last executing test programs: 10.010465251s ago: executing program 2 (id=1833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 9.955996172s ago: executing program 2 (id=1835): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 9.890099868s ago: executing program 2 (id=1839): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000200)={@val={0xa, 0x88e5}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, "3be0e6", 0xd, 0x3a, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "55d525215833bd91"}}}}}}}}, 0x72) 9.70584055s ago: executing program 2 (id=1845): getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x274) 9.705618619s ago: executing program 2 (id=1846): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000700)={0x48, 0x15, 0x100, 0x70bd2d, 0x25dfdbfc, {0x8, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "40213511e8bacfff05fcceaf54d6adc0cb90b8cb0a76fdaad735a71e43f24c84ba82"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.120347849s ago: executing program 2 (id=1850): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x210000dd) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)) 9.08413638s ago: executing program 32 (id=1850): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x210000dd) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)) 5.893426678s ago: executing program 3 (id=1877): setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=0x200, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80203, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xfffffffffffffffb, 0x9, 0x2b80, 0x4, 0x10003, 0x0, 0x400200cc4, 0x3, 0x50, 0x0, 0x0, 0x2, 0x5, 0x10000000001, 0xb9, 0x8d], 0x70000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.741510238s ago: executing program 3 (id=1878): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x83}]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 5.675853417s ago: executing program 3 (id=1879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$qrtr(0x2a, 0x2, 0x0) 5.675441919s ago: executing program 3 (id=1880): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x13a) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x140) 5.590699452s ago: executing program 3 (id=1881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "c1963bf57e73e3279f"}}}}, 0x3b) 5.1689985s ago: executing program 3 (id=1882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000010, 0x0, 0xfffffffffffffff9}]}) 5.131178362s ago: executing program 33 (id=1882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000010, 0x0, 0xfffffffffffffff9}]}) 4.995174843s ago: executing program 0 (id=1884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000000)="36400f01cb0f23e166baf80cb85a38198aef66bafc0c66ed0f20d835200000000f22d8c744240000000000c744240203000000c7442406000000000f01142466400fe17600c40355680a04260f01c82e410fc7beff413d790fc7b0a729fcd1", 0x5f}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.78959618s ago: executing program 0 (id=1885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4.789188554s ago: executing program 0 (id=1886): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$hiddev(r1, &(0x7f0000001140)=""/126, 0x7e) 4.70560388s ago: executing program 5 (id=1889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xfc, 0x1, 0x6, 0x1}}, @code={0xa, 0x5a, {"c46203f7fe66440f3881b4d1000000000ff1d33e2e650f01f866baf80cb8c43c3e82ef66bafc0cb883000000ef66440f38826b1666b83b018ec8c441ff2deb2ef30fc77202470f01ca"}}], 0xaa}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.88280606s ago: executing program 1 (id=1893): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00222200000096231b06ff0000000000002a900683749e"], 0x0}, 0x0) 2.665362473s ago: executing program 4 (id=1851): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, 0x0, 0x0, 0x800000, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_open_procfs(r2, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) write$FUSE_POLL(r4, &(0x7f0000004500)={0x18, 0xffffffffffffffda, 0x0, {0xf35}}, 0x18) 2.4253158s ago: executing program 0 (id=1894): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.32887344s ago: executing program 0 (id=1895): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.157429992s ago: executing program 0 (id=1896): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60880, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f00000009c0)) 1.084282204s ago: executing program 1 (id=1897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="0f01c4f2a700ef0f01c866b862abd34d0f23c80f21f86635080040000f23f80f20e06635000200000f22e0f30f44e70f01caccf20f08", 0x36}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000005c0)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0x26000, {}, 0x1, 0xc}, {"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", "192650b4208045a71444241d0169d23b90e4c05e1fd221e304d6a8792700dc4c81c9b9741628c6c0812f73baaf040fb0a0f94fefcca199a2bc8ade7d933e6419ab80b6fd0c1df253b43db84458c31596d149e10039d773f3714f0f92af66a89e5504c1bd2b48747119bf189eab32a184d56eaef2b6f247c343e0c5acb7983b7ee492d3da6dbdc94854661c9c3ca5770575218b1bac0a71ba749498316afa64e29814af632be8286db5283fa3769c794b0f307bf3291fa893ddca57c68fa7f860ff8885a06a2595e847d3074efaefbf08d88f0bcc088f6cb19168fa6b7a4b50326e098ba5010d55b5bf7cac301206c77576eeca829f856e969b77ca85ab73c61e35ad44809462b606e3966e3f66018721845439aa947348e911fd9e0b8d5ea733b704c993066e515d5743fe4b7d8f6e40cb9886e6aa0675d899e5e64be6c4cf37be9b889d930fa9609168c0fedd84a8b44dbfb2ecc1368aacf4bd23c6ca051edd61604194f938f1511801262395c3059a723e3e8ca49a30e60c93b9e3ca31e6b3b0a3f33f00dc579be3f7babe5da955bed6b4feee9a6e2c004cf91412c5c8a741d5ab8773707576a173dc4b95cbb098d28f66fd71306f8d0f0dbccaea9a2cbc518842ff12d0ccb0507f085e5cef0e39b3faaf3bdcb59aa13f179ac4edbc9e07e8947c9794c50f97cc76b78484a5432c05b948f3828781d571fafe306c4d7c4489d9839d8cf08fbe722bce8f23928a35ef72606804c41189d4cba0596010c0bc1f3db55d1c25a582e466b50a0bb8d6fd5eb2b6f46104615d4fa2bce4dd3648fbb50bd33506ed473f54824a0f9caf6065c6f6383d75adef0f7d4c2e16d9242d39c9359367c730e6548b16c7f8b3ab8a643daf8343456aa1b11951f54da7ed4e381cc238ffc0bb1755e0ea1c4459dc1920b2544a45b0cadf5aebda4810653f13a762dcc807b22c52b284c46190e55ba7c8e119489ef9c37f0825081b7ba19a8c6dc31b04d81730490e3941ae409f58491e7343d00543f2957968e9bb8642efc2e9a670c3f79043d236dee48f9f390e47bab4f306370b295e4102c7da9a1c9954a757ede2b5a8aac6244c0d734a3f9dc9706da881167a5748564d1a232e8fab172b9f150849b0d7cb5f84c38aa931ef1b8cc4afa967ee851f11fd2fb6e87814437cfe6c086cb3ddb091705669325bcc00cb9a3b7969d07db8cdebc848694549f4e0fa29ad3f200c1b2e767ed4509b2e5ed8cd3d7e7c78c5cff1e1e9bdfbb0b8741d6aac01e09b8969ed2fa9bf35193f7335e223381098a5a2623ba5ba5302f590ddf059dde7d9c0743feb539a46eeeae7c8f5228fb4c9e9b6ffa741e8285aea7a842a415adc9831b4d020262f3e1165a027e00259907db1612f1accfb910bd03efccf173710061f49315c5fa47ae3ec4580bf5a6fb292ff70d382d8f9a16501b6898f5f7b79a7819f00b4df127065cc312737beeb53e61838d53108d75de56c591bf8b0a893e7470899d65578801e9de5ca254f51e5fe4a790a771e877765d0f7042141463e2cfe1cec88b5b43b8ebb414936465f8af335b3218c6f87d57fd71089a51dd8065a603b2af9b9586bfbd07fe3535a91b1033295f0f916d834605bea7d15829a9aa21e47b35797f3c8b386b5d3d021a062e5fde6b98fec8d9d6c623b2840b5593efedfe5f7e585b55603625b56d429965395c8cff28c1a69736b1c23b1fe898a56e5af3d41156e3a9cd3e44eb734ad859f463ae2ce221674d62b609dbdea1901194c9406411a3610556e25f1f1511a5ce8dbe579340ca57009b9f793a85d886222dee4b1f597e468dffd0cca97a2d8fe743c2689c408cf5ab30bf23af4423b9602842f267117df4977b52e8acd5ec9b5eb867dc0708291dcbb70e0868b3be946e229d08057ef06bec185ac8babf7277852678b3f1fb3624fd0d4e363983718fc0834ba59ff2f00bac77349487e322734525da2b788451de8e71712fb1ef95ba34289ce9219b483c009237ce8af2cbfea891fc23044e30e806bddf702b43fd88d5440958f560ff91ee8696d2ed664b91f29bbb6add0bf2eeefaa0f743557f8169b75fb1f64670606b05a2caf4f1ee7c06021bb5a01f2bd369eb554802b963358e2028b0281277e24b8d169e957fe0222a99bfeef741e6d58a134afe02e24a2f0136a84f256587a6eb5ff4a0c089caec3d2c0b94e45937800cc2ca7791f5d9fcb497a6f1f7aaeb370d6b18ab191bf79bcc13b4e55f413d12715447f42b5ae496d9bb0bcfaf1dd0260bc0a8b56146e6aa9bd8e19aa3032fe8a723c33b351b0b72a11fd4078bf3fec6d3b59d050a9a57226ce2206d8f8b07075d9f33cc64412edbba1c9a663b8ddebd9d0784fcdd216e4a41a28c03d909383bfa25da1a8009f073fd16883cafb8fa97490e271e4038fa9f638189f3b71bc696cf9ec079f7d3f43cbf798af7e1a68a1799e9cb1fdb96b011336ceaf5a1f05c4995cc608c470a748817a8216368f8b61f9b1c720a1bd2da0398731e0f69b7fe057fb8f052c7d53439612879a4e5ddc79c2b8e76a655d60be18297fe7841b17ff11a577b1851be12544322db49d6f9c7711ce0a6192ec5a25f9cfad189bf19c05f0e39cbb5690434f8b518a8bb277a784e67df7939e57d74417eb4a18404bbc34130c4b83c5dbece49cd79bd938f3be797c8a4308dd3d8f309e7dd465ecc93c3587adea7d8fa4cd5ed25f11147dea66b507e13cebd9ac30ae3c640995bd6be1eba790ee70b88180ab52c6a720d5ac90ff6fd80d266c6783168c665a1c85b631b49681df18ab77751f6a7983be2f2e61b805d42e708f829fa298f1d24417f26c473feb1fcc73ed4f15454bd3b7c0e55731c52b848483b73ca5e12366a52a84b07368b791374be5bab6757d809ad6678b11ceee9251e282b8f54631ddf2774a50bb696cc85b9fcd5577498e248f5beb212eaf6bc217009403b18575fd87c6802cd305d7128a8d291fa317fc5aaf99b37fc0ced25d8613549275e927407a0fd0e4f0361b2dd7b1b30ac76772704c6ea8c62afa0256578c528aa0b75d80ea1ecc6bbf45a921bc282acd4a8a18dcf3d08b7cbd1c4938ac1f3f1e8a201dad771891cb9dca4c608f9187f5ae49fd2104879a7e4297b21c349516ec3a68e0e0416118ab2b61ac0bc0782d2ead3889b6c2cbc5929eeff0623fc240f9abed8c805ca6dfaee791f910f4c4a2605b545298356ce5ee4617a83aed9e8ac1f32f6e0c0158546916e422dd3c8522be7c8759a731a0aa2e35045b29853adb9fb0fe9e0ccc0c82c0f80baaf631cf11c684fcded14c0ceffbca59f62eb614face68be183d7eae61bfba7b65749697b7dc852c179c240751f22684dcf7c447bad9592