m17.728478679s ago: executing program 3 (id=1549): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x8, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x40005, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x9, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x400000016d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 53.540252977s ago: executing program 4 (id=1550): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) 53.539923427s ago: executing program 3 (id=1551): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffffff7d, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x7, 0x2}, {0xa, 0x10}, {0x6, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500"], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 53.465529606s ago: executing program 37 (id=1548): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 0s ago: executing program 38 (id=1550): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) kernel console output (not intermixed with test programs): vd[7710]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 228.174766][ T7799] tipc: Disabling bearer [ 228.631743][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 228.674714][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 228.680967][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.681154][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.681185][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.723738][ T7145] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.828749][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 228.828768][ T42] audit: type=1400 audit(1785747562.860:597): avc: denied { mount } for pid=7828 comm="syz.4.645" name="/" dev="autofs" ino=19744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 228.875441][ T42] audit: type=1400 audit(1785747562.880:598): avc: denied { read } for pid=7828 comm="syz.4.645" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.932134][ T42] audit: type=1400 audit(1785747562.880:599): avc: denied { open } for pid=7828 comm="syz.4.645" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.950023][ T42] audit: type=1400 audit(1785747562.880:600): avc: denied { ioctl } for pid=7828 comm="syz.4.645" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.983708][ T42] audit: type=1400 audit(1785747562.920:601): avc: denied { unmount } for pid=6948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 229.116804][ T7838] overlayfs: statfs failed on './file0' [ 229.785019][ T42] audit: type=1400 audit(1785747563.810:602): avc: denied { mounton } for pid=7853 comm="syz.0.653" path="/file0" dev="ramfs" ino=19058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 229.812185][ T7854] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 229.875652][ T7854] overlayfs: failed to set xattr on upper [ 229.888105][ T42] audit: type=1400 audit(1785747563.910:603): avc: denied { read } for pid=7855 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.896063][ T7854] overlayfs: ...falling back to redirect_dir=nofollow. [ 229.896101][ T7854] overlayfs: ...falling back to metacopy=off. [ 229.896109][ T7854] overlayfs: ...falling back to index=off. [ 229.896117][ T7854] overlayfs: ...falling back to uuid=null. [ 230.077422][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 230.081381][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 230.097941][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 230.110492][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 230.115291][ T5848] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 230.325250][ T5848] usb 10-1: Using ep0 maxpacket: 16 [ 230.366805][ T5848] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 230.370483][ T5848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.402474][ T5848] usb 10-1: Product: syz [ 230.407179][ T5848] usb 10-1: Manufacturer: syz [ 230.417264][ T5848] usb 10-1: SerialNumber: syz [ 230.451365][ T5848] usb 10-1: config 0 descriptor?? [ 230.466570][ T7848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.934854][ T5848] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 230.985991][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.994719][ T5848] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 230.998596][ T5848] usb 10-1: media controller created [ 231.023933][ T7888] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 231.055660][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.169575][ T5848] zl10353_read_register: readreg error (reg=127, ret==0) [ 231.172867][ T5848] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 231.179340][ T5848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 231.508774][ T9] IPVS: starting estimator thread 0... [ 231.610852][ T7899] IPVS: using max 25 ests per chain, 60000 per kthread [ 231.759051][ T5918] usb 10-1: USB disconnect, device number 4 [ 231.849861][ T5848] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 231.918206][ T5918] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 232.041215][ T5848] usb 9-1: Using ep0 maxpacket: 32 [ 232.045254][ T5848] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 232.054547][ T5848] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 232.062134][ T5848] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 232.072287][ T5848] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.079355][ T5848] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 232.085997][ T5848] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 232.094806][ T5848] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 232.102849][ T5848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.110785][ T5848] usb 9-1: config 0 descriptor?? [ 232.391792][ T5848] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 232.423486][ T5848] usb 9-1: USB disconnect, device number 3 [ 232.459183][ T5848] usblp0: removed [ 232.538083][ T42] audit: type=1400 audit(1785747566.570:604): avc: denied { write } for pid=7928 comm="syz.3.684" name="functions" dev="configfs" ino=9005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 232.568370][ T42] audit: type=1400 audit(1785747566.570:605): avc: denied { write } for pid=7928 comm="syz.3.684" name="target" dev="configfs" ino=4510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 232.601784][ T42] audit: type=1400 audit(1785747566.630:606): avc: denied { write } for pid=7928 comm="syz.3.684" name="usb_gadget" dev="configfs" ino=19898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 232.923344][ T5848] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 233.054237][ T7946] i2c i2c-0: delete_device: Can't find device in list [ 233.055513][ T7944] usb3503 0-0008: unknown mode is requested [ 233.059909][ T7944] usb3503 0-0008: usb3503_probe: probed in standby mode [ 233.077806][ T7944] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 233.150430][ T5848] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 233.155911][ T5848] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 233.161712][ T5848] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 233.188780][ T5848] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.219664][ T5848] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 233.274404][ T5848] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 233.336989][ T5848] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 233.344676][ T5848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.373165][ T5848] usb 9-1: config 0 descriptor?? [ 233.387520][ T7905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.597300][ T7955] syzkaller1: entered promiscuous mode [ 233.599620][ T5848] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 233.618503][ T7955] syzkaller1: entered allmulticast mode [ 234.011512][ C2] usblp0: nonzero read bulk status received: -71 [ 234.146509][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.692'. [ 234.262852][ T5918] usb 9-1: USB disconnect, device number 4 [ 234.434908][ T5918] usblp0: removed [ 234.587905][ T5873] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 234.767311][ T5873] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 234.789705][ T5873] usb 10-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 234.833401][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.862656][ T7991] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 234.904938][ T5873] opticon 10-1:1.0: opticon converter detected [ 234.933139][ T5873] usb 10-1: opticon converter now attached to ttyUSB0 [ 235.468787][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.701'. [ 235.536097][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 235.536132][ T42] audit: type=1400 audit(1785747569.560:614): avc: denied { bpf } for pid=8014 comm="syz.0.702" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.555580][ T42] audit: type=1400 audit(1785747569.580:615): avc: denied { perfmon } for pid=8014 comm="syz.0.702" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.630509][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 235.679075][ T8017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8017 comm=syz.4.703 [ 235.694026][ T5873] usb 10-1: USB disconnect, device number 5 [ 235.695107][ T8017] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 235.702698][ T8017] netlink: 'syz.4.703': attribute type 7 has an invalid length. [ 235.710942][ T8017] netlink: 240 bytes leftover after parsing attributes in process `syz.4.703'. [ 235.742857][ T5873] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 235.759643][ T5873] opticon 10-1:1.0: device disconnected [ 235.815567][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 235.821831][ T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 235.824705][ T10] usb 8-1: config 0 has no interface number 0 [ 235.827353][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.836650][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 235.863927][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.904251][ T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.908508][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 235.912015][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.938567][ T10] usb 8-1: config 0 descriptor?? [ 235.959172][ T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 235.973774][ T5747] bridge0: entered promiscuous mode [ 236.089457][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.706'. [ 236.094154][ T8025] netlink: 'syz.4.706': attribute type 7 has an invalid length. [ 236.107565][ T8025] netlink: 'syz.4.706': attribute type 8 has an invalid length. [ 236.112079][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 236.297791][ T8027] syzkaller1: entered promiscuous mode [ 236.300371][ T8027] syzkaller1: entered allmulticast mode [ 236.779481][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.5.709'. [ 237.433024][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.717'. [ 237.554492][ T8057] gadgetfs: bound to dummy_udc driver [ 237.605369][ T42] audit: type=1400 audit(1785747571.630:616): avc: denied { mounton } for pid=8056 comm="syz.4.718" path="/63/gadget/ep1in-bulk" dev="gadgetfs" ino=20983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=file permissive=1 [ 237.659663][ T8062] xt_hashlimit: size too large, truncated to 1048576 [ 237.872701][ T5747] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 237.877767][ C1] gadgetfs: connected [ 237.888611][ T5747] gadgetfs: disconnected [ 238.051547][ T8068] loop5: detected capacity change from 0 to 2640 [ 238.087973][ T7008] buffer_io_error: 13 callbacks suppressed [ 238.088007][ T7008] Buffer I/O error on dev loop5, logical block 0, async page read [ 238.093306][ C1] gadgetfs: connected [ 238.097275][ T7008] Buffer I/O error on dev loop5, logical block 0, async page read [ 238.119994][ T5747] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 238.127708][ T5747] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 238.136748][ T8068] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 238.164041][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.166830][ C1] gadgetfs: configuration #1 [ 238.200064][ T8068] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 238.203917][ T8068] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 238.208118][ T8068] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 238.224586][ T8068] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 238.233906][ T8068] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 238.242422][ T9] usb 8-1: USB disconnect, device number 8 [ 238.249962][ T9] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 238.266829][ T8068] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 238.351927][ T8068] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 238.372461][ T8057] gadgetfs: suspended from state 3 [ 238.392448][ T5847] usb 6-1: USB disconnect, device number 6 [ 238.405427][ T8057] gadgetfs: disconnected [ 238.553321][ T42] audit: type=1400 audit(1785747572.580:617): avc: denied { mounton } for pid=8072 comm="syz.4.724" path="/proc/161/task" dev="proc" ino=18212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 239.013358][ T42] audit: type=1400 audit(1785747573.040:618): avc: denied { read write } for pid=8081 comm="syz.0.728" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 239.090469][ T42] audit: type=1400 audit(1785747573.070:619): avc: denied { open } for pid=8081 comm="syz.0.728" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 239.446719][ T5747] IPVS: starting estimator thread 0... [ 239.581000][ T8094] IPVS: using max 27 ests per chain, 64800 per kthread [ 239.708053][ T42] audit: type=1400 audit(1785747573.740:620): avc: denied { ioctl } for pid=8098 comm="syz.4.735" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.733112][ T42] audit: type=1400 audit(1785747573.740:621): avc: denied { map } for pid=8098 comm="syz.4.735" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.797412][ T42] audit: type=1400 audit(1785747573.740:622): avc: denied { execute } for pid=8098 comm="syz.4.735" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 240.209862][ T8114] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 240.255261][ T5848] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 240.472165][ T5848] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.476436][ T5848] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 240.480504][ T5848] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.484351][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.525886][ T8110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 240.544198][ T5848] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.785722][ T42] audit: type=1400 audit(1785747574.800:623): avc: denied { read } for pid=8125 comm="syz.4.746" path="socket:[20078]" dev="sockfs" ino=20078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.814406][ T42] audit: type=1400 audit(1785747574.800:624): avc: denied { append } for pid=8109 comm="syz.3.739" name="midi3" dev="devtmpfs" ino=3055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.903053][ T5848] usb 8-1: USB disconnect, device number 9 [ 241.384307][ T42] audit: type=1800 audit(1785747575.410:625): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.751" name="file" dev="configfs" ino=20154 res=0 errno=0 [ 241.384780][ T8141] mass_storage.0/lun.0: file too small: file0 [ 242.659249][ T42] audit: type=1400 audit(1785747576.690:626): avc: denied { write } for pid=8166 comm="syz.0.760" name="functions" dev="configfs" ino=9005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.680981][ T42] audit: type=1800 audit(1785747576.690:627): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.760" name="p_srate" dev="configfs" ino=18259 res=0 errno=0 [ 243.635441][ T5747] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 243.663510][ T42] audit: type=1400 audit(1785747577.690:628): avc: denied { read } for pid=8190 comm="syz.4.771" lport=35943 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 243.794636][ T5747] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.801690][ T5747] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 243.810146][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.897151][ T42] audit: type=1400 audit(1785747577.930:629): avc: denied { watch } for pid=8198 comm="syz.3.775" path="/203/file0" dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 243.941910][ T5747] as10x_usb: device has been detected [ 243.998536][ T5747] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 244.099503][ T5747] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 244.175258][ T8201] anx7411 0-002c: fail to probe typec property. [ 244.191158][ T5747] as10x_usb: error during firmware upload part1 [ 244.228503][ T8201] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 244.244137][ T5747] Registered device Abilis Systems DVB-Titan [ 244.330014][ T42] audit: type=1400 audit(1785747578.360:630): avc: denied { mmap_zero } for pid=8206 comm="syz.5.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 244.542167][ T42] audit: type=1400 audit(1785747578.570:631): avc: denied { map } for pid=8213 comm="syz.5.780" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 244.554265][ T8214] binder: BINDER_SET_CONTEXT_MGR already set [ 244.576175][ T8214] binder: 8213:8214 ioctl 4018620d 200000000100 returned -16 [ 244.592670][ T42] audit: type=1400 audit(1785747578.580:632): avc: denied { set_context_mgr } for pid=8213 comm="syz.5.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 244.682783][ T8220] netlink: 20 bytes leftover after parsing attributes in process `syz.5.782'. [ 244.957347][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.5.782'. [ 244.985628][ T8222] nbd: nbd64 already in use [ 244.989649][ T8227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8227 comm=syz.3.784 [ 244.998479][ T8227] netlink: 'syz.3.784': attribute type 1 has an invalid length. [ 245.228855][ T8238] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 245.254712][ C3] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 245.285585][ T8238] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 245.292657][ C3] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 245.541347][ T8232] bond1: (slave bridge1): making interface the new active one [ 245.571262][ T7008] udevd[7008]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 245.808132][ T8232] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 245.857897][ T5747] usb 5-1: USB disconnect, device number 7 [ 246.040423][ T5747] Unregistered device Abilis Systems DVB-Titan [ 246.056831][ T5747] as10x_usb: device has been disconnected [ 246.302776][ T42] audit: type=1400 audit(1785747580.330:633): avc: denied { write } for pid=8256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.427982][ T42] audit: type=1400 audit(1785747580.450:634): avc: denied { write } for pid=8262 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.660015][ T42] audit: type=1400 audit(1785747580.690:635): avc: denied { write } for pid=8268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.922242][ T42] audit: type=1400 audit(1785747580.940:636): avc: denied { write } for pid=8283 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.972450][ T8282] Illegal XDP return value 4294967294 on prog (id 50) dev N/A, expect packet loss! [ 249.358546][ T5768] Bluetooth: hci1: command 0x0406 tx timeout [ 249.363851][ T5768] Bluetooth: hci3: command 0x0406 tx timeout [ 249.885373][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 250.055691][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 250.059818][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.087729][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.096013][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 250.116398][ T25] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 250.121089][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.140415][ T25] usb 5-1: config 0 descriptor?? [ 250.326744][ T5760] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 250.525670][ T5760] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.547351][ T5760] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.557573][ T5760] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 250.573558][ T5760] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.602510][ T5760] usb 9-1: config 0 descriptor?? [ 250.681639][ T25] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0003/input/input10 [ 250.924457][ T5760] usbhid 9-1:0.0: can't add hid device: -71 [ 250.950323][ T25] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0003/input/input11 [ 250.976345][ T5760] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 251.039114][ T5760] usb 9-1: USB disconnect, device number 6 [ 251.251306][ T25] kye 0003:0458:5011.0003: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 252.268542][ T42] audit: type=1400 audit(1785747586.300:637): avc: denied { write } for pid=8397 comm="syz.5.831" name="/" dev="9p" ino=78395449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.312234][ T42] audit: type=1800 audit(1785747586.330:638): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.831" name="file1" dev="9p" ino=78395453 res=0 errno=0 [ 252.370869][ T8400] syzkaller1: entered promiscuous mode [ 252.378641][ T8400] syzkaller1: entered allmulticast mode [ 252.882911][ T42] audit: type=1400 audit(1785747586.910:639): avc: denied { read } for pid=8406 comm="syz.0.835" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 252.912680][ T42] audit: type=1400 audit(1785747586.910:640): avc: denied { open } for pid=8406 comm="syz.0.835" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 252.947189][ T5848] usb 5-1: USB disconnect, device number 8 [ 253.864786][ T8428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.843'. [ 254.120410][ T42] audit: type=1400 audit(1785747588.130:641): avc: denied { remount } for pid=8435 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 254.302305][ T5760] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 254.516740][ T5760] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 254.567471][ T42] audit: type=1326 audit(1785747588.600:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.851" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ec59e019 code=0x7ffc0000 [ 254.594181][ T42] audit: type=1326 audit(1785747588.600:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.851" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ec59e019 code=0x7ffc0000 [ 254.595260][ T5760] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.598284][ T5861] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 254.619701][ T42] audit: type=1326 audit(1785747588.600:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.851" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ec59e019 code=0x7ffc0000 [ 254.685335][ T5760] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.690968][ T5760] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 254.695307][ T42] audit: type=1326 audit(1785747588.600:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.851" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe5ec59e019 code=0x7ffc0000 [ 254.731063][ T5760] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 254.780091][ T42] audit: type=1326 audit(1785747588.640:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.851" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ec59e019 code=0x7ffc0000 [ 254.785849][ T5760] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 254.832545][ T5861] usb 9-1: Using ep0 maxpacket: 8 [ 254.867650][ T5760] usb 10-1: Manufacturer: syz [ 254.871076][ T5861] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 254.906788][ T5760] usb 10-1: config 0 descriptor?? [ 254.911806][ T5861] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 254.922588][ T5861] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.937193][ T5861] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 254.948460][ T5861] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 254.965260][ T5861] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.970224][ T5861] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.002367][ T5861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.310526][ T5861] usb 9-1: usb_control_msg returned -71 [ 255.312690][ T5861] usbtmc 9-1:16.0: can't read capabilities [ 255.343483][ T5861] usb 9-1: USB disconnect, device number 7 [ 255.347288][ T5760] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 255.640883][ T5760] appleir 0003:05AC:8243.0004: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 255.779756][ T5760] usb 10-1: USB disconnect, device number 6 [ 255.936873][ T8462] fido_id[8462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/report_descriptor': No such file or directory [ 256.299753][ T5872] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 256.461849][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 256.504009][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.509299][ T5872] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 256.523512][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.529077][ T5872] usb 8-1: config 0 descriptor?? [ 256.842141][ T5872] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 257.025024][ T5872] usb 8-1: USB disconnect, device number 10 [ 257.940597][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 257.940614][ T42] audit: type=1400 audit(1785747591.970:671): avc: denied { create } for pid=8506 comm="syz.3.872" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 257.995606][ T42] audit: type=1400 audit(1785747592.020:672): avc: denied { read write } for pid=8506 comm="syz.3.872" name="file0" dev="tmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 258.016291][ T42] audit: type=1400 audit(1785747592.030:673): avc: denied { open } for pid=8506 comm="syz.3.872" path="/231/file0" dev="tmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 258.028928][ T42] audit: type=1400 audit(1785747592.060:674): avc: denied { ioctl } for pid=8506 comm="syz.3.872" path="/231/file0" dev="tmpfs" ino=1267 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 258.074316][ T42] audit: type=1400 audit(1785747592.100:675): avc: denied { write } for pid=8511 comm="syz.5.876" name="functions" dev="configfs" ino=9005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.109952][ T42] audit: type=1400 audit(1785747592.110:676): avc: denied { write } for pid=8511 comm="syz.5.876" name="c.1" dev="configfs" ino=9016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.146121][ T42] audit: type=1400 audit(1785747592.110:677): avc: denied { write } for pid=8511 comm="syz.5.876" name="c.1" dev="configfs" ino=9016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.148297][ T8512] udc dummy_udc.0: failed to start g1: -19 [ 258.207939][ T8512] UDC core: g1: couldn't find an available UDC or it's busy [ 258.566831][ T1359] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 258.736319][ T1359] usb 8-1: Using ep0 maxpacket: 8 [ 258.757673][ T1359] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.790476][ T1359] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.802300][ T1359] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.810642][ T1359] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.826924][ T1359] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.835739][ T1359] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.093847][ T1359] usb 8-1: GET_CAPABILITIES returned 0 [ 259.127596][ T1359] usbtmc 8-1:16.0: can't read capabilities [ 259.160326][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 259.339810][ T1049] usb 8-1: USB disconnect, device number 11 [ 260.327412][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.366231][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.439027][ T8557] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 260.441715][ T8557] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 260.444988][ T8557] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 260.450115][ T8557] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 260.454334][ T8557] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 260.459600][ T8557] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 260.464562][ T8557] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 260.469518][ T8557] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 260.477150][ T8557] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 260.480705][ T8557] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 260.723231][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.791464][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.876116][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.895525][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.905081][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.917853][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.945839][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.485326][ T1359] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 261.517374][ T42] audit: type=1400 audit(1785747595.550:678): avc: denied { connect } for pid=8576 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 261.647222][ T42] audit: type=1400 audit(1785747595.550:679): avc: denied { open } for pid=8575 comm="syz.4.903" path="/dev/ptyqc" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 261.728267][ T1359] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 261.744812][ T1359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.760472][ T1359] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.796002][ T1359] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 261.801111][ T1359] usb 5-1: Product: syz [ 261.803029][ T1359] usb 5-1: Manufacturer: syz [ 261.805058][ T1359] usb 5-1: SerialNumber: syz [ 261.811692][ T1359] usb 5-1: config 0 descriptor?? [ 261.822981][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.850659][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.891226][ T8571] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 261.931483][ T1359] usb 5-1: selecting invalid altsetting 0 [ 262.219885][ T8571] usb 5-1: BOGUS urb xfer, pipe 0 != type 1 [ 262.294265][ T5847] usb 5-1: USB disconnect, device number 9 [ 262.403441][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.456979][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.464993][ T7033] udevd[7033]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.106353][ T5757] Bluetooth: hci0: command tx timeout [ 263.135326][ T42] audit: type=1400 audit(1785747597.120:680): avc: denied { read write } for pid=8604 comm="syz.3.912" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 263.144078][ T42] audit: type=1400 audit(1785747597.120:681): avc: denied { open } for pid=8604 comm="syz.3.912" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 263.211717][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 263.271968][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 263.338951][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 263.379839][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 263.437790][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 263.443237][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 263.450834][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 263.461533][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 263.473867][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 263.478693][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 263.571621][ T1049] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 263.643131][ T5847] hid-generic 0004:FFFFFFFF:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 263.781482][ T42] audit: type=1400 audit(1785747597.790:682): avc: denied { write } for pid=8617 comm="syz.0.915" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 263.821930][ T1049] usb 8-1: config 0 has no interfaces? [ 263.857106][ T1049] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 263.860898][ T1049] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.924819][ T1049] usb 8-1: config 0 descriptor?? [ 264.065819][ T42] audit: type=1400 audit(1785747598.080:683): avc: denied { write } for pid=8619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.187791][ T12] bridge_slave_1: left allmulticast mode [ 264.217910][ T12] bridge_slave_1: left promiscuous mode [ 264.221936][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.263494][ T42] audit: type=1400 audit(1785747598.290:684): avc: denied { write } for pid=8625 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.278856][ T12] bridge_slave_0: left allmulticast mode [ 264.308453][ T12] bridge_slave_0: left promiscuous mode [ 264.311360][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.966345][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.185943][ T5757] Bluetooth: hci0: command tx timeout [ 265.191576][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.239258][ T42] audit: type=1400 audit(1785747599.270:685): avc: denied { write } for pid=8635 comm="syz.0.917" name="/" dev="9p" ino=78395449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.241315][ T12] bond0 (unregistering): Released all slaves [ 265.263683][ T42] audit: type=1400 audit(1785747599.290:686): avc: denied { write } for pid=8635 comm="syz.0.917" name="/" dev="9p" ino=78395449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.326983][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.337071][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.353289][ T8565] bridge_slave_0: entered allmulticast mode [ 265.373631][ T8565] bridge_slave_0: entered promiscuous mode [ 265.382777][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 265.437395][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.518548][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.526361][ T8565] bridge_slave_1: entered allmulticast mode [ 265.539732][ T8565] bridge_slave_1: entered promiscuous mode [ 265.567683][ T12] : left promiscuous mode [ 265.715463][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.736635][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.797331][ T8565] team0: Port device team_slave_0 added [ 265.820137][ T8565] team0: Port device team_slave_1 added [ 265.965020][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.985745][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.987328][ T42] audit: type=1400 audit(1785747600.020:687): avc: denied { write } for pid=8643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.031350][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.056294][ T12] tipc: Left network mode [ 266.059540][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.147206][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.167852][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.190462][ T42] audit: type=1400 audit(1785747600.080:688): avc: denied { bind } for pid=8646 comm="syz.0.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.293068][ T42] audit: type=1400 audit(1785747600.310:689): avc: denied { write } for pid=8649 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.338213][ T5847] usb 8-1: USB disconnect, device number 12 [ 266.427161][ T8565] hsr_slave_0: entered promiscuous mode [ 266.462940][ T8565] hsr_slave_1: entered promiscuous mode [ 266.491033][ T8565] debugfs: 'hsr0' already exists in 'hsr' [ 266.515714][ T8565] Cannot create hsr debugfs directory [ 266.520723][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 267.285061][ T5757] Bluetooth: hci0: command tx timeout [ 267.615523][ T8682] evm: overlay not supported [ 267.805391][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.824809][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.893111][ T8689] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 267.960058][ T8689] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 268.018560][ T12] hsr_slave_0: left promiscuous mode [ 268.072227][ T12] hsr_slave_1: left promiscuous mode [ 268.083930][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.093706][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.137860][ T8694] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 268.144166][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.144195][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.170146][ T8694] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 268.186607][ T8694] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 268.283420][ T12] veth1_macvtap: left promiscuous mode [ 268.286106][ T12] veth0_macvtap: left promiscuous mode [ 268.292542][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 268.292559][ T42] audit: type=1400 audit(1785747602.310:693): avc: denied { write } for pid=8695 comm="syz.4.936" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 268.305990][ T12] veth1_vlan: left promiscuous mode [ 268.306060][ T12] veth0_vlan: left promiscuous mode [ 269.324766][ T12] team0 (unregistering): Port device team_slave_1 removed [ 269.358641][ T5757] Bluetooth: hci0: command tx timeout [ 269.375099][ T12] team0 (unregistering): Port device team_slave_0 removed [ 269.808854][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 270.285340][ T5847] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 270.287795][ T42] audit: type=1400 audit(1785747604.310:694): avc: denied { write } for pid=8723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.342176][ T8729] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 270.356735][ T8729] netlink: 'syz.3.945': attribute type 4 has an invalid length. [ 270.392409][ T8729] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.945'. [ 270.400248][ T8729] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 270.412148][ T42] audit: type=1400 audit(1785747604.320:695): avc: denied { read write } for pid=8722 comm="syz.0.944" name="control" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 270.414670][ T8729] netlink: 'syz.3.945': attribute type 4 has an invalid length. [ 270.467660][ T42] audit: type=1400 audit(1785747604.320:696): avc: denied { open } for pid=8722 comm="syz.0.944" path="/dev/mapper/control" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 270.486020][ T42] audit: type=1400 audit(1785747604.510:697): avc: denied { write } for pid=8730 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.546197][ T8729] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.945'. [ 270.566733][ T5847] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.587615][ T8565] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 270.597037][ T5847] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.661096][ T5847] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.676793][ T5847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.711549][ T8720] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 270.736618][ T8565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 270.750740][ T5847] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.769654][ T8565] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 270.886120][ T42] audit: type=1400 audit(1785747604.910:698): avc: denied { read } for pid=8736 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.928154][ T8565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 270.936072][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 270.945658][ T8565] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 270.991949][ T8565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.129264][ T8742] bond0: entered promiscuous mode [ 271.146673][ T8565] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.161762][ T5847] usb 9-1: USB disconnect, device number 8 [ 271.165767][ T8565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.544255][ T12] IPVS: stop unused estimator thread 0... [ 271.589524][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.685362][ T8565] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.706534][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.709472][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.729332][ T42] audit: type=1800 audit(1785747605.740:699): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.954" name="idVendor" dev="configfs" ino=22498 res=0 errno=0 [ 271.772266][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.788940][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.269460][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 272.422284][ T5847] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 272.477414][ T25] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 272.480828][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.561141][ T25] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 272.597698][ T5847] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 272.603279][ T5847] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 272.613583][ T5847] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 272.619581][ T25] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 272.625366][ T25] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 272.628761][ T5847] usb 9-1: New USB device found, idVendor=15a4, idProduct=9020, bcdDevice= 1.00 [ 272.629375][ T42] audit: type=1400 audit(1785747606.650:700): avc: denied { firmware_load } for pid=25 comm="kworker/2:0" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 272.686304][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.691984][ T5847] usb 9-1: Product: syz [ 272.694229][ T5847] usb 9-1: Manufacturer: syz [ 272.699153][ T5847] usb 9-1: SerialNumber: syz [ 272.750953][ T8777] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 272.784302][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.788696][ T8777] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 272.804322][ T8777] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 272.812455][ T5847] af9005: boot packet bulk message failed: -71 (252/0) [ 272.816770][ T25] usb 5-1: emi26_load_firmware - request_firmware() failed [ 272.834407][ T5847] dvb-usb: found a 'Afatech DVB-T USB1.1 stick' in cold state, will try to load a firmware [ 272.837570][ T25] usb 5-1: emi26_load_firmware - error loading firmware: error = -12 [ 272.841803][ T5847] usb 9-1: Direct firmware load for af9005.fw failed with error -2 [ 272.856212][ T25] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 272.859174][ T25] usb 5-1: USB disconnect, device number 10 [ 272.902397][ T5847] usb 9-1: Falling back to sysfs fallback for: af9005.fw [ 273.154621][ T5847] dvb-usb: did not find the firmware file 'af9005.