a59dd414b1993c7cc4dd77a0366a8388860c18ed7dc4aa7b91d858325126112f0d769f45786a7e7d061c3db637d77cee2e5021e59bb338d7d400ab4a87250c71a372178e57c917da0a9048f3c627ea9dbbaa95feec016a20bb1effed778cc0d898415615033ce815ed335d21071fb890204ba19451f8227a5b4b4e8fe076dcd2b0cef938c07fb2a3cca7de1d48fafcc0afea0fe471d84a6d8dee4fa90f540acbf6de845a14ed195e6f628f36f2f3624c9d69ee1bde953d8fee14949a408494ad2d1662cf7d25ec4b6e363d50cbffafa2a724c3bea7e4ac6dc2a1b85b46ec45f76de82f94e79273bb569c292a3641013a481dffe64059384e60ff9f85dc45dcda892ccb6b8c7c56ade260443aa02614ed6bae4b3b8d62b52b65eafb9fccc6bee6a666348d93887a414717915507a99baa11566c5ef88a557539288d47f772f0d44d06cd8ae868e49549fda97edc82578b364d6cb2c654d604ffe3f17e3ced857d12c34a920d3b05ccd299991b1d230238009d0841a166eb893a52ab2349b22b2d692eed8d5b0dec7c0d770dd13cb41e7d607f0c02f08c5076365769d20f319dfe9a865c98002ab5ef3395e767286938aa9d0626fe01f916948033abe0a5b699f05aa280ffa5914c574faa1c176c2b571c489a431e29a614eb519133625f65bd886aadef31b9965eccfed1ed02814ba18a20f13ffef2ccf4ed3f057612d75674f81b0832842dd2c87a7c33c8f1b0c40e5175fc46d50d6fcd9b607bb4f1f49b35fece376f13679ce370dac906edbc34158bd4ba27028c4f2d1aa33379e102ee347c2de8405279f4320bcc839109c4bfc5b14d0f4642a90ad13165c541252b7115fc290b621e4c02d09ae2778328e8c0750c892ab1c757b7b797a42bcceb412e5210afa0e380ab1fe3f2a67809e3fac6a0597e8b14894194e4c17db8c194f74825c1ef770e64cb07675b067f4a2ffaf9cf58a83085489a6b4b710e33835ff3e942d1ebf41b2a3aea0f04c7dd54b3005d47b93bfc36d1f8c80ba7a29e3afc8e48fd07ea42d3049ddb4ae1922faf7c5d5c266d737a91610a0403ecba4d7bfd578c179769a54b54eb0c2a6450ce3b690539a211620a2311196a61b68f11ce087645713b68d7cbc3fbfaba3cd29dcb7ff1a33ddd2291f617f8140aa51292244dd9022b8274034f0e94000b84b7cc5eaf2303297d9a2cce81acb242920b6c086e4fa19a4edd187bd2bfffb7b492a900e24b405e80ab7446ef81012e3685dd174feea6a61c73bdb74450d1f8ffae3680d495ddd864671cfedb0b00941d1a33bf0156eb9aee5f4b15fdf1262a2dbe27379d164ed45c0f5c29d4b8a20c663ef8fe871c8076e11cf2c292849f381d0ba84ea082f622426ff436bd9025744a5773009e662b8ab0e8298a92dfe544181eaf6f76b1acc55d87f744c391ee528138fb02beadfa5ac0f3cf12928bbff43681a2b5a3679036b59e8fa34d4e01a0ab97fbafe01f9e29fdb4e20ac9a265c1b061ab283a34cd61bad6abf5f46a10e50bcd05002ae5af2ca88b12c2afad57e00977ff95a6987a8d4c73b40142db89ed4b892dde350597fb4585ccb1fb53742cbfc6d35eb9325df20f4a24ee89418c9b182f469af47d813e2db71b88ae8b647208ff8ccbd38304327bd69ac044947dec9c33271882c3ca5a064ca76f78cf3d0c61a0ac3d84c11b9ce8fea68dbf07c3578ff3004c620e2c4bfe67717a75d7893ceeddc220e647928c000bcdba19493b36dd49d79390cfd507d1e25274e1dc73181ac26156fb640684083cfdb2cb26c4a7c2d1df4466bfd76eb5d4965b10cbf84a5901832afcb77c5303f07917adfed630026a0401a98daa6222a9babadd385d066888ecafaf3e675865f9ebb40291ad0d634e9ca8b68332d54cfca9b093d0b5f2783b7c815d870b1c9f221d73ccb3b0439b57f2fdec32b012f6f1bf09ec4e06ed3d19c596e46fa8a95d4fa8deca65b42bbbd094dcd4fea4995ae716e7ea83fcc86db6fac68c98bb5f61beae3381c2960a849b23d9a4d6af86a77e26a855449f02a36991d73b86ed47f4321a291b2a12d017cda81a8c255b697a0179794dbfbf77ea38f3e397a36dacf773ad60fb7705c0c2ccf4110e8deeaeffbec3110aeb423be513caac296ea8396eeee12d80e17191324e8162ade6fff4e45452faa4f150f265e9087d5bb593337e11fe6b14b2d75e8951ff0a477c2e5d6ff6b30b9b4d37f43baab9a5849fafecd116df774b03aca75edb898b15dbc918418f837d93e8d6c62b13be12596348905c44416c418222362a733d3b2f58e2cc106e35affe8ba7e7c53d0c96647d6865b086950d57eeeeb18539c8a6b68399a55d405972803027648d67f9cf10a1605f6f06dd0a51fb68079672b625ac3bc464ea73805de0d8a39f818431ca00"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 879.444723ms ago: executing program 1 (id=1898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 879.00339ms ago: executing program 1 (id=1899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "c1963bf57e73e3279f"}}}}, 0x3b) 803.502125ms ago: executing program 1 (id=1900): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) 803.177675ms ago: executing program 1 (id=1901): mknodat$null(0xffffffffffffffff, 0x0, 0x1000, 0x103) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000280), &(0x7f0000000680)=@ng={0x4, 0x11, 'A'}, 0x3, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) socket$netlink(0x10, 0x3, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="ee0d06000000060a"], 0x0}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 0s ago: executing program 5 (id=1889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xfc, 0x1, 0x6, 0x1}}, @code={0xa, 0x5a, {"c46203f7fe66440f3881b4d1000000000ff1d33e2e650f01f866baf80cb8c43c3e82ef66bafc0cb883000000ef66440f38826b1666b83b018ec8c441ff2deb2ef30fc77202470f01ca"}}], 0xaa}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=1902): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xfffe) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00@']) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x11, r2, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) kernel console output (not intermixed with test programs): 1.478554][ T9548] syzkaller0: mtu greater than device maximum [ 191.490441][ T9547] tipc: Disabling bearer [ 191.663441][ T9561] syzkaller0: entered promiscuous mode [ 191.665225][ T9561] syzkaller0: entered allmulticast mode [ 191.859109][ T9567] bridge0: port 1(1x9) entered blocking state [ 191.861468][ T9567] bridge0: port 1(1x9) entered forwarding state [ 191.868083][ T9567] bridge0: port 1(1x9) entered disabled state [ 191.899407][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 191.899418][ T40] audit: type=1400 audit(1780874912.293:690): avc: denied { connect } for pid=9568 comm="syz.2.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.964110][ T9575] syzkaller0: entered promiscuous mode [ 191.964923][ T9574] netlink: 'syz.2.1157': attribute type 5 has an invalid length. [ 191.966441][ T9575] syzkaller0: entered allmulticast mode [ 192.184112][ T40] audit: type=1400 audit(1780874912.583:691): avc: denied { write } for pid=9582 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.210965][ T40] audit: type=1400 audit(1780874912.613:692): avc: denied { ioctl } for pid=9590 comm="syz.3.1163" path="socket:[28355]" dev="sockfs" ino=28355 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 192.297068][ T9591] XFS (loop3): SB validate failed with error -5. [ 192.473040][ T9614] syzkaller0: entered promiscuous mode [ 192.474803][ T9614] syzkaller0: entered allmulticast mode [ 192.603746][ T9616] xt_bpf: check failed: parse error [ 192.606174][ T9616] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 192.621905][ T9616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.757848][ T9635] binder: Binderfs stats mode cannot be changed during a remount [ 192.762612][ T40] audit: type=1400 audit(1780874913.153:693): avc: denied { remount } for pid=9634 comm="syz.1.1173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 192.774503][ T9637] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 192.778078][ T9637] SELinux: failed to load policy [ 192.852965][ T9643] netlink: get zone limit has 4 unknown bytes [ 192.857327][ T9643] syzkaller0: entered promiscuous mode [ 192.859747][ T9643] syzkaller0: entered allmulticast mode [ 192.860317][ T5845] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 192.888405][ T9645] __nla_validate_parse: 5 callbacks suppressed [ 192.888420][ T9645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1178'. [ 192.897210][ T9645] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1178'. [ 192.903856][ T9645] FAULT_INJECTION: forcing a failure. [ 192.903856][ T9645] name failslab, interval 1, probability 0, space 0, times 0 [ 192.909543][ T9639] kvm: MONITOR instruction emulated as NOP! [ 192.913206][ T9645] CPU: 0 UID: 0 PID: 9645 Comm: syz.1.1178 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.913234][ T9645] Tainted: [L]=SOFTLOCKUP [ 192.913240][ T9645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.913250][ T9645] Call Trace: [ 192.913257][ T9645] [ 192.913264][ T9645] dump_stack_lvl+0x100/0x190 [ 192.913289][ T9645] should_fail_ex.cold+0x5/0xa [ 192.913313][ T9645] should_failslab+0xc2/0x120 [ 192.913333][ T9645] __kmalloc_cache_noprof+0x7a/0x6f0 [ 192.913357][ T9645] ? __hw_addr_create+0x57/0x220 [ 192.913381][ T9645] __hw_addr_create+0x57/0x220 [ 192.913401][ T9645] __hw_addr_add_ex+0x32b/0x650 [ 192.913421][ T9645] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 192.913441][ T9645] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 192.913465][ T9645] ? arp_mc_map+0x1e2/0x9c0 [ 192.913495][ T9645] dev_mc_add+0xae/0x100 [ 192.913517][ T9645] igmp_group_added+0x83a/0x9a0 [ 192.913538][ T9645] ? __pfx_igmp_group_added+0x10/0x10 [ 192.913565][ T9645] ? __local_bh_enable_ip+0x9e/0x120 [ 192.913591][ T9645] ____ip_mc_inc_group+0x7d6/0x10c0 [ 192.913613][ T9645] ? __pfx_____ip_mc_inc_group+0x10/0x10 [ 192.913634][ T9645] ? ib_device_get_by_netdev+0x1b2/0x530 [ 192.913657][ T9645] ip_mc_up+0x154/0x390 [ 192.913676][ T9645] inetdev_event+0x6c3/0x17f0 [ 192.913697][ T9645] ? ib_netdevice_event+0xfc/0x330 [ 192.913715][ T9645] ? __pfx_inetdev_event+0x10/0x10 [ 192.913738][ T9645] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.913761][ T9645] notifier_call_chain+0x99/0x400 [ 192.913783][ T9645] call_netdevice_notifiers_info+0xbe/0x110 [ 192.913800][ T9645] __dev_notify_flags+0x12c/0x2e0 [ 192.913820][ T9645] ? __pfx___dev_notify_flags+0x10/0x10 [ 192.913874][ T9645] ? __pfx___dev_change_flags+0x10/0x10 [ 192.913900][ T9645] ? validate_linkmsg+0x57c/0xba0 [ 192.913933][ T9645] netif_change_flags+0x108/0x160 [ 192.913960][ T9645] do_setlink.isra.0+0x1ac4/0x3e60 [ 192.913994][ T9645] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 192.914025][ T9645] ? __lock_acquire+0x4a5/0x2630 [ 192.914055][ T9645] ? lock_acquire+0x1b1/0x370 [ 192.914080][ T9645] ? rcu_is_watching+0x12/0xc0 [ 192.914103][ T9645] ? trace_contention_end+0x122/0x170 [ 192.914128][ T9645] ? __mutex_lock+0x26d/0x1b10 [ 192.914149][ T9645] ? rtnl_newlink+0x8bb/0x2380 [ 192.914178][ T9645] ? __pfx___mutex_lock+0x10/0x10 [ 192.914201][ T9645] ? rcu_is_watching+0x12/0xc0 [ 192.914225][ T9645] ? cap_capable+0x10b/0x440 [ 192.914257][ T9645] rtnl_newlink+0x11c2/0x2380 [ 192.914284][ T9645] ? __pfx_rtnl_newlink+0x10/0x10 [ 192.914313][ T9645] ? __lock_acquire+0x4a5/0x2630 [ 192.914335][ T9645] ? __pfx___schedule+0x10/0x10 [ 192.914364][ T9645] ? find_held_lock+0x2b/0x80 [ 192.914377][ T9645] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 192.914401][ T9645] ? rcu_is_watching+0x12/0xc0 [ 192.914426][ T9645] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 192.914447][ T9645] ? lockdep_hardirqs_on+0x78/0x100 [ 192.914467][ T9645] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.914488][ T9645] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 192.914513][ T9645] ? rcu_is_watching+0x12/0xc0 [ 192.914541][ T9645] ? __pfx_rtnl_newlink+0x10/0x10 [ 192.914569][ T9645] rtnetlink_rcv_msg+0x95e/0xe90 [ 192.914588][ T9645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.914611][ T9645] ? ref_tracker_free+0x37e/0x6c0 [ 192.914639][ T9645] netlink_rcv_skb+0x159/0x420 [ 192.914661][ T9645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.914675][ T9645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.914700][ T9645] ? netlink_deliver_tap+0x1ae/0xcc0 [ 192.914726][ T9645] netlink_unicast+0x585/0x850 [ 192.914750][ T9645] ? __pfx_netlink_unicast+0x10/0x10 [ 192.914778][ T9645] netlink_sendmsg+0x8b0/0xda0 [ 192.914802][ T9645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.914837][ T9645] ____sys_sendmsg+0x9e1/0xb70 [ 192.914856][ T9645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.914877][ T9645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.914909][ T9645] ___sys_sendmsg+0x190/0x1e0 [ 192.914931][ T9645] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.914974][ T9645] __sys_sendmsg+0x170/0x220 [ 192.915001][ T9645] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.915036][ T9645] ? rcu_is_watching+0x12/0xc0 [ 192.915065][ T9645] do_syscall_64+0x115/0x870 [ 192.915087][ T9645] ? clear_bhb_loop+0x40/0x90 [ 192.915108][ T9645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.915126][ T9645] RIP: 0033:0x7f29b999ce59 [ 192.915142][ T9645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.915158][ T9645] RSP: 002b:00007f29ba7b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.915175][ T9645] RAX: ffffffffffffffda RBX: 00007f29b9c15fa0 RCX: 00007f29b999ce59 [ 192.915186][ T9645] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 192.915196][ T9645] RBP: 00007f29ba7b1090 R08: 0000000000000000 R09: 0000000000000000 [ 192.915206][ T9645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.915216][ T9645] R13: 00007f29b9c16038 R14: 00007f29b9c15fa0 R15: 00007fff103b0c38 [ 192.915239][ T9645] [ 192.917716][ T9645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1178'. [ 192.941515][ T40] audit: type=1400 audit(1780874913.343:694): avc: denied { read } for pid=9638 comm="syz.2.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.942358][ T9639] kvm: user requested TSC rate below hardware speed [ 193.019890][ T5845] usb 8-1: Using ep0 maxpacket: 8 [ 193.062614][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 193.065112][ T5845] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 193.081051][ T9651] ip6tnl1: entered promiscuous mode [ 193.085058][ T5845] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 193.125531][ T5845] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.128714][ T5845] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.132771][ T5845] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.135524][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.341987][ T5845] usb 8-1: GET_CAPABILITIES returned 0 [ 193.343809][ T5845] usbtmc 8-1:16.0: can't read capabilities [ 193.392293][ T5853] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 193.539916][ T5853] usb 6-1: Using ep0 maxpacket: 8 [ 193.542764][ T5853] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 193.545180][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 193.545353][ T5853] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.551348][ T5853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.552492][ T9616] vlan3: entered allmulticast mode [ 193.554283][ T5853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.555887][ T9616] veth0_to_bond: entered allmulticast mode [ 193.559634][ T5853] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.559662][ T5853] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.559674][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.572189][ T9616] bond2: (slave vlan3): making interface the new active one [ 193.576372][ T9616] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 193.583110][ T5845] usb 8-1: USB disconnect, device number 34 [ 193.776179][ T5853] usb 6-1: GET_CAPABILITIES returned 0 [ 193.777914][ T5853] usbtmc 6-1:16.0: can't read capabilities [ 194.032371][ T9659] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 194.234141][ T9659] virtio-fs: tag not found [ 194.293063][ T5853] usb 6-1: USB disconnect, device number 20 [ 199.093509][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.095512][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.925971][ T9674] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1187'. [ 209.930289][ T9674] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1187'. [ 209.936840][ T9674] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1187'. [ 210.188576][ T9707] tipc: Enabled bearer , priority 0 [ 210.193775][ T9707] syzkaller0: mtu less than device minimum [ 210.203812][ T9706] tipc: Disabling bearer [ 210.370991][ T9714] tipc: Enabled bearer , priority 0 [ 210.373440][ T9714] syzkaller0: entered promiscuous mode [ 210.375070][ T9714] syzkaller0: entered allmulticast mode [ 210.378173][ T9714] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 210.396765][ T9714] tipc: Resetting bearer [ 210.419956][ T5853] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 210.453546][ T9713] tipc: Resetting bearer [ 210.463212][ T9713] tipc: Disabling bearer [ 210.536674][ T40] audit: type=1400 audit(1780874930.933:695): avc: denied { listen } for pid=9715 comm="syz.0.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.594683][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 210.598662][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 210.604339][ T5853] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 210.607918][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.610732][ T5853] usb 6-1: Product: syz [ 210.612243][ T5853] usb 6-1: Manufacturer: syz [ 210.613799][ T5853] usb 6-1: SerialNumber: syz [ 210.622801][ T5853] usb 6-1: config 0 descriptor?? [ 210.626268][ T5853] hub 6-1:0.0: bad descriptor, ignoring hub [ 210.628280][ T5853] hub 6-1:0.0: probe with driver hub failed with error -5 [ 210.634291][ T5853] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input24 [ 210.746845][ T9725] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1200'. [ 210.884356][ T9730] netlink: 'syz.1.1193': attribute type 12 has an invalid length. [ 210.965495][ T9733] tipc: Resetting bearer [ 210.968924][ T9733] syzkaller0: left promiscuous mode [ 211.100423][ T5853] usb 6-1: USB disconnect, device number 21 [ 211.374206][ T40] audit: type=1400 audit(1780874931.773:696): avc: denied { setopt } for pid=9734 comm="syz.0.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 211.403064][ T40] audit: type=1400 audit(1780874931.803:697): avc: denied { ioctl } for pid=9736 comm="syz.0.1204" path="socket:[30991]" dev="sockfs" ino=30991 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 211.496571][ T9741] netlink: 'syz.0.1206': attribute type 11 has an invalid length. [ 211.540158][ T9743] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1207'. [ 211.544933][ T9743] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1207'. [ 211.548732][ T9743] bridge0: port 1(1x9) entered blocking state [ 211.551695][ T9743] bridge0: port 1(1x9) entered forwarding state [ 211.555927][ T9743] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1207'. [ 211.563015][ T9743] bridge0: port 1(1x9) entered disabled state [ 211.723428][ T40] audit: type=1400 audit(1780874932.123:698): avc: denied { write } for pid=9752 comm="syz.3.1212" name="/" dev="9p" ino=80740435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.734052][ T40] audit: type=1400 audit(1780874932.133:699): avc: denied { lock } for pid=9752 comm="syz.3.1212" path="/271/file0/cpuacct.usage_user" dev="9p" ino=80740469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.819146][ T40] audit: type=1400 audit(1780874932.213:700): avc: denied { append } for pid=9768 comm="syz.1.1216" path="socket:[29042]" dev="sockfs" ino=29042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.347012][ T40] audit: type=1800 audit(1780874932.743:701): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.1224" name="/newroot/278/file0" dev="tmpfs" ino=1454 res=0 errno=0 [ 212.389235][ T9810] tipc: Enabling of bearer rejected, already enabled [ 212.393508][ T9810] syzkaller0: entered promiscuous mode [ 212.399295][ T9810] syzkaller0: mtu less than device minimum [ 212.428099][ T40] audit: type=1400 audit(1780874932.823:702): avc: denied { ioctl } for pid=9811 comm="syz.3.1227" path="socket:[30030]" dev="sockfs" ino=30030 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.475253][ T40] audit: type=1400 audit(1780874932.873:703): avc: denied { name_bind } for pid=9815 comm="syz.0.1229" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 212.536304][ T40] audit: type=1400 audit(1780874932.933:704): avc: denied { create } for pid=9821 comm="syz.0.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.563049][ T9822] xt_hashlimit: max too large, truncated to 1048576 [ 212.817517][ T9847] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1239'. [ 212.827931][ T9847] netlink: 'syz.2.1239': attribute type 1 has an invalid length. [ 212.832179][ T9847] netlink: 'syz.2.1239': attribute type 2 has an invalid length. [ 212.835488][ T9847] netlink: 'syz.2.1239': attribute type 2 has an invalid length. [ 212.990949][ T9854] macsec1: entered promiscuous mode [ 212.992634][ T9854] macsec1: entered allmulticast mode [ 212.995448][ T9857] tipc: Enabled bearer , priority 0 [ 213.027812][ T9855] tipc: Disabling bearer [ 213.042036][ T9862] syzkaller0: entered promiscuous mode [ 213.043876][ T9862] syzkaller0: entered allmulticast mode [ 213.160321][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.167482][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.267878][ T9879] syzkaller0: entered promiscuous mode [ 213.267890][ T9879] syzkaller0: entered allmulticast mode [ 213.444708][ T9841] openvswitch: netlink: Flow key attr not present in new flow. [ 213.477826][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 213.570095][ T50] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 213.628917][ T9894] overlayfs: failed to resolve './file0': -2 [ 213.702130][ T50] usb 8-1: device descriptor read/64, error -71 [ 213.719122][ T9901] syzkaller0: entered promiscuous mode [ 213.721271][ T9901] syzkaller0: entered allmulticast mode [ 213.803659][ T9906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1257'. [ 213.873348][ T9914] bridge0: port 1(1x9) entered blocking state [ 213.876039][ T9914] bridge0: port 1(1x9) entered forwarding state [ 213.878592][ T9914] FAULT_INJECTION: forcing a failure. [ 213.878592][ T9914] name failslab, interval 1, probability 0, space 0, times 0 [ 213.883528][ T9914] CPU: 3 UID: 0 PID: 9914 Comm: syz.0.1259 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.883557][ T9914] Tainted: [L]=SOFTLOCKUP [ 213.883563][ T9914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.883572][ T9914] Call Trace: [ 213.883577][ T9914] [ 213.883583][ T9914] dump_stack_lvl+0x100/0x190 [ 213.883613][ T9914] should_fail_ex.cold+0x5/0xa [ 213.883635][ T9914] should_failslab+0xc2/0x120 [ 213.883653][ T9914] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 213.883676][ T9914] ? __alloc_skb+0x140/0x710 [ 213.883709][ T9914] __alloc_skb+0x140/0x710 [ 213.883729][ T9914] ? __alloc_skb+0x5b7/0x710 [ 213.883750][ T9914] ? __pfx___alloc_skb+0x10/0x10 [ 213.883772][ T9914] ? __timer_delete+0xec/0x1b0 [ 213.883792][ T9914] br_info_notify+0x10f/0x2e0 [ 213.883815][ T9914] br_make_forwarding+0x137/0x260 [ 213.883832][ T9914] br_port_state_selection+0x4c3/0x640 [ 213.883853][ T9914] br_stp_enable_bridge+0x1f1/0x350 [ 213.883872][ T9914] br_dev_open+0xae/0x150 [ 213.883890][ T9914] ? __pfx_br_dev_open+0x10/0x10 [ 213.883905][ T9914] __dev_open+0x3ad/0x8f0 [ 213.883921][ T9914] ? __pfx___dev_open+0x10/0x10 [ 213.883939][ T9914] ? __local_bh_enable_ip+0x9e/0x120 [ 213.883963][ T9914] __dev_change_flags+0x596/0x850 [ 213.883986][ T9914] ? __pfx___dev_change_flags+0x10/0x10 [ 213.884007][ T9914] ? find_held_lock+0x2b/0x80 [ 213.884019][ T9914] ? validate_linkmsg+0x57c/0xba0 [ 213.884041][ T9914] ? is_bpf_text_address+0x8a/0x1a0 [ 213.884060][ T9914] ? is_bpf_text_address+0x8a/0x1a0 [ 213.884079][ T9914] ? __pfx_validate_linkmsg+0x10/0x10 [ 213.884104][ T9914] netif_change_flags+0x8d/0x160 [ 213.884128][ T9914] do_setlink.isra.0+0x1ac4/0x3e60 [ 213.884154][ T9914] ? __lock_acquire+0x4a5/0x2630 [ 213.884175][ T9914] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 213.884203][ T9914] ? __lock_acquire+0x4a5/0x2630 [ 213.884230][ T9914] ? lock_acquire+0x1b1/0x370 [ 213.884252][ T9914] ? rcu_is_watching+0x12/0xc0 [ 213.884275][ T9914] ? trace_contention_end+0x122/0x170 [ 213.884297][ T9914] ? __mutex_lock+0x26d/0x1b10 [ 213.884324][ T9914] ? rtnl_newlink+0x8bb/0x2380 [ 213.884352][ T9914] ? __pfx___mutex_lock+0x10/0x10 [ 213.884373][ T9914] ? rcu_is_watching+0x12/0xc0 [ 213.884395][ T9914] ? cap_capable+0x10b/0x440 [ 213.884433][ T9914] rtnl_newlink+0x11c2/0x2380 [ 213.884463][ T9914] ? __pfx_rtnl_newlink+0x10/0x10 [ 213.884486][ T9914] ? find_held_lock+0x2b/0x80 [ 213.884500][ T9914] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 213.884518][ T9914] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 213.884544][ T9914] ? avc_has_perm_noaudit+0x145/0x3b0 [ 213.884567][ T9914] ? __lock_acquire+0x4a5/0x2630 [ 213.884596][ T9914] ? find_held_lock+0x2b/0x80 [ 213.884610][ T9914] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 213.884624][ T9914] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 213.884640][ T9914] ? __pfx_rtnl_newlink+0x10/0x10 [ 213.884664][ T9914] rtnetlink_rcv_msg+0x95e/0xe90 [ 213.884681][ T9914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.884702][ T9914] ? ref_tracker_free+0x37e/0x6c0 [ 213.884728][ T9914] netlink_rcv_skb+0x159/0x420 [ 213.884746][ T9914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.884759][ T9914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.884777][ T9914] ? netlink_deliver_tap+0x1ae/0xcc0 [ 213.884792][ T9914] netlink_unicast+0x585/0x850 [ 213.884808][ T9914] ? __pfx_netlink_unicast+0x10/0x10 [ 213.884825][ T9914] netlink_sendmsg+0x8b0/0xda0 [ 213.884840][ T9914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.884858][ T9914] ____sys_sendmsg+0x9e1/0xb70 [ 213.884870][ T9914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.884885][ T9914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.884903][ T9914] ___sys_sendmsg+0x190/0x1e0 [ 213.884917][ T9914] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.884945][ T9914] __sys_sendmsg+0x170/0x220 [ 213.884963][ T9914] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.884985][ T9914] ? rcu_is_watching+0x12/0xc0 [ 213.885003][ T9914] do_syscall_64+0x115/0x870 [ 213.885017][ T9914] ? clear_bhb_loop+0x40/0x90 [ 213.885030][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.885043][ T9914] RIP: 0033:0x7f54e4f9ce59 [ 213.885053][ T9914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.885063][ T9914] RSP: 002b:00007f54e5ec8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.885074][ T9914] RAX: ffffffffffffffda RBX: 00007f54e5215fa0 RCX: 00007f54e4f9ce59 [ 213.885081][ T9914] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 213.885087][ T9914] RBP: 00007f54e5ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 213.885093][ T9914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.885100][ T9914] R13: 00007f54e5216038 R14: 00007f54e5215fa0 R15: 00007ffd52f666f8 [ 213.885113][ T9914] [ 213.889147][ T9914] bridge0: port 1(1x9) entered disabled state [ 213.939956][ T50] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 214.191418][ T50] usb 8-1: device descriptor read/64, error -71 [ 214.226438][ T9935] syzkaller0: entered promiscuous mode [ 214.228234][ T9935] syzkaller0: entered allmulticast mode [ 214.300111][ T50] usb usb8-port1: attempt power cycle [ 214.597443][ T9956] syz.0.1270 (9956): attempted to duplicate a private mapping with mremap. This is not supported. [ 214.603380][ T9956] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 214.606429][ T9956] /dev/nullb0: Can't open blockdev [ 214.640965][ T50] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 214.671107][ T50] usb 8-1: device descriptor read/8, error -71 [ 214.702388][ T9960] syzkaller0: entered promiscuous mode [ 214.704178][ T9960] syzkaller0: entered allmulticast mode [ 214.845822][ T9968] tipc: Enabled bearer , priority 0 [ 214.858016][ T9966] syzkaller0: entered promiscuous mode [ 214.859728][ T9966] syzkaller0: entered allmulticast mode [ 214.865786][ T9968] syzkaller0: mtu less than device minimum [ 214.882686][ T9967] tipc: Disabling bearer [ 214.910239][ T50] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 214.930885][ T50] usb 8-1: device descriptor read/8, error -71 [ 215.040639][ T50] usb usb8-port1: unable to enumerate USB device [ 215.279315][ T9989] tipc: Enabled bearer , priority 0 [ 215.282745][ T9989] syzkaller0: entered promiscuous mode [ 215.284974][ T9989] syzkaller0: entered allmulticast mode [ 215.289363][ T9989] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 215.308163][ T9989] tipc: Resetting bearer [ 215.324504][ T9988] tipc: Resetting bearer [ 215.347067][ T9988] tipc: Disabling bearer [ 215.587124][T10006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 216.189938][ T5825] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 216.262508][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 216.262525][ T40] audit: type=1400 audit(1780874936.663:710): avc: denied { call } for pid=10024 comm="syz.0.