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 273.178442][ T5847] dvb_usb_af9005 9-1:1.0: probe with driver dvb_usb_af9005 failed with error -2 [ 273.498318][ T8565] veth0_vlan: entered promiscuous mode [ 273.511750][ T8565] veth1_vlan: entered promiscuous mode [ 273.606791][ T8565] veth0_macvtap: entered promiscuous mode [ 273.623883][ T8565] veth1_macvtap: entered promiscuous mode [ 273.687294][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.745039][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.793373][ T7145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.803756][ T7145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.835481][ T7145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.838898][ T7145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.046194][ T5847] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 274.057321][ T25] usb 9-1: USB disconnect, device number 9 [ 274.167431][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.171103][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.247217][ T5847] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.252451][ T5847] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.258394][ T5847] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.262586][ T5847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.309603][ T8809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.339945][ T5847] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.369125][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.372610][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.461971][ T8812] netlink: 'syz.0.964': attribute type 1 has an invalid length. [ 274.484573][ T8812] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 274.487531][ T42] audit: type=1400 audit(1785747608.520:701): avc: denied { mounton } for pid=8565 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 274.526465][ T8812] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.964'. [ 274.638064][ T5847] usb 8-1: USB disconnect, device number 13 [ 275.184455][ T8822] netlink: 'syz.4.968': attribute type 1 has an invalid length. [ 275.249853][ T8822] bond1: entered promiscuous mode [ 275.263600][ T8822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.328487][ T8822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.350671][ T8822] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 275.373189][ T8822] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 275.414667][ T8822] bond1: (slave ip6gre1): making interface the new active one [ 275.419104][ T8822] ip6gre1: entered promiscuous mode [ 275.424833][ T8822] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 275.884475][ T42] audit: type=1400 audit(1785747609.910:702): avc: denied { watch } for pid=8833 comm="syz.4.972" path="/132/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 276.023273][ T42] audit: type=1400 audit(1785747610.040:703): avc: denied { map } for pid=8837 comm="syz.6.974" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 276.052357][ T42] audit: type=1400 audit(1785747610.040:704): avc: denied { execute } for pid=8837 comm="syz.6.974" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 276.500458][ T8840] "syz.4.975" (8840) uses obsolete ecb(arc4) skcipher [ 276.926300][ T8857] ptrace attach of "/syz-executor exec"[8858] was attempted by "/syz-executor exec"[8857] [ 276.995745][ T42] audit: type=1400 audit(1785747610.990:705): avc: denied { bind } for pid=8859 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 277.040689][ T42] audit: type=1400 audit(1785747611.070:706): avc: denied { setopt } for pid=8859 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 277.125704][ T8865] syz_tun: entered allmulticast mode [ 277.309712][ T8868] netlink: 'syz.6.984': attribute type 1 has an invalid length. [ 277.341529][ T8868] erspan1: entered allmulticast mode [ 277.356351][ T8868] team0: Port device erspan1 added [ 277.391455][ T8863] syz_tun: left allmulticast mode [ 277.406477][ T8863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.465826][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 277.471945][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 278.533602][ T42] audit: type=1400 audit(1785747612.550:707): avc: denied { load_policy } for pid=8894 comm="syz.0.994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 278.667733][ T8895] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 278.700890][ T8895] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 278.713756][ T8895] vhci_hcd vhci_hcd.0: Device attached [ 278.917762][ T1359] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 278.952718][ T5164] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 278.979474][ T1359] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 279.134819][ T5164] usb 5-1: config 0 has no interfaces? [ 279.155424][ T5164] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 279.222353][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.300166][ T5164] usb 5-1: config 0 descriptor?? [ 279.572053][ T8801] usb 5-1: USB disconnect, device number 11 [ 279.603072][ T8896] vhci_hcd: connection reset by peer [ 279.683604][ T14] vhci_hcd vhci_hcd.0: stop threads [ 279.688818][ T14] vhci_hcd vhci_hcd.0: release socket [ 279.742535][ T14] vhci_hcd vhci_hcd.0: disconnect device [ 279.959242][ T8921] netlink: 'syz.4.1004': attribute type 1 has an invalid length. [ 279.962432][ T8921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.967845][ T8921] IPv6: NLM_F_CREATE should be set when creating new route [ 279.992064][ T8921] netlink: 'syz.4.1004': attribute type 1 has an invalid length. [ 279.998072][ T8921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.041853][ T8923] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 281.099285][ T8801] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 281.319661][ T8801] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 281.323706][ T8801] usb 11-1: config 0 interface 0 has no altsetting 0 [ 281.339823][ T8801] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.344660][ T8801] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.349713][ T8801] usb 11-1: Product: syz [ 281.356727][ T8801] usb 11-1: Manufacturer: syz [ 281.374046][ T8801] usb 11-1: SerialNumber: syz [ 281.409860][ T8801] usb 11-1: config 0 descriptor?? [ 281.447435][ T8801] usb 11-1: selecting invalid altsetting 0 [ 281.497614][ T8952] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 281.910932][ T5164] usb 11-1: USB disconnect, device number 2 [ 281.910972][ C2] usb 11-1: Unable to submit urb #2: -19 at snd_usb_queue_pending_output_urbs [ 281.928415][ C2] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 282.051783][ T8964] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 282.231334][ T8964] bond3: entered promiscuous mode [ 282.234168][ T8964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.432699][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.442473][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.654216][ T8801] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 282.659408][ T8968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.686865][ T8968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.841208][ T8801] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.847542][ T8801] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.862904][ T8801] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.870981][ T8801] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.874692][ T8801] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.884021][ T8801] usb 9-1: config 0 descriptor?? [ 283.170996][ T14] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.185410][ T14] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.201770][ T14] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.204366][ T8987] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 283.279142][ T14] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.303434][ T14] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.320399][ T14] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.324210][ T8991] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 283.338229][ T14] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.368663][ T14] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.370598][ T8987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.392972][ T8987] IPv6: NLM_F_CREATE should be set when creating new route [ 283.398779][ T8991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.433421][ T8801] hid_parser_main: 22 callbacks suppressed [ 283.433448][ T8801] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 283.458685][ T42] audit: type=1400 audit(1785747617.450:708): avc: denied { write } for pid=8983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.483655][ T8801] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 283.503474][ T8801] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 283.506752][ T8801] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 283.512107][ T8801] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 283.524387][ T8801] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 283.529964][ T8801] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 283.533816][ T8801] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 283.538573][ T8801] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 283.561971][ T8801] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 283.609957][ T8801] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 283.658499][ T42] audit: type=1400 audit(1785747617.690:709): avc: denied { write } for pid=8994 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.766113][ T9003] input: syz0 as /devices/virtual/input/input12 [ 283.859971][ T5760] usb 9-1: USB disconnect, device number 10 [ 284.145430][ T1359] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 284.210372][ T9010] gtp1: entered promiscuous mode [ 284.219648][ T9010] gtp1: entered allmulticast mode [ 284.229392][ T9010] team0: Device gtp1 is of different type [ 284.297470][ T42] audit: type=1400 audit(1785747618.320:710): avc: denied { write } for pid=9007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.386331][ T9013] syz_tun: entered allmulticast mode [ 284.390499][ T9009] syz_tun: left allmulticast mode [ 284.400014][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.536548][ T42] audit: type=1400 audit(1785747618.560:711): avc: denied { write } for pid=9015 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.680948][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.826651][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.891125][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.975552][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.062862][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.086024][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.169053][ T9027] X25: received unknown 00 with LCI 000 [ 285.226368][ T42] audit: type=1400 audit(1785747619.230:712): avc: denied { write } for pid=9028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.434104][ T42] audit: type=1400 audit(1785747619.420:713): avc: denied { write } for pid=9035 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.660633][ T42] audit: type=1400 audit(1785747619.670:714): avc: denied { write } for pid=9040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.889536][ T42] audit: type=1400 audit(1785747619.920:715): avc: denied { write } for pid=9044 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.925008][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.418911][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.602486][ T42] audit: type=1800 audit(1785747620.610:716): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1044" name="file" dev="configfs" ino=26208 res=0 errno=0 [ 286.977994][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.138417][ T5757] Bluetooth: hci0: command tx timeout [ 287.515958][ T42] audit: type=1804 audit(1785747621.520:717): pid=9073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1047" name="/newroot/302/file0" dev="tmpfs" ino=1613 res=1 errno=0 [ 287.686404][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.690031][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.708999][ T9023] bridge_slave_0: entered allmulticast mode [ 287.714186][ T9023] bridge_slave_0: entered promiscuous mode [ 287.801162][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.837198][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.855239][ T9023] bridge_slave_1: entered allmulticast mode [ 287.867726][ T9023] bridge_slave_1: entered promiscuous mode [ 287.977786][ T9023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.094743][ T9023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.247889][ T12] bridge_slave_1: left allmulticast mode [ 288.287479][ T12] bridge_slave_1: left promiscuous mode [ 288.305963][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.440300][ T12] bridge_slave_0: left allmulticast mode [ 288.453456][ T12] bridge_slave_0: left promiscuous mode [ 288.464407][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.146055][ T12] team0: Port device erspan1 removed [ 289.198498][ T5757] Bluetooth: hci0: command tx timeout [ 289.339658][ T9022] net_ratelimit: 66 callbacks suppressed [ 289.339703][ T9022] Set syz1 is full, maxelem 65536 reached [ 289.401483][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.469109][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.490623][ T9102] input: syz1 as /devices/virtual/input/input13 [ 289.643812][ T12] bond0 (unregistering): Released all slaves [ 289.771564][ T9023] team0: Port device team_slave_0 added [ 289.789887][ T9023] team0: Port device team_slave_1 added [ 289.796986][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 289.910467][ T5918] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 290.095278][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 290.098176][ T5918] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 290.103539][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.112417][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.124344][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.133566][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.144184][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.152661][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.167764][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.188650][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.209012][ T5918] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 290.212762][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 290.216123][ T5918] usb 5-1: SerialNumber: syz [ 290.226764][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.229314][ T5918] usb 5-1: config 0 descriptor?? [ 290.229652][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.253326][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input14 [ 290.275208][ T9023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.284727][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.289507][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.323763][ T9023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.470493][ T9104] input: syz1 as /devices/virtual/input/input15 [ 290.514102][ T9023] hsr_slave_0: entered promiscuous mode [ 290.523040][ T9023] hsr_slave_1: entered promiscuous mode [ 290.682081][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 290.682097][ T42] audit: type=1400 audit(1785747624.700:720): avc: denied { write } for pid=9120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.801973][ T5129] bcm5974 5-1:0.0: could not read from device [ 290.878800][ T42] audit: type=1400 audit(1785747624.900:721): avc: denied { write } for pid=9124 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.968901][ T5918] usb 5-1: USB disconnect, device number 12 [ 291.002386][ T12] hsr_slave_0: left promiscuous mode [ 291.023025][ T5129] bcm5974 5-1:0.0: could not read from device [ 291.032546][ T12] hsr_slave_1: left promiscuous mode [ 291.109749][ T7710] bcm5974 5-1:0.0: could not read from device [ 291.143142][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.147622][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.172226][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.175869][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.238641][ T12] veth1_macvtap: left promiscuous mode [ 291.241066][ T12] veth0_macvtap: left promiscuous mode [ 291.243948][ T12] veth1_vlan: left promiscuous mode [ 291.246625][ T12] veth0_vlan: left promiscuous mode [ 291.276249][ T5757] Bluetooth: hci0: command tx timeout [ 291.715300][ T5918] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 291.741156][ T12] team0 (unregistering): Port device team_slave_1 removed [ 291.764020][ T12] team0 (unregistering): Port device team_slave_0 removed [ 291.819961][ T9135] loop5: detected capacity change from 0 to 2640 [ 291.833654][ T7008] buffer_io_error: 322 callbacks suppressed [ 291.833689][ T7008] Buffer I/O error on dev loop5, logical block 0, async page read [ 291.855917][ T7008] Buffer I/O error on dev loop5, logical block 0, async page read [ 291.859853][ T7008] Buffer I/O error on dev loop5, logical block 0, async page read [ 291.864041][ T7008] Buffer I/O error on dev loop5, logical block 0, async page read [ 291.870762][ T5918] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 291.875627][ T5918] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 291.880108][ T5918] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 291.884147][ T7008] Buffer I/O error on dev loop5, logical block 0, async page read [ 291.890071][ T5918] usb 5-1: New USB device found, idVendor=15a4, idProduct=9020, bcdDevice= 1.00 [ 291.900225][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.912113][ T5918] usb 5-1: Product: syz [ 291.920069][ T5918] usb 5-1: Manufacturer: syz [ 291.923174][ T5918] usb 5-1: SerialNumber: syz [ 291.944747][ T9133] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.951607][ T9133] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.955550][ T9133] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.966399][ T5918] af9005: boot packet bulk message failed: -71 (252/0) [ 291.966922][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 291.969618][ T5918] dvb-usb: found a 'Afatech DVB-T USB1.1 stick' in cold state, will try to load a firmware [ 291.979560][ T5918] usb 5-1: Direct firmware load for af9005.fw failed with error -2 [ 291.983140][ T5918] usb 5-1: Falling back to sysfs fallback for: af9005.fw [ 291.998841][ T9137] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 292.008527][ T9137] overlayfs: failed to set xattr on upper [ 292.011842][ T9137] overlayfs: ...falling back to redirect_dir=nofollow. [ 292.019248][ T9137] overlayfs: ...falling back to index=off. [ 292.021958][ T9137] overlayfs: ...falling back to uuid=null. [ 292.028674][ T9137] overlayfs: ...falling back to xino=off. [ 292.101151][ T9135] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 292.105939][ T9135] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 292.111124][ T9135] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 292.119960][ T9135] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 292.124068][ T9135] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 292.214004][ T42] audit: type=1400 audit(1785747626.240:722): avc: denied { write } for pid=9141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.421813][ T42] audit: type=1400 audit(1785747626.450:723): avc: denied { write } for pid=9150 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.447807][ T5918] dvb-usb: did not find the firmware file 'af9005.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 292.454736][ T5918] dvb_usb_af9005 5-1:1.0: probe with driver dvb_usb_af9005 failed with error -2 [ 292.579851][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 292.601469][ T9023] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 292.627501][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.631717][ T9023] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 292.644081][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.653635][ T9023] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 292.672129][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.676581][ T9023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 292.696182][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.863925][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.877612][ T42] audit: type=1400 audit(1785747626.910:724): avc: denied { write } for pid=9169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.891415][ T9023] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.899670][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.902325][ T7601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.916149][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.919235][ T7601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.931951][ T42] audit: type=1400 audit(1785747626.960:725): avc: denied { write } for pid=9172 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.993431][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 293.168698][ T5918] usb 5-1: USB disconnect, device number 13 [ 293.261234][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.345408][ T5757] Bluetooth: hci0: command tx timeout [ 293.474017][ T9023] veth0_vlan: entered promiscuous mode [ 293.491338][ T9023] veth1_vlan: entered promiscuous mode [ 293.518409][ T9023] veth0_macvtap: entered promiscuous mode [ 293.526659][ T9023] veth1_macvtap: entered promiscuous mode [ 293.541700][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.558305][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.606002][ T5831] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.610083][ T5831] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.649737][ T7145] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.657644][ T7145] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.666356][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.674258][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.712769][ T7601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.717325][ T7601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.757146][ T9198] syzkaller1: entered promiscuous mode [ 293.759755][ T9198] syzkaller1: entered allmulticast mode [ 293.931220][ T42] audit: type=1400 audit(1785747627.960:726): avc: denied { write } for pid=9207 comm="syz.4.1077" name="/" dev="9p" ino=78395449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.941168][ T42] audit: type=1400 audit(1785747627.960:727): avc: denied { write } for pid=9207 comm="syz.4.1077" name="/" dev="9p" ino=78395449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.951967][ T42] audit: type=1400 audit(1785747627.960:728): avc: denied { rename } for pid=9207 comm="syz.4.1077" name="file0" dev="9p" ino=78395453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 294.278620][ T9224] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1084'. [ 294.287936][ T42] audit: type=1400 audit(1785747628.320:729): avc: denied { read } for pid=9223 comm="syz.4.1084" dev="nsfs" ino=4026532258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 294.587078][ T9239] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 295.045631][ T9265] overlayfs: upper fs does not support tmpfile. [ 295.272598][ T9281] kvm: emulating exchange as write [ 295.389151][ T9299] Bluetooth: MGMT ver 1.23 [ 295.395363][ T9299] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 296.477444][ T9337] loop2: detected capacity change from 0 to 7 [ 296.490008][ T9337] Dev loop2: unable to read RDB block 7 [ 296.491971][ T9337] loop2: AHDI p1 p2 p3 [ 296.493455][ T9337] loop2: partition table partially beyond EOD, truncated [ 296.496330][ T9337] loop2: p1 start 1601398130 is beyond EOD, truncated [ 296.498800][ T9337] loop2: p2 start 1702059890 is beyond EOD, truncated [ 296.615903][ T9342] xt_hashlimit: size too large, truncated to 1048576 [ 297.238623][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 297.238656][ T42] audit: type=1400 audit(1785747631.270:734): avc: denied { create } for pid=9363 comm="syz.4.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 297.315616][ T42] audit: type=1400 audit(1785747631.340:735): avc: denied { bind } for pid=9363 comm="syz.4.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 297.442020][ T9373] netlink: 750 bytes leftover after parsing attributes in process `syz.0.1144'. [ 297.500506][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'. [ 297.515234][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 297.541266][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'. [ 297.544465][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.547722][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.550632][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 297.565280][ T7145] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.568352][ T7145] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.671436][ T9390] input: syz0 as /devices/virtual/input/input16 [ 297.757107][ T9394] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 298.358640][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.369232][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.373849][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.381657][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.388100][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.555267][ T49] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 298.708403][ T49] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.711988][ T49] usb 12-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 298.714971][ T49] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.881857][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.884740][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.887544][ T9424] bridge_slave_0: entered allmulticast mode [ 298.890772][ T9424] bridge_slave_0: entered promiscuous mode [ 298.897784][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.900214][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.902766][ T9424] bridge_slave_1: entered allmulticast mode [ 298.906930][ T9424] bridge_slave_1: entered promiscuous mode [ 298.945022][ T49] qmi_wwan 12-1:1.0: cdc-wdm0: USB WDM device [ 298.956818][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.967327][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.982452][ T49] wwan wwan0: port wwan0qmi0 attached [ 299.024542][ T9424] team0: Port device team_slave_0 added [ 299.028643][ T9424] team0: Port device team_slave_1 added [ 299.050141][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.052719][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.062116][ T9424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.067238][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.069546][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.077922][ T9424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.113287][ T9424] hsr_slave_0: entered promiscuous mode [ 299.115930][ T9424] hsr_slave_1: entered promiscuous mode [ 299.123807][ T9424] debugfs: 'hsr0' already exists in 'hsr' [ 299.126098][ T9424] Cannot create hsr debugfs directory [ 299.167991][ T49] qmi_wwan 12-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.7-1, WWAN/QMI device, 4e:c2:9b:69:c8:bf [ 299.337031][ T5760] usb 12-1: USB disconnect, device number 2 [ 299.340337][ T5760] qmi_wwan 12-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.7-1, WWAN/QMI device [ 299.457041][ T5760] wwan wwan0: port wwan0qmi0 disconnected [ 299.899046][ T9477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.951496][ T9424] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 299.982532][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.985570][ T9424] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 299.991895][ T42] audit: type=1400 audit(1785747634.020:736): avc: denied { write } for pid=9484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.033287][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.037215][ T9424] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 300.041426][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.044291][ T9424] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 300.052826][ T42] audit: type=1400 audit(1785747634.080:737): avc: denied { write } for pid=9490 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.062011][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.170639][ T42] audit: type=1400 audit(1785747634.200:738): avc: denied { write } for pid=9503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.230325][ T42] audit: type=1400 audit(1785747634.260:739): avc: denied { write } for pid=9513 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.231674][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.269543][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.290706][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.293060][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.302929][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.305314][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.465244][ T5757] Bluetooth: hci3: command tx timeout [ 300.499141][ T42] audit: type=1400 audit(1785747634.530:740): avc: denied { map } for