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 216.307937][T10027] __nla_validate_parse: 8 callbacks suppressed [ 216.307954][T10027] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1290'. [ 216.314733][T10027] netlink: ct family unspecified [ 216.339994][ T5825] usb 7-1: Using ep0 maxpacket: 32 [ 216.343839][ T5825] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 216.347407][ T5825] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 216.351218][ T5825] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 216.354785][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.358828][ T5825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 216.362928][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 216.368071][ T5825] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 216.372208][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.377662][ T5825] usb 7-1: config 0 descriptor?? [ 216.591362][ T5825] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 216.606193][ T5825] usb 7-1: USB disconnect, device number 20 [ 216.615110][ T5825] usblp0: removed [ 217.030127][ T5825] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 217.190144][ T5825] usb 7-1: Using ep0 maxpacket: 32 [ 217.194314][ T5825] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 217.197659][ T5825] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 217.201321][ T5825] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 217.204911][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.208739][ T5825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 217.212438][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 217.217667][ T5825] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 217.221446][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.227232][ T5825] usb 7-1: config 0 descriptor?? [ 217.440638][ T5825] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 217.647191][ T50] usb 7-1: USB disconnect, device number 21 [ 217.655769][ T50] usblp0: removed [ 229.690860][T10051] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 229.724262][T10053] syzkaller0: entered promiscuous mode [ 229.726017][T10053] syzkaller0: entered allmulticast mode [ 229.726368][T10055] kAFS: No cell specified [ 229.734180][T10053] FAULT_INJECTION: forcing a failure. [ 229.734180][T10053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.739940][T10053] CPU: 1 UID: 0 PID: 10053 Comm: syz.1.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.739959][T10053] Tainted: [L]=SOFTLOCKUP [ 229.739962][T10053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.739969][T10053] Call Trace: [ 229.739974][T10053] [ 229.739978][T10053] dump_stack_lvl+0x100/0x190 [ 229.739994][T10053] should_fail_ex.cold+0x5/0xa [ 229.740010][T10053] _copy_from_iter+0x43a/0x1690 [ 229.740028][T10053] ? __pfx__copy_from_iter+0x10/0x10 [ 229.740043][T10053] ? __pfx__copy_from_iter+0x10/0x10 [ 229.740056][T10053] ? _copy_from_iter+0x270/0x1690 [ 229.740072][T10053] copy_page_from_iter+0x238/0x300 [ 229.740088][T10053] skb_copy_datagram_from_iter+0x399/0x720 [ 229.740108][T10053] packet_sendmsg+0x227e/0x5100 [ 229.740127][T10053] ? __lock_acquire+0x4a5/0x2630 [ 229.740143][T10053] ? sock_has_perm+0x25a/0x2f0 [ 229.740158][T10053] ? __pfx_sock_has_perm+0x10/0x10 [ 229.740173][T10053] ? __pfx_packet_sendmsg+0x10/0x10 [ 229.740195][T10053] ____sys_sendmsg+0x9e1/0xb70 [ 229.740206][T10053] ? __pfx_packet_sendmsg+0x10/0x10 [ 229.740222][T10053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.740240][T10053] ___sys_sendmsg+0x190/0x1e0 [ 229.740255][T10053] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.740283][T10053] __sys_sendmsg+0x170/0x220 [ 229.740302][T10053] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.740324][T10053] ? rcu_is_watching+0x12/0xc0 [ 229.740343][T10053] do_syscall_64+0x115/0x870 [ 229.740357][T10053] ? clear_bhb_loop+0x40/0x90 [ 229.740370][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.740381][T10053] RIP: 0033:0x7f29b999ce59 [ 229.740390][T10053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.740401][T10053] RSP: 002b:00007f29ba7b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.740411][T10053] RAX: ffffffffffffffda RBX: 00007f29b9c15fa0 RCX: 00007f29b999ce59 [ 229.740418][T10053] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000007 [ 229.740424][T10053] RBP: 00007f29ba7b1090 R08: 0000000000000000 R09: 0000000000000000 [ 229.740431][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.740437][T10053] R13: 00007f29b9c16038 R14: 00007f29b9c15fa0 R15: 00007fff103b0c38 [ 229.740451][T10053] [ 229.849127][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1300'. [ 229.880866][T10060] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 229.884263][T10060] mroute: pending queue full, dropping entries [ 230.013780][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 230.018246][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 230.095701][T10084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10084 comm=syz.1.1308 [ 230.110728][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 230.149943][T10082] overlayfs: failed lookup in lower (newroot/296, name='file0', err=-40): overlapping layers [ 230.202134][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 230.570113][ T50] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 230.720306][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 230.730586][T10126] bridge2: entered promiscuous mode [ 230.732755][T10126] bridge2: entered allmulticast mode [ 230.745594][ T50] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.749232][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.752579][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 230.756189][ T50] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.760218][ T50] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.763399][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.767866][ T50] usb 7-1: config 0 descriptor?? [ 230.780989][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 230.826841][T10133] syzkaller0: entered promiscuous mode [ 230.828577][T10133] syzkaller0: entered allmulticast mode [ 230.976059][T10142] tipc: Enabled bearer , priority 31 [ 231.117998][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.160648][ T50] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 231.164614][ T50] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 231.166995][ T50] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 231.169326][ T50] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 231.171634][ T50] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 231.174699][ T50] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 231.177832][ T50] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 231.180981][ T50] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 231.184937][ T50] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 231.188038][ T50] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 231.202326][ T50] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 231.212450][ T5825] page_pool_release_retry() stalled pool shutdown: id 26, 46 inflight 120 sec [ 231.379597][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.387611][T10165] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1332'. [ 231.424628][ T5853] usb 7-1: USB disconnect, device number 22 [ 231.448420][T10169] kAFS: Can only specify source 'none' with -o dyn [ 231.451330][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 231.453427][T10170] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1333'. [ 231.473864][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.476870][T10170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.480046][T10170] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 231.487367][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.725348][T10186] syzkaller0: entered promiscuous mode [ 231.727093][T10186] syzkaller0: entered allmulticast mode [ 231.896868][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.949757][ T40] audit: type=1400 audit(1780874952.337:711): avc: denied { write } for pid=10194 comm="syz.2.1343" name="/" dev="9p" ino=80740435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.958325][ T40] audit: type=1400 audit(1780874952.337:712): avc: denied { write } for pid=10194 comm="syz.2.1343" name="/" dev="9p" ino=80740435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.964970][ T40] audit: type=1400 audit(1780874952.337:713): avc: denied { create } for pid=10194 comm="syz.2.1343" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.971529][ T40] audit: type=1400 audit(1780874952.337:714): avc: denied { write } for pid=10194 comm="syz.2.1343" name="/" dev="9p" ino=80740435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.979638][ T40] audit: type=1400 audit(1780874952.337:715): avc: denied { create } for pid=10194 comm="syz.2.1343" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 231.987461][ T40] audit: type=1400 audit(1780874952.347:716): avc: denied { write } for pid=10194 comm="syz.2.1343" name=E91F7189591E9233614B dev="9p" ino=80740477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 232.324299][T10214] netlink: 'syz.2.1347': attribute type 2 has an invalid length. [ 232.326778][T10214] netlink: 'syz.2.1347': attribute type 2 has an invalid length. [ 232.335305][T10214] syzkaller0: entered allmulticast mode [ 232.377438][T10220] tipc: Enabling of bearer rejected, already enabled [ 232.437642][ T40] audit: type=1326 audit(1780874952.825:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10224 comm="syz.3.1352" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ad9ce59 code=0x0 [ 232.666725][T10229] netlink: 'syz.1.1353': attribute type 20 has an invalid length. [ 232.916881][ T5853] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 232.937056][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 