pid=9529 comm="syz.4.1177" path="socket:[29143]" dev="sockfs" ino=29143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 300.512235][ T42] audit: type=1400 audit(1785747634.530:741): avc: denied { read } for pid=9529 comm="syz.4.1177" path="socket:[29143]" dev="sockfs" ino=29143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 300.640623][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.803296][ T9424] veth0_vlan: entered promiscuous mode [ 300.808460][ T9424] veth1_vlan: entered promiscuous mode [ 300.833564][ T9424] veth0_macvtap: entered promiscuous mode [ 300.839701][ T9424] veth1_macvtap: entered promiscuous mode [ 300.852490][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.859579][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.897016][ T7145] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.908182][ T7145] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.945348][ T7145] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.950537][ T7145] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.990128][ T361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.997577][ T361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.058081][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.064480][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.167199][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1171'. [ 301.245283][ T5872] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 301.421825][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 301.438746][ T5872] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 301.443697][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.447240][ T5872] usb 8-1: Product: syz [ 301.448936][ T5872] usb 8-1: Manufacturer: syz [ 301.451373][ T5872] usb 8-1: SerialNumber: syz [ 301.470721][ T5872] usb 8-1: config 0 descriptor?? [ 301.486023][ T5872] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 301.489193][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 301.494702][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.499566][ T5872] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 301.503108][ T5872] usb 8-1: media controller created [ 301.521649][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.697570][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 301.722527][ T9583] kvm: kvm [9582]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xb7d6 [ 301.725986][ T9583] kvm: kvm [9582]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xfbfd [ 301.729436][ T5872] DVB: Unable to find symbol mt352_attach() [ 301.734593][ T5872] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 301.795223][ T5872] rc_core: IR keymap rc-dvico-portable not found [ 301.805500][ T5872] Registered IR keymap rc-empty [ 301.812240][ T5872] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 301.820851][ T5872] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input17 [ 301.831715][ T5872] dvb-usb: schedule remote query interval to 100 msecs. [ 301.834346][ T5872] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 301.865277][ T49] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 301.898565][ T9568] batadv_slave_1: entered promiscuous mode [ 301.908597][ T9567] batadv_slave_1: left promiscuous mode [ 301.913648][ T5847] usb 8-1: USB disconnect, device number 14 [ 301.967700][ T5847] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 302.021178][ T49] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.027266][ T49] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.035689][ T49] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.041822][ T49] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.245344][ T25] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 302.266246][ T49] usb 13-1: usb_control_msg returned -32 [ 302.268206][ T49] usbtmc 13-1:16.0: can't read capabilities [ 302.374537][ T42] audit: type=1400 audit(1785747636.400:742): avc: denied { read } for pid=9608 comm="syz.4.1203" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 302.384750][ T42] audit: type=1400 audit(1785747636.400:743): avc: denied { open } for pid=9608 comm="syz.4.1203" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 302.395568][ T25] usb 12-1: Using ep0 maxpacket: 8 [ 302.399905][ T25] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.407617][ T25] usb 12-1: config 0 has no interface number 0 [ 302.410439][ T25] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.415084][ T25] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 302.419025][ T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.427504][ T25] usb 12-1: config 0 descriptor?? [ 302.475588][ T25] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 302.555270][ T5757] Bluetooth: hci3: command tx timeout [ 302.844626][ T51] usb 13-1: USB disconnect, device number 2 [ 303.193570][ T42] audit: type=1400 audit(1785747637.220:744): avc: denied { write } for pid=9630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.241865][ T42] audit: type=1400 audit(1785747637.270:745): avc: denied { write } for pid=9633 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.541535][ T9643] xt_hashlimit: size too large, truncated to 1048576 [ 303.623502][ T42] audit: type=1400 audit(1785747637.650:746): avc: denied { execute } for pid=9650 comm="syz.8.1216" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 303.656826][ T9651] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 303.683490][ T42] audit: type=1400 audit(1785747637.710:747): avc: denied { create } for pid=9652 comm="syz.3.1217" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 303.708087][ T42] audit: type=1400 audit(1785747637.740:748): avc: denied { unlink } for pid=5753 comm="syz-executor" name="file0" dev="tmpfs" ino=1770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 303.999492][ T42] audit: type=1400 audit(1785747638.030:749): avc: denied { write } for pid=9668 comm="syz.8.1224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 304.025303][ T51] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 304.199232][ T51] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.205204][ T51] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.213707][ T51] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.225988][ T51] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.232824][ T51] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.244449][ T51] usb 8-1: config 0 descriptor?? [ 304.394611][ T42] audit: type=1400 audit(1785747638.420:750): avc: denied { write } for pid=9681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.459594][ T42] audit: type=1400 audit(1785747638.490:751): avc: denied { write } for pid=9685 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.598211][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1231'. [ 304.635337][ T66] Bluetooth: hci3: command tx timeout [ 304.676642][ T51] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 304.681749][ T9693] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1232'. [ 305.011066][ T5760] usb 12-1: USB disconnect, device number 4 [ 305.025239][ T25] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 305.175291][ T25] usb 13-1: Using ep0 maxpacket: 8 [ 305.180063][ T25] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 305.183022][ T25] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 305.188269][ T25] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 305.191944][ T25] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.406838][ T5872] usb 13-1: USB disconnect, device number 3 [ 305.665903][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 305.776003][ T9723] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 306.019061][ T9731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 306.237687][ T9743] tipc: Started in network mode [ 306.240688][ T9743] tipc: Node identity 7efa11cbbb64, cluster identity 4711 [ 306.246435][ T9743] tipc: Enabled bearer , priority 0 [ 306.250130][ T9743] +: renamed from syzkaller0 [ 306.253866][ T9743] tipc: Disabling bearer [ 306.333074][ T9748] xhci_hcd 0000:00:1f.0: init 0000:00:1f.0 fail, -16 [ 306.336055][ T9748] xhci_hcd 0000:00:1f.0: probe with driver xhci_hcd failed with error -16 [ 306.434838][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1255'. [ 306.440715][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1255'. [ 306.475890][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1256'. [ 306.508841][ T7145] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 306.552685][ T9770] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 306.564460][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1256'. [ 306.706226][ T5757] Bluetooth: hci3: command tx timeout [ 306.739895][ T1483] usb 8-1: USB disconnect, device number 15 [ 306.975269][ T5847] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 307.000002][ T9799] netlink: 'syz.4.1269': attribute type 8 has an invalid length. [ 307.002580][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 307.009561][ T9799] bond0: entered promiscuous mode [ 307.011352][ T9799] bond_slave_0: entered promiscuous mode [ 307.013487][ T9799] bond_slave_1: entered promiscuous mode [ 307.020186][ T9799] gretap0: entered promiscuous mode [ 307.023605][ T9799] team0: entered promiscuous mode [ 307.026115][ T9799] team_slave_0: entered promiscuous mode [ 307.028432][ T9799] team_slave_1: entered promiscuous mode [ 307.036340][ T9799] hsr1: entered promiscuous mode [ 307.137403][ T5847] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.141275][ T5847] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.144777][ T5847] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.149968][ T5847] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.153136][ T5847] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.158192][ T5847] usb 12-1: config 0 descriptor?? [ 307.511221][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 307.511244][ T42] audit: type=1400 audit(1785747641.540:767): avc: denied { connect } for pid=9818 comm="syz.3.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.579782][ T5847] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 307.649305][ T9826] syzkaller0: entered promiscuous mode [ 307.651381][ T9826] syzkaller0: entered allmulticast mode [ 307.654855][ T9826] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 309.429208][ T9757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.686665][ T42] audit: type=1400 audit(1785747643.710:768): avc: denied { ioctl } for pid=9852 comm="syz.3.1291" path="/346/file0/file0" dev="fuse" ino=2 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 309.690529][ T50] usb 12-1: USB disconnect, device number 5 [ 310.029847][ T9874] tipc: Started in network mode [ 310.032085][ T9874] tipc: Node identity 3634fcac661, cluster identity 4711 [ 310.041622][ T9874] tipc: Enabled bearer , priority 10 [ 310.049689][ T9873] tipc: Resetting bearer [ 310.084701][ T9873] tipc: Disabling bearer [ 310.133956][ T42] audit: type=1400 audit(1785747644.160:769): avc: denied { connect } for pid=9878 comm="syz.7.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.346736][ T42] audit: type=1400 audit(1785747644.380:770): avc: denied { listen } for pid=9895 comm="syz.7.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 310.420403][ T9908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1311'. [ 310.469851][ T9912] fuse: Bad value for 'fd' [ 310.598193][ T42] audit: type=1400 audit(1785747644.630:771): avc: denied { execute } for pid=9923 comm="syz.4.1320" path="/file1" dev="ramfs" ino=32918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 310.986837][ T42] audit: type=1400 audit(1785747645.020:772): avc: denied { connect } for pid=9944 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 310.987355][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'. [ 311.112260][ T9953] fuse: Bad value for 'fd' [ 311.147926][ T9955] fuse: Bad value for 'fd' [ 311.165281][ T50] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 311.347665][ T50] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.352122][ T50] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.356488][ T50] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 311.360526][ T50] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.365918][ T50] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.369501][ T50] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.374774][ T50] usb 12-1: config 0 descriptor?? [ 311.794526][ T50] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 312.060347][ T1359] usb 12-1: USB disconnect, device number 6 [ 313.383132][ T42] audit: type=1800 audit(1785747647.410:773): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1338" name="pnp_string" dev="configfs" ino=30620 res=0 errno=0 [ 313.401422][ T9977] cdns2-pci 0000:00:00.0: probe with driver cdns2-pci failed with error -22 [ 313.566916][ T9987] fuse: Bad value for 'fd' [ 313.600629][ T9989] fuse: Bad value for 'fd' [ 313.615282][ T9991] e1000e 0000:00:02.0 eth1: removed PHC [ 313.675327][ T42] audit: type=1400 audit(1785747647.700:774): avc: denied { write } for pid=9993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.743087][ T42] audit: type=1400 audit(1785747647.770:775): avc: denied { write } for pid=10002 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.761013][ T9991] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 313.879336][T10009] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.882379][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.955018][T10009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.963733][T10009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.032142][ T9947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.039966][ T9996] usb_phy_generic usb_phy_generic.0.auto: dummy supplies not allowed for exclusive requests (id=vbus) [ 314.056951][ T42] audit: type=1400 audit(1785747648.080:776): avc: denied { write } for pid=10013 comm="syz.3.1354" name="/" dev="9p" ino=78395449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.081174][ T9996] dwc2 dwc2.2.auto: supply vusb_d not found, using dummy regulator [ 314.163123][ T9996] dwc2 dwc2.2.auto: supply vusb_a not found, using dummy regulator [ 314.170307][ T9996] dwc2 dwc2.2.auto: Configuration mismatch. dr_mode forced to host [ 314.173010][ T9996] dwc2 dwc2.2.auto: Bad value for GSNPSID: 0x52540012 [ 