233.067899][ T5853] usb 6-1: Using ep0 maxpacket: 8 [ 233.071988][ T5853] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 233.075560][ T5853] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 233.079177][ T5853] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 233.082905][ T5853] usb 6-1: config 250 has no interface number 0 [ 233.085547][ T5853] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 233.090430][ T5853] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 233.094730][ T5853] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.099112][ T5853] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 233.103277][ T5853] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 233.108939][ T5853] usb 6-1: config 250 interface 228 has no altsetting 0 [ 233.113639][ T5853] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 233.117463][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 233.120921][ T5853] usb 6-1: Product: syz [ 233.122702][ T5853] usb 6-1: SerialNumber: syz [ 233.129898][ T5853] hub 6-1:250.228: bad descriptor, ignoring hub [ 233.131872][ T5853] hub 6-1:250.228: probe with driver hub failed with error -5 [ 233.335552][ T5853] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 233.451284][ T5855] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 233.533331][T10244] sctp: [Deprecated]: syz.3.1359 (pid 10244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.533331][T10244] Use struct sctp_sack_info instead [ 233.621674][ T5855] usb 5-1: Using ep0 maxpacket: 32 [ 233.625207][ T5855] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 233.628495][ T5855] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 233.631162][ T5855] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 233.633065][ T40] audit: type=1400 audit(1780874954.012:718): avc: denied { setattr } for pid=10247 comm="syz.3.1360" name="SCTPv6" dev="sockfs" ino=33823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.634572][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.643936][ T5855] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 233.646894][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 233.651066][ T5855] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 233.654120][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.658142][ T5855] usb 5-1: config 0 descriptor?? [ 233.935479][T10229] usb 6-1: reset high-speed USB device number 22 using dummy_hcd [ 233.990591][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 234.311998][ T5855] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 234.318275][ T5855] usb 5-1: USB disconnect, device number 16 [ 234.324054][ T5855] usblp1: removed [ 234.342288][T10252] overlayfs: missing 'lowerdir' [ 234.646816][ T5901] usb 6-1: USB disconnect, device number 22 [ 234.652417][ T5901] usblp0: removed [ 234.667213][ T5855] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 234.688376][ T40] audit: type=1400 audit(1780874955.055:719): avc: denied { read } for pid=10265 comm="syz.2.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 234.708777][ T5845] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 234.833410][ T5855] usb 5-1: Using ep0 maxpacket: 32 [ 234.836845][ T5855] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 234.840079][ T5855] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 234.843481][ T5855] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 234.847173][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.850997][ T5855] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 234.854946][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 234.860143][ T5855] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 234.863737][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.869210][ T5855] usb 5-1: config 0 descriptor?? [ 234.885481][ T5845] usb 8-1: Using ep0 maxpacket: 32 [ 234.888879][ T5845] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 234.891987][ T5845] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 234.895402][ T5845] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 234.899156][ T5845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.902990][ T5845] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 234.907072][ T5845] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 234.912157][ T5845] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 234.915597][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.922166][ T5845] usb 8-1: config 0 descriptor?? [ 235.061986][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.088443][ T5855] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 235.141419][ T5845] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 235.147078][ T5845] usb 8-1: USB disconnect, device number 39 [ 235.157353][ T5845] usblp1: removed [ 235.174611][T10277] __nla_validate_parse: 6 callbacks suppressed [ 235.174620][T10277] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1369'. [ 235.180582][T10277] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1369'. [ 235.184225][T10277] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1369'. [ 235.224326][T10279] syzkaller0: entered promiscuous mode [ 235.226080][T10279] syzkaller0: entered allmulticast mode [ 235.303651][ T5855] usb 5-1: USB disconnect, device number 17 [ 235.309578][ T5855] usblp0: removed [ 235.498170][ T5825] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 235.575914][T10289] tipc: Enabled bearer , priority 0 [ 235.578570][T10289] syzkaller0: entered promiscuous mode [ 235.580272][T10289] syzkaller0: entered allmulticast mode [ 235.583895][T10289] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 235.594240][T10289] tipc: Resetting bearer [ 235.598435][T10288] tipc: Resetting bearer [ 235.607266][T10288] tipc: Disabling bearer [ 235.613224][ T5901] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 235.657846][ T5825] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.660791][ T5825] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.664684][ T5825] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.667388][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.692390][T10291] tipc: Enabled bearer , priority 0 [ 235.697028][T10291] syzkaller0: mtu less than device minimum [ 235.705940][T10290] tipc: Disabling bearer [ 235.779747][ T5901] usb 8-1: Using ep0 maxpacket: 32 [ 235.783476][ T5901] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 235.786183][ T5901] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 235.789076][ T5901] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 235.792027][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.797534][ T5901] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 235.802931][ T5901] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 235.807798][ T5901] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 235.810581][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.814885][ T5901] usb 8-1: config 0 descriptor?? [ 235.840543][T10295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.872078][T10297] pimreg: entered allmulticast mode [ 235.875150][T10297] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 235.888505][ T5825] usb 6-1: usb_control_msg returned -32 [ 235.890303][ T5825] usbtmc 6-1:16.0: can't read capabilities [ 236.029620][ T5901] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 236.096641][T10305] openvswitch: netlink: Message has 4 unknown bytes. [ 236.097005][T10279] usb 6-1: usbtmc_ioctl_clear_out_halt returned -32 [ 236.098841][T10305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.102138][ T5901] usb 6-1: USB disconnect, device number 23 [ 236.147470][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 236.242086][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.244851][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.249278][ T5825] usb 8-1: USB disconnect, device number 40 [ 236.255482][ T5825] usblp1: removed [ 236.725760][T10335] evm: overlay not supported [ 236.734125][T10335] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 236.795863][ T40] audit: type=1400 audit(1780874957.066:720): avc: denied { audit_write } for pid=10340 comm="syz.1.1391" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 236.798327][ T5855] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 236.809447][T10345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 236.969626][ T5855] usb 5-1: Using ep0 maxpacket: 32 [ 236.972851][ T5855] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.976005][ T5855] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 236.980328][ T5855] usb 5-1: config 8 has no interface number 0 [ 236.982235][ T5855] usb 5-1: config 8 interface 188 has no altsetting 0 [ 236.986546][ T5855] usb 5-1: string descriptor 0 read error: -22 [ 236.988558][ T5855] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 236.994883][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.001793][ T5855] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 237.004296][ T5855] dw2102: su3000_power_ctrl: 1, initialized 0 [ 237.006192][ T5855] dvb-usb: bulk message failed: -22 (2/0) [ 237.015518][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.019112][ T5855] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 237.021910][ T5855] usb 5-1: media controller created [ 237.023532][ T5855] dvb-usb: bulk message failed: -22 (6/0) [ 237.025318][ T5855] dw2102: i2c transfer failed. [ 237.026787][ T5855] dvb-usb: bulk message failed: -22 (6/0) [ 237.028575][ T5855] dw2102: i2c transfer failed. [ 237.030053][ T5855] dvb-usb: bulk message failed: -22 (6/0) [ 237.031859][ T5855] dw2102: i2c transfer failed. [ 237.033332][ T5855] dvb-usb: bulk message failed: -22 (6/0) [ 237.035054][ T5855] dw2102: i2c transfer failed. [ 237.036518][ T5855] dvb-usb: bulk message failed: -22 (6/0) [ 237.038318][ T5855] dw2102: i2c transfer failed. [ 237.039775][ T5855] dvb-usb: bulk message failed: -22 (6/0) [ 237.043158][ T5855] dw2102: i2c transfer failed. [ 237.044678][ T5855] dvb-usb: MAC address: 02:02:02:02:02:02 [ 237.051451][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.060623][ T5855] dvb-usb: bulk message failed: -22 (3/0) [ 237.062421][ T5855] dw2102: command 0x0e transfer failed. [ 237.064548][ T5855] dvb-usb: bulk message failed: -22 (3/0) [ 237.066306][ T5855] dw2102: command 0x0e transfer failed. [ 237.200344][ T24] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 237.242716][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 237.380053][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 237.383031][ T24] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 237.385835][ T24] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 237.388672][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 237.393464][ T5855] dvb-usb: bulk message failed: -22 (3/0) [ 237.395561][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.400614][ T5855] dw2102: command 0x0e transfer failed. [ 237.402935][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.408259][ T5855] dvb-usb: bulk message failed: -22 (3/0) [ 237.410709][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 237.416684][ T5855] dw2102: command 0x0e transfer failed. [ 237.418908][ T5855] dvb-usb: bulk message failed: -22 (1/0) [ 237.421080][ T5855] dw2102: command 0x51 transfer failed. [ 237.423368][ T24] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 237.427079][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.432417][ T24] usb 8-1: config 0 descriptor?? [ 237.443510][ T5855] DVB: Unable to find symbol ds3000_attach() [ 237.445444][ T5855] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 237.485805][ T5855] rc_core: IR keymap rc-su3000 not found [ 237.488294][ T5855] Registered IR keymap rc-empty [ 237.492337][ T5855] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 237.501235][ T5855] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input27 [ 237.516126][ T5855] dvb-usb: schedule remote query interval to 150 msecs. [ 237.518414][ T5855] dw2102: su3000_power_ctrl: 0, initialized 1 [ 237.520305][ T5855] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 237.651448][ T24] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 237.657350][ T24] usb 8-1: USB disconnect, device number 41 [ 237.661458][ T24] usblp0: removed [ 237.688708][ T5855] dvb-usb: bulk message failed: -22 (1/0) [ 237.690685][ T5855] dw2102: i2c transfer failed. [ 237.861870][T10373] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1402'. [ 237.866513][T10373] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1402'. [ 237.867082][ T5855] dvb-usb: bulk message failed: -22 (1/0) [ 237.870683][T10373] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.875364][ T5855] dw2102: i2c transfer failed. [ 237.876503][T10373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.877036][T10373] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.882926][T10373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.887211][T10373] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1402'. [ 237.887507][T10373] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.887633][T10373] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.913971][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 237.913981][ T40] audit: type=1400 audit(1780874958.124:723): avc: denied { getopt } for pid=10379 comm="syz.2.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.058940][ T5855] dvb-usb: bulk message failed: -22 (1/0) [ 238.060744][ T5855] dw2102: i2c transfer failed. [ 238.122453][ T24] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 238.228851][ T5855] dvb-usb: bulk message failed: -22 (1/0) [ 238.232599][ T5855] dw2102: i2c transfer failed. [ 238.282021][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 238.287222][ T24] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 238.290425][ T24] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 238.294098][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 238.297362][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.300810][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.304734][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 238.309468][ T24] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 238.312952][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.317421][ T24] usb 8-1: config 0 descriptor?? [ 238.346068][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 238.399120][ T5855] dvb-usb: bulk message failed: -22 (1/0) [ 238.401510][ T5855] dw2102: i2c transfer failed. [ 238.539900][ T24] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 238.569316][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 238.571243][ T24] dw2102: i2c transfer failed. [ 238.750187][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 238.751205][T10362] FAULT_INJECTION: forcing a failure. [ 238.751205][T10362] name failslab, interval 1, probability 0, space 0, times 0 [ 238.752642][ T24] dw2102: i2c transfer failed. [ 238.757277][T10362] CPU: 1 UID: 0 PID: 10362 Comm: syz.3.1400 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.757303][T10362] Tainted: [L]=SOFTLOCKUP [ 238.757309][T10362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.757333][T10362] Call Trace: [ 238.757342][T10362] [ 238.757349][T10362] dump_stack_lvl+0x100/0x190 [ 238.757386][T10362] should_fail_ex.cold+0x5/0xa [ 238.757410][T10362] should_failslab+0xc2/0x120 [ 238.757428][T10362] __kmalloc_cache_noprof+0x7a/0x6f0 [ 238.757451][T10362] ? wakeup_source_register+0x4c/0x3e0 [ 238.757486][T10362] wakeup_source_register+0x4c/0x3e0 [ 238.757510][T10362] ep_create_wakeup_source+0x1df/0x2e0 [ 238.757535][T10362] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 238.757562][T10362] ? do_epoll_ctl+0x1012/0x36a0 [ 238.757585][T10362] ? do_epoll_ctl+0x1012/0x36a0 [ 238.757614][T10362] do_epoll_ctl+0x1eee/0x36a0 [ 238.757647][T10362] ? __pfx_do_epoll_ctl+0x10/0x10 [ 238.757671][T10362] ? find_held_lock+0x2b/0x80 [ 238.757685][T10362] ? __might_fault+0xc5/0x140 [ 238.757709][T10362] ? __might_fault+0xc5/0x140 [ 238.757739][T10362] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 238.757762][T10362] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 238.757787][T10362] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 238.757814][T10362] ? rcu_is_watching+0x12/0xc0 [ 238.757841][T10362] do_syscall_64+0x115/0x870 [ 238.757874][T10362] ? clear_bhb_loop+0x40/0x90 [ 238.757895][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.757912][T10362] RIP: 0033:0x7f5b9ad9ce59 [ 238.757926][T10362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.757942][T10362] RSP: 002b:00007f5b9bbc3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 238.757957][T10362] RAX: ffffffffffffffda RBX: 00007f5b9b015fa0 RCX: 00007f5b9ad9ce59 [ 238.757968][T10362] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 238.757977][T10362] RBP: 00007f5b9bbc3090 R08: 0000000000000000 R09: 0000000000000000 [ 238.757987][T10362] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 238.757996][T10362] R13: 00007f5b9b016038 R14: 00007f5b9b015fa0 R15: 00007ffda270cae8 [ 238.758020][T10362] [ 238.759147][ T50] usb 8-1: USB disconnect, device number 42 [ 238.837927][T10384] syzkaller0: entered promiscuous mode [ 238.840594][ T50] usblp0: removed [ 238.842427][T10384] syzkaller0: entered allmulticast mode [ 238.876468][ T40] audit: type=1400 audit(1780874959.026:724): avc: denied { bind } for pid=10385 comm="syz.2.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 238.879847][T10386] befs: (loop2): No write support. Marking filesystem read-only [ 238.887608][T10386] befs: (loop2): unable to read superblock [ 238.893786][T10386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.942739][ T5855] dvb-usb: bulk message failed: -22 (1/0) [ 238.944509][ T5855] dw2102: i2c transfer failed. [ 239.052338][ T40] audit: type=1400 audit(1780874959.195:725): avc: denied { getattr } for pid=10398 comm="syz.2.1412" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 239.113138][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 239.115330][ T24] dw2102: i2c transfer failed. [ 239.241515][ T5825] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 239.284529][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 239.286975][ T24] dw2102: i2c transfer failed. [ 239.346827][T10403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10403 comm=syz.3.1413 [ 239.395904][T10405] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 239.398453][T10405] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 239.401774][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 239.407011][ T5825] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 239.409580][ T5825] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 239.414208][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 239.420651][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.424779][ T5825] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.428330][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 239.432265][ T5825] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 