314.328475][T10020] gretap1: entered promiscuous mode [ 314.336951][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.340128][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.342980][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.345850][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.349195][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.352133][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.360420][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.368467][ T42] audit: type=1400 audit(1785747648.400:777): avc: denied { write } for pid=10021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.371385][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.391340][T10020] netlink: 'syz.7.1357': attribute type 10 has an invalid length. [ 314.396653][T10020] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 314.402298][T10029] tipc: Enabled bearer , priority 10 [ 314.422932][ T42] audit: type=1400 audit(1785747648.450:778): avc: denied { write } for pid=10030 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.528443][ T42] audit: type=1400 audit(1785747648.560:779): avc: denied { write } for pid=10040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.533270][T10048] netlink: 'syz.4.1364': attribute type 1 has an invalid length. [ 314.565841][T10048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.574360][ T42] audit: type=1400 audit(1785747648.600:780): avc: denied { read } for pid=10039 comm="syz.3.1362" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 314.589181][ T42] audit: type=1400 audit(1785747648.600:781): avc: denied { open } for pid=10039 comm="syz.3.1362" path="/356/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 314.590030][T10041] sd 0:0:0:0: PR command failed: 1026 [ 314.605257][ T42] audit: type=1400 audit(1785747648.620:782): avc: denied { ioctl } for pid=10039 comm="syz.3.1362" path="/356/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 314.605833][T10041] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 314.621104][T10041] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 314.784153][T10066] netlink: 'syz.7.1369': attribute type 2 has an invalid length. [ 315.123992][T10100] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1377'. [ 315.130791][T10100] unsupported nlmsg_type 40 [ 315.519524][ T5873] tipc: Node number set to 1344601260 [ 316.177050][T10129] sd 0:0:0:0: PR command failed: 1026 [ 316.178825][T10129] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 316.185243][T10129] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 316.273499][T10132] netlink: 'syz.3.1385': attribute type 5 has an invalid length. [ 316.423626][T10138] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 316.430665][T10138] block device autoloading is deprecated and will be removed. [ 316.548970][T10142] bond0: entered promiscuous mode [ 316.549276][T10144] fuse: Bad value for 'fd' [ 316.550833][T10142] bond_slave_0: entered promiscuous mode [ 316.554457][T10142] bond_slave_1: entered promiscuous mode [ 316.557610][T10142] batadv0: entered promiscuous mode [ 316.560065][T10142] debugfs: 'hsr1' already exists in 'hsr' [ 316.562162][T10142] Cannot create hsr debugfs directory [ 316.570284][T10142] netlink: 'syz.3.1391': attribute type 10 has an invalid length. [ 316.573101][T10142] syz_tun: entered promiscuous mode [ 316.577370][T10142] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 317.057017][T10166] bridge0: port 3(vlan2) entered blocking state [ 317.059207][T10166] bridge0: port 3(vlan2) entered disabled state [ 317.061142][T10166] vlan2: entered allmulticast mode [ 317.062751][T10166] bridge0: entered allmulticast mode [ 317.064299][T10166] bridge0: entered promiscuous mode [ 317.069895][T10166] vlan2: left allmulticast mode [ 317.071425][T10166] bridge0: left allmulticast mode [ 317.084363][ T1359] bridge0: left promiscuous mode [ 317.117254][ T5872] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 317.183412][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1404'. [ 317.219608][T10170] usb3503 pcspkr: unknown mode is requested [ 317.221605][T10170] usb3503 pcspkr: usb3503_probe: probed in standby mode [ 317.281131][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.290303][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.293334][T10174] xt_hashlimit: size too large, truncated to 1048576 [ 317.295820][ T5872] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.300038][ T5872] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.303101][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.317580][ T5872] usb 8-1: config 0 descriptor?? [ 317.698321][T10199] netlink: 'syz.4.1417': attribute type 10 has an invalid length. [ 317.707483][T10199] syz_tun: entered promiscuous mode [ 317.712095][T10199] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 317.737666][ T5872] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 317.739712][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1418'. [ 318.218371][T10213] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1421'. [ 318.328937][T10219] overlay: filesystem on ./bus not supported [ 318.430234][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 318.430340][ T42] audit: type=1400 audit(1785747652.460:803): avc: denied { write } for pid=10221 comm="syz.7.1426" name="/" dev="9p" ino=78395449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.540914][T10224] overlayfs: failed to get inode (-116) [ 318.545300][T10224] overlayfs: failed to get inode (-116) [ 318.705064][T10229] netlink: 'syz.4.1430': attribute type 1 has an invalid length. [ 318.721880][T10229] bond3: entered allmulticast mode [ 318.726507][T10227] VFS: Lookup of 'file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' in fuse fuse would have caused loop [ 318.741671][T10229] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 318.744934][T10229] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 318.758275][T10229] bond3: (slave vti0): making interface the new active one [ 318.760588][T10229] vti0: entered allmulticast mode [ 318.763718][T10229] vti0: left allmulticast mode [ 318.912309][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1434'. [ 318.973249][T10246] loop3: detected capacity change from 0 to 7 [ 318.978254][T10246] loop3: p1 p4 [ 318.979420][T10246] loop3: partition table partially beyond EOD, truncated [ 319.030076][ T7710] udevd[7710]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 319.030553][ T7008] udevd[7008]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 319.034683][T10250] fuse: Bad value for 'fd' [ 319.218860][T10258] ohci-pci 0000:00:02.0: OHCI PCI host controller [ 319.243513][T10258] ohci-pci 0000:00:02.0: new USB bus registered, assigned bus number 63 [ 319.252003][T10258] ohci-pci 0000:00:02.0: irq 29, io mem 0xfea80000 [ 319.306292][T10258] ohci-pci 0000:00:02.0: USB HC reset timed out! [ 319.308197][T10258] ohci-pci 0000:00:02.0: can't start [ 319.316277][T10258] ohci-pci 0000:00:02.0: startup error -1 [ 319.317222][T10263] sd 0:0:0:0: PR command failed: 1026 [ 319.318895][T10258] ohci-pci 0000:00:02.0: USB bus 63 deregistered [ 319.319944][T10263] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 319.324358][T10263] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 319.377588][T10258] ohci-pci 0000:00:02.0: init 0000:00:02.0 fail, -1 [ 319.380399][T10258] ohci-pci 0000:00:02.0: probe with driver ohci-pci failed with error -1 [ 319.380534][ T49] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 319.547095][ T42] audit: type=1400 audit(1785747653.580:804): avc: denied { cmd } for pid=10275 comm="syz.4.1454" path="socket:[33339]" dev="sockfs" ino=33339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 319.555752][ T49] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 319.564624][ T49] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 319.576532][ T49] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 319.579089][T10281] xt_hashlimit: size too large, truncated to 1048576 [ 319.584730][ T49] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 319.595235][ T49] usb 12-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 319.600749][ T49] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.600898][T10284] fuse: Bad value for 'fd' [ 319.603588][ T49] usb 12-1: Product: syz [ 319.603600][ T49] usb 12-1: Manufacturer: syz [ 319.608094][ T49] usb 12-1: SerialNumber: syz [ 319.615702][ T49] usb 12-1: config 0 descriptor?? [ 319.737738][ T10] usb 8-1: USB disconnect, device number 16 [ 319.771254][ T42] audit: type=1400 audit(1785747653.800:805): avc: denied { relabelfrom } for pid=10294 comm="syz.8.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 319.780960][ T42] audit: type=1400 audit(1785747653.800:806): avc: denied { relabelto } for pid=10294 comm="syz.8.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 319.823594][ T49] adutux 12-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 319.986211][T10298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.032197][ T49] usb 12-1: USB disconnect, device number 7 [ 320.070013][T10306] cdns-usb3 pcspkr: error -ENXIO: IRQ host not found [ 320.427971][T10319] kvm: kvm [10318]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 320.431477][T10319] kvm: kvm [10318]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 320.450254][T10319] kvm: kvm [10318]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 320.476275][T10319] kvm: kvm [10318]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 320.479368][T10319] kvm: kvm [10318]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 320.626969][T10330] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 320.686160][T10339] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1470'. [ 320.731676][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1474'. [ 320.773215][ T42] audit: type=1326 audit(1785747654.800:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.4.1473" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e1199e019 code=0x0 [ 321.739365][ T42] audit: type=1400 audit(1785747655.770:808): avc: denied { read write } for pid=10368 comm="syz.3.1484" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 321.739827][T10377] type: 32741 invalid [ 321.747999][ T42] audit: type=1400 audit(1785747655.770:809): avc: denied { open } for pid=10368 comm="syz.3.1484" path="/385/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 321.759153][ T42] audit: type=1400 audit(1785747655.770:810): avc: denied { ioctl } for pid=10368 comm="syz.3.1484" path="/385/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 321.775587][T10379] netlink: 'syz.8.1487': attribute type 1 has an invalid length. [ 321.791742][T10379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.813121][T10379] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 321.974834][T10388] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 321.975744][ T49] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 322.138369][ T49] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 322.141931][ T49] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.147181][ T49] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 322.151407][ T49] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.159028][ T49] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 322.165222][ T49] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 322.170523][ T49] usb 12-1: Product: syz [ 322.178819][ T49] usb 12-1: Manufacturer: syz [ 322.213608][ T49] cdc_wdm 12-1:1.0: skipping garbage [ 322.217868][ T49] cdc_wdm 12-1:1.0: skipping garbage [ 322.220717][ T49] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 322.225761][ T49] cdc_wdm 12-1:1.0: Unknown control protocol [ 322.279080][T10429] fuse: Bad value for 'fd' [ 322.282274][T10428] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 322.388875][T10438] fuse: Bad value for 'fd' [ 322.400434][ T5847] usb 12-1: USB disconnect, device number 8 [ 322.562489][T10452] fuse: Bad value for 'fd' [ 322.945512][T10460] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 322.949095][T10460] bond1: entered allmulticast mode [ 322.953335][T10460] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 322.981861][ T42] audit: type=1400 audit(1785747657.010:811): avc: denied { mounton } for pid=10463 comm="syz.7.1509" path="/89/file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 323.231921][ T5831] nci: nci_ntf_packet: unknown ntf opcode 0xc3a [ 323.502002][ T42] audit: type=1400 audit(1785747657.530:812): avc: denied { write } for pid=10484 comm="syz.7.1516" name="/" dev="9p" ino=78395449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.025340][T10472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.036778][T10502] fuse: Bad value for 'fd' [ 324.141966][ T42] audit: type=1400 audit(1785747658.170:813): avc: denied { write } for pid=10512 comm="syz.3.1528" name="c.1" dev="configfs" ino=9016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 324.143534][T10513] udc dummy_udc.0: failed to start g1: -19 [ 324.150560][ T42] audit: type=1400 audit(1785747658.170:814): avc: denied { write } for pid=10512 comm="syz.3.1528" name="c.1" dev="configfs" ino=9016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 324.158852][T10513] UDC core: g1: couldn't find an available UDC or it's busy [ 324.166710][ T42] audit: type=1800 audit(1785747658.170:815): pid=10513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1528" name="UDC" dev="configfs" ino=33618 res=0 errno=0 [ 324.388613][ T42] audit: type=1400 audit(1785747658.420:816): avc: denied { create } for pid=10521 comm="syz.4.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.401499][ T42] audit: type=1400 audit(1785747658.430:817): avc: denied { bind } for pid=10521 comm="syz.4.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.409771][ T42] audit: type=1400 audit(1785747658.430:818): avc: denied { setopt } for pid=10521 comm="syz.4.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.418933][ T42] audit: type=1400 audit(1785747658.430:819): avc: denied { accept } for pid=10521 comm="syz.4.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.426812][ T42] audit: type=1400 audit(1785747658.430:820): avc: denied { write } for pid=10521 comm="syz.4.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.440160][ T42] audit: type=1400 audit(1785747658.430:821): avc: denied { read } for pid=10521 comm="syz.4.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.465276][ T5847] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 325.273879][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1537'. [ 325.310432][T10551] macvlan0: entered allmulticast mode [ 325.312238][T10551] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 325.334047][T10551] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 337.410955][T10553] rpcbind: server 127.0.0.1 not responding, timed out [ 337.441470][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.443571][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.478654][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 337.478665][ T42] audit: type=1400 audit(1785747671.490:824): avc: denied { write } for pid=10591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.479896][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1550'. [ 361.595013][ T5847] usb 8-1: device not accepting address 17, error -71 [ 361.611764][ T42] audit: type=1400 audit(1785747695.600:825): avc: denied { write } for pid=10606 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.090841][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.092960][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.177336][ T42] audit: type=1400 audit(1785747749.190:826): avc: denied { write } for pid=10619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.605131][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 466.607597][ C0] rcu: 3-....: (2 ticks this GP) idle=c2e4/1/0x4000000000000000 softirq=29076/29076 fqs=5 [ 466.612237][ C0] rcu: hardirqs softirqs csw/system [ 466.614275][ C0] rcu: number: 21 1 37 [ 466.616279][ C0] rcu: cputime: 0 0 1 ==> 51540(ms) [ 466.618536][ C0] rcu: (detected by 0, t=10504 jiffies, g=32517, q=5265 ncpus=4) [ 466.620978][ C0] Sending NMI from CPU 0 to CPUs 3: [ 466.621038][ C3] NMI backtrace for cpu 3 [ 466.621069][ C3] CPU: 3 UID: 0 PID: 10620 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 466.621084][ C3] Tainted: [L]=SOFTLOCKUP [ 466.621088][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 466.621094][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0xf/0x70 [ 466.621162][ C3] Code: 00 00 00 5b e9 42 32 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 05 1e 5a 12 48 8b 34 24 <65> 48 8b 15 e1 1d 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 466.621171][ C3] RSP: 0000:ffffc90000708e90 EFLAGS: 00000002 [ 466.621181][ C3] RAX: 0000000000010001 RBX: dffffc0000000000 RCX: ffffffff81f6128f [ 466.621187][ C3] RDX: 18c8402172e4b010 RSI: ffffffff81f6129d RDI: ffff88802f7dca80 [ 466.621193][ C3] RBP: 18c8402172e4b010 R08: 0000000000000006 R09: 18c8402498e5ef64 [ 466.621199][ C3] R10: 18c8402172e4b010 R11: 0000000000000000 R12: ffff88802d15d300 [ 466.621204][ C3] R13: 0000000000000001 R14: ffff88806a728540 R15: 18c8402498e5ef64 [ 466.621210][ C3] FS: 00007fe09853e880(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000 [ 466.621232][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.621241][ C3] CR2: 0000562e4945ff38 CR3: 0000000040c09000 CR4: 0000000000352ef0 [ 466.621246][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 466.621252][ C3] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 466.621258][ C3] Call Trace: [ 466.621262][ C3] [ 466.621265][ C3] __hrtimer_run_queues+0x29d/0x9c0 [ 466.621292][ C3] hrtimer_interrupt+0x3e5/0x940 [ 466.621305][ C3] __sysvec_apic_timer_interrupt+0x109/0x470 [ 466.621323][ C3] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 466.621354][ C3] [ 466.621357][ C3] [ 466.621360][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.621371][ C3] RIP: 0010:unwind_next_frame+0x157d/0x2090 [ 466.621383][ C3] Code: 0f 84 f3 ed ff ff 48 89 ef e8 9f e2 ff ff 49 8d 7d 40 48 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 84 17 fa ff ff e8 a8 74 c2 00 e9 0d fa ff ff 48 b8 00 00 00 00 [ 466.621392][ C3] RSP: 0000:ffffc90006ecf1c8 EFLAGS: 00000246 [ 466.621400][ C3] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91d1e898 [ 466.621406][ C3] RDX: 1ffff92000dd9e4f RSI: ffffc90006ecfe78 RDI: ffffc90006ecf278 [ 466.621412][ C3] RBP: ffffc90006ecff48 R08: 0000000000000001 R09: 0000000000000007 [ 466.621417][ C3] R10: 0000000000000200 R11: 000000000001614c R12: ffffc90006ecf288 [ 466.621427][ C3] R13: ffffc90006ecf238 R14: ffffc90006ecfea8 R15: ffffc90006ecf26c [ 466.621437][ C3] ? unwind_next_frame+0x1561/0x2090 [ 466.621446][ C3] ? handle_mm_fault+0x37b/0xa30 [ 466.621463][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 466.621474][ C3] arch_stack_walk+0x94/0xf0 [ 466.621491][ C3] ? do_user_addr_fault+0x5a3/0x12f0 [ 466.621506][ C3] stack_trace_save+0x8e/0xc0 [ 466.621516][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 466.621530][ C3] save_stack+0x162/0x1e0 [ 466.621548][ C3] ? __pfx_save_stack+0x10/0x10 [ 466.621563][ C3] ? post_alloc_hook+0xfd/0x120 [ 466.621583][ C3] ? get_page_from_freelist+0xf48/0x3530 [ 466.621594][ C3] ? __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 466.621604][ C3] ? alloc_pages_mpol+0x1fb/0x540 [ 466.621618][ C3] ? folio_alloc_mpol_noprof+0x36/0x260 [ 466.621633][ C3] ? vma_alloc_folio_noprof+0xed/0x1d0 [ 466.621647][ C3] ? do_wp_page+0x1ee1/0x4350 [ 466.621659][ C3] ? __handle_mm_fault+0x1ab6/0x2a00 [ 466.621673][ C3] ? handle_mm_fault+0x37b/0xa30 [ 466.621689][ C3] ? __lock_acquire+0x49f/0x1a40 [ 466.621703][ C3] __set_page_owner+0x8c/0x540 [ 466.621716][ C3] ? __pfx___set_page_owner+0x10/0x10 [ 466.621731][ C3] ? bad_range+0x257/0x3f0 [ 466.621748][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 466.621764][ C3] ? get_page_from_freelist+0xf25/0x3530 [ 466.621777][ C3] post_alloc_hook+0xfd/0x120 [ 466.621801][ C3] get_page_from_freelist+0xf48/0x3530 [ 466.621821][ C3] ? __pfx_get_page_from_freelist+0x10/0x10 [ 466.621836][ C3] ? prepare_alloc_pages+0x1f0/0x5f0 [ 466.621858][ C3] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 466.621875][ C3] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 466.621886][ C3] ? look_up_lock_class+0x55/0x120 [ 466.621900][ C3] ? __lock_acquire+0x49f/0x1a40 [ 466.621911][ C3] ? __lock_acquire+0x49f/0x1a40 [ 466.621923][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 466.621943][ C3] ? policy_nodemask+0xed/0x4f0 [ 466.621956][ C3] alloc_pages_mpol+0x1fb/0x540 [ 466.621969][ C3] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 466.621984][ C3] folio_alloc_mpol_noprof+0x36/0x260 [ 466.621999][ C3] vma_alloc_folio_noprof+0xed/0x1d0 [ 466.622013][ C3] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 466.622028][ C3] ? rcu_read_unlock+0x2d/0xb0 [ 466.622037][ C3] ? rcu_read_unlock+0x2d/0xb0 [ 466.622047][ C3] do_wp_page+0x1ee1/0x4350 [ 466.622061][ C3] ? __pfx_do_wp_page+0x10/0x10 [ 466.622074][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.622090][ C3] __handle_mm_fault+0x1ab6/0x2a00 [ 466.622106][ C3] ? reacquire_held_locks+0xce/0x1e0 [ 466.622118][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 466.622134][ C3] ? lock_vma_under_rcu+0x17c/0x590 [ 466.622152][ C3] handle_mm_fault+0x37b/0xa30 [ 466.622168][ C3] do_user_addr_fault+0x5a3/0x12f0 [ 466.622186][ C3] exc_page_fault+0x6f/0xd0 [ 466.622197][ C3] asm_exc_page_fault+0x26/0x30 [ 466.622207][ C3] RIP: 0033:0x7fe097eb5b37 [ 466.622216][ C3] Code: e0 f8 48 3b 04 07 0f 85 a9 00 00 00 f3 0f 6f 47 10 48 8b 57 18 66 48 0f 7e c0 48 3b 78 18 75 7b 48 3b 7a 10 75 75 48 8b 77 10 <48> 89 50 18 66 0f d6 42 10 48 81 f9 ff 03 00 00 76 28 48 8b 57 20 [ 466.622226][ C3] RSP: 002b:00007ffc273b7b50 EFLAGS: 00010246 [ 466.622234][ C3] RAX: 0000562e4945ff20 RBX: 0000562e49462550 RCX: 0000000000000121 [ 466.622240][ C3] RDX: 00007fe097ff1c30 RSI: 0000562e4945ff20 RDI: 0000562e49462570 [ 466.622245][ C3] RBP: 0000000000000140 R08: 00000000000189a0 R09: 0000562e4944bde0 [ 466.622251][ C3] R10: 0000000000000120 R11: 00000000ffffffff R12: 00007fe097ff1ad0 [ 466.622257][ C3] R13: 0000562b2ba02982 R14: 0000000562e49462 R15: 00007fe097ff1ac0 [ 466.622266][ C3] [ 466.623017][ C0] rcu: rcu_preempt kthread starved for 5139 jiffies! g32517 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=2 [ 466.814520][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 466.817527][ C0] rcu: RCU grace-period kthread stack dump: [ 466.819329][ C0] task:rcu_preempt state:R running task stack:28824 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 466.823488][ C0] Call Trace: [ 466.824637][ C0] [ 466.825813][ C0] __schedule+0x125c/0x6730 [ 466.827585][ C0] ? __pfx___schedule+0x10/0x10 [ 466.829432][ C0] ? find_held_lock+0x2b/0x80 [ 466.831230][ C0] ? schedule+0x225/0x2c0 [ 466.832582][ C0] schedule+0xdd/0x2c0 [ 466.833868][ C0] schedule_timeout+0x127/0x280 [ 466.835386][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 466.837029][ C0] ? __pfx_process_timeout+0x10/0x10 [ 466.838698][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 466.840796][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 466.842871][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 466.844636][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 466.846534][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 466.848357][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 466.850013][ C0] ? rcu_is_watching+0x12/0xc0 [ 466.851571][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 466.853428][ C0] rcu_gp_kthread+0x179/0x230 [ 466.854931][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 466.856583][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 466.858428][ C0] ? __kthread_parkme+0x18c/0x230 [ 466.860048][ C0] ? kthread+0x13a/0x450 [ 466.861418][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 466.863064][ C0] kthread+0x370/0x450 [ 466.864362][ C0] ? __pfx_kthread+0x10/0x10 [ 466.865836][ C0] ret_from_fork+0x72b/0xd50 [ 466.867300][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 466.868914][ C0] ? __switch_to+0x800/0x10f0 [ 466.870402][ C0] ? __pfx_kthread+0x10/0x10 [ 466.871883][ C0] ret_from_fork_asm+0x1a/0x30 [ 466.873432][ C0] [ 466.874425][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 466.876415][ C0] Sending NMI from CPU 0 to CPUs 2: [ 466.878112][ C2] NMI backtrace for cpu 2 [ 466.878129][ C2] CPU: 2 UID: 0 PID: 6948 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 466.878144][ C2] Tainted: [L]=SOFTLOCKUP [ 466.878148][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 466.878154][ C2] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870 [ 466.878171][ C2] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 44 9a 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 [ 466.878180][ C2] RSP: 0018:ffffc90004227588 EFLAGS: 00000293 [ 466.878189][ C2] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff81fdc802 [ 466.878196][ C2] RDX: ffff888030560000 RSI: ffffffff81fdc7dc RDI: ffff888030560000 [ 466.878206][ C2] RBP: ffff88806a743500 R08: 0000000000000005 R09: 0000000000000000 [ 466.878215][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 466.878224][ C2] R13: ffffed100d4e86a1 R14: 0000000000000001 R15: ffff88806a63c880 [ 466.878239][ C2] FS: 0000000000000000(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 466.878272][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.878285][ C2] CR2: 00007f5e94655490 CR3: 000000000e994000 CR4: 0000000000352ef0 [ 466.878296][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 466.878307][ C2] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 466.878317][ C2] Call Trace: [ 466.878324][ C2] [ 466.878333][ C2] ? __pfx_flush_tlb_func+0x10/0x10 [ 466.878356][ C2] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 466.878368][ C2] ? unlink_anon_vmas+0x228/0x8e0 [ 466.878384][ C2] ? tlb_remove_table+0xef/0xa60 [ 466.878398][ C2] ? find_held_lock+0x2b/0x80 [ 466.878407][ C2] ? unlink_anon_vmas+0x39b/0x8e0 [ 466.878422][ C2] ? __pfx_flush_tlb_func+0x10/0x10 [ 466.878436][ C2] on_each_cpu_cond_mask+0x40/0x90 [ 466.878448][ C2] kvm_flush_tlb_multi+0x22e/0x370 [ 466.878459][ C2] ? __pfx_kvm_flush_tlb_multi+0x10/0x10 [ 466.878470][ C2] ? get_flush_tlb_info+0x184/0x2b0 [ 466.878483][ C2] flush_tlb_mm_range+0x45f/0x16f0 [ 466.878497][ C2] ? __pfx_free_pgtables+0x10/0x10 [ 466.878510][ C2] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 466.878525][ C2] tlb_finish_mmu+0x3fe/0x810 [ 466.878540][ C2] exit_mmap+0x454/0xa00 [ 466.878554][ C2] ? __pfx_exit_mmap+0x10/0x10 [ 466.878566][ C2] ? rcu_is_watching+0x12/0xc0 [ 466.878582][ C2] ? uprobe_clear_state+0x49/0x260 [ 466.878597][ C2] ? find_held_lock+0x2b/0x80 [ 466.878605][ C2] ? uprobe_clear_state+0x5f/0x260 [ 466.878621][ C2] ? __mutex_unlock_slowpath+0x35d/0x930 [ 466.878636][ C2] ? arch_uprobe_clear_state+0x107/0x150 [ 466.878651][ C2] __mmput+0x12a/0x410 [ 466.878664][ C2] mmput+0x67/0x80 [ 466.878675][ C2] do_exit+0x8b1/0x2ae0 [ 466.878689][ C2] ? anon_pipe_read+0xc1c/0x1200 [ 466.878713][ C2] ? __pfx_do_exit+0x10/0x10 [ 466.878727][ C2] ? do_raw_spin_lock+0x128/0x260 [ 466.878742][ C2] ? find_held_lock+0x2b/0x80 [ 466.878750][ C2] ? get_signal+0x7e0/0x21e0 [ 466.878763][ C2] do_group_exit+0xd5/0x2a0 [ 466.878773][ C2] get_signal+0x1ec7/0x21e0 [ 466.878785][ C2] ? security_file_permission+0x76/0x210 [ 466.878806][ C2] ? rw_verify_area+0xce/0x6d0 [ 466.878828][ C2] ? __pfx_get_signal+0x10/0x10 [ 466.878850][ C2] ? __pfx_vfs_read+0x10/0x10 [ 466.878872][ C2] ? __fput+0x68d/0xb50 [ 466.878893][ C2] arch_do_signal_or_restart+0x91/0x7e0 [ 466.878913][ C2] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 466.878932][ C2] exit_to_user_mode_loop+0x139/0x6f0 [ 466.878946][ C2] ? rcu_is_watching+0x12/0xc0 [ 466.878960][ C2] do_syscall_64+0x666/0x870 [ 466.878972][ C2] ? clear_bhb_loop+0x40/0x90 [ 466.878984][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.878995][ C2] RIP: 0033:0x7f8e1195e84e [ 466.879003][ C2] Code: Unable to access opcode bytes at 0x7f8e1195e824. [ 466.879007][ C2] RSP: 002b:00007fff23b83328 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 466.879017][ C2] RAX: 0000000000000000 RBX: 0000555586462500 RCX: 00007f8e1195e84e [ 466.879023][ C2] RDX: 0000000000000030 RSI: 00007fff23b83420 RDI: 00000000000000f9 [ 466.879029][ C2] RBP: 00007fff23b833cc R08: 0000000000000000 R09: 0000000000000000 [ 466.879035][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000014a [ 466.879041][ C2] R13: 00000000000927c0 R14: 0000000000052535 R15: 00007fff23b83420 [ 466.879050][ C2]