239.435096][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.439389][ T5825] usb 6-1: config 0 descriptor?? [ 239.455350][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 239.460040][ T24] dw2102: i2c transfer failed. [ 239.626094][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 239.627929][ T24] dw2102: i2c transfer failed. [ 239.662802][ T5825] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 239.668479][ T5825] usb 6-1: USB disconnect, device number 24 [ 239.674519][ T5825] usblp0: removed [ 239.738450][ T5901] usb 5-1: USB disconnect, device number 18 [ 239.755001][ T5853] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 239.774691][ T40] audit: type=1400 audit(1780874959.868:726): avc: denied { map } for pid=10412 comm="syz.0.1418" path="/proc/1129/net/netlink" dev="proc" ino=4026533156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 239.788649][ T5901] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 239.904604][ T5853] usb 8-1: device descriptor read/64, error -71 [ 240.150516][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 240.161322][ T5853] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 240.300621][ T5853] usb 8-1: device descriptor read/64, error -71 [ 240.311456][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 240.314569][ T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 240.317139][ T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 240.319838][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 240.322872][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.325824][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 240.328649][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 240.332551][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 240.335429][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.339793][ T24] usb 6-1: config 0 descriptor?? [ 240.418905][ T5853] usb usb8-port1: attempt power cycle [ 240.558731][ T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 240.568765][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 240.780253][ T3269] usb 6-1: USB disconnect, device number 25 [ 240.784555][ T3269] usblp0: removed [ 240.793898][ T5853] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 240.816109][ T5853] usb 8-1: device descriptor read/8, error -71 [ 240.935193][T10434] syzkaller1: entered promiscuous mode [ 240.936920][T10434] syzkaller1: entered allmulticast mode [ 241.063665][T10439] syzkaller0: entered promiscuous mode [ 241.065419][T10439] syzkaller0: entered allmulticast mode [ 241.094410][ T5853] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 241.127122][ T5853] usb 8-1: device descriptor read/8, error -71 [ 241.192430][T10442] syzkaller0: entered promiscuous mode [ 241.194208][T10442] syzkaller0: entered allmulticast mode [ 241.256039][ T5853] usb usb8-port1: unable to enumerate USB device [ 241.392646][ T40] audit: type=1800 audit(1780874961.379:727): pid=10449 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1429" name="/newroot/366/file0" dev="tmpfs" ino=1940 res=0 errno=0 [ 241.478440][ T6076] Bluetooth: Error in BCSP hdr checksum [ 241.608103][T10462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1434'. [ 241.612851][T10462] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1434'. [ 241.615828][T10462] bridge0: port 1(1x9) entered blocking state [ 241.618358][T10462] bridge0: port 1(1x9) entered forwarding state [ 241.622882][T10462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1434'. [ 241.628006][T10462] bridge0: port 1(1x9) entered disabled state [ 241.659911][T10464] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1435'. [ 241.663318][T10464] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1435'. [ 241.667798][T10464] bridge0: port 1(1x9) entered blocking state [ 241.669889][T10464] bridge0: port 1(1x9) entered forwarding state [ 241.672747][T10464] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1435'. [ 241.685922][T10464] bridge0: port 1(1x9) entered disabled state [ 241.696437][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.730462][T10466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10466 comm=syz.0.1436 [ 241.829278][ T40] audit: type=1400 audit(1780874961.788:728): avc: denied { ioctl } for pid=10467 comm="syz.0.1437" path="socket:[32732]" dev="sockfs" ino=32732 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 241.830012][T10468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1437'. [ 242.742861][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 242.745948][T10480] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 242.805131][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 242.858486][T10482] Falling back ldisc for ttyS3. [ 242.974668][T10496] binder: 10495:10496 ioctl c0306201 200000000080 returned -14 [ 242.980428][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 242.989536][T10496] hsr_slave_1 (unregistering): left promiscuous mode [ 243.390784][T10507] syzkaller0: entered promiscuous mode [ 243.392499][T10507] syzkaller0: entered allmulticast mode [ 243.396237][T10507] tc action pedit offset 4096 out of bounds [ 243.667760][ T5101] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 243.668314][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 243.706750][T10525] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.871518][T10532] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1457'. [ 243.875859][T10532] bridge0: port 1(1x9) entered blocking state [ 243.878577][T10532] bridge0: port 1(1x9) entered forwarding state [ 243.888150][T10532] bridge0: port 1(1x9) entered disabled state [ 243.925870][ T40] audit: type=1400 audit(1780874963.728:729): avc: denied { mounton } for pid=10536 comm="syz.2.1460" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 243.931328][T10537] /dev/sr0: Can't open blockdev [ 243.937170][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.197291][ T50] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 244.361079][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.364089][ T50] usb 5-1: not running at top speed; connect to a high speed hub [ 244.367616][ T50] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.371120][ T50] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 244.375685][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.378562][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.382696][ T50] usb 5-1: Product: syz [ 244.384256][ T50] usb 5-1: Manufacturer: syz [ 244.386005][ T50] usb 5-1: SerialNumber: syz [ 245.048904][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.178486][ T29] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 245.340473][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 245.342838][ T29] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 245.346202][ T29] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 245.348807][ T29] usb 8-1: config 0 has no interface number 0 [ 245.351683][ T29] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 245.354162][ T29] usb 8-1: config 0 has no interface number 0 [ 245.356884][ T29] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 245.359460][ T29] usb 8-1: config 0 has no interface number 0 [ 245.362431][ T29] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 245.364889][ T29] usb 8-1: config 0 has no interface number 0 [ 245.367692][ T29] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 245.370579][ T29] usb 8-1: config 0 has no interface number 0 [ 245.373550][ T29] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 245.376063][ T29] usb 8-1: config 0 has no interface number 0 [ 245.378846][ T29] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 245.381387][ T29] usb 8-1: config 0 has no interface number 0 [ 245.384174][ T29] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 245.386705][ T29] usb 8-1: config 0 has no interface number 0 [ 245.390326][ T29] usb 8-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 245.393737][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.396609][ T29] usb 8-1: Product: syz [ 245.398668][ T29] usb 8-1: Manufacturer: syz [ 245.400174][ T29] usb 8-1: SerialNumber: syz [ 245.403539][ T29] usb 8-1: config 0 descriptor?? [ 245.409058][ T29] etas_es58x 8-1:0.2: Starting syz syz (Serial Number syz) [ 245.571842][T10563] geneve1: entered allmulticast mode [ 245.617920][T10571] syzkaller1: entered promiscuous mode [ 245.619729][T10571] syzkaller1: entered allmulticast mode [ 245.887843][T10579] tipc: Enabled bearer , priority 0 [ 245.891329][T10579] syzkaller0: entered promiscuous mode [ 245.893679][T10579] syzkaller0: entered allmulticast mode [ 245.898224][T10579] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 246.032101][ T59] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 246.184591][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 246.235386][T10581] macvlan2: entered allmulticast mode [ 246.237718][T10581] dummy0: entered allmulticast mode [ 246.241000][T10581] dummy0: entered promiscuous mode [ 246.247019][ T29] etas_es58x 8-1:0.2: could not retrieve the product info string [ 246.259036][ T5901] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 246.268407][ T29] usb 8-1: USB disconnect, device number 47 [ 246.271687][ T29] etas_es58x 8-1:0.2: Disconnecting syz syz [ 246.407789][ T40] audit: type=1400 audit(1780874966.024:730): avc: denied { write } for pid=10585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.433394][ T5901] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 246.443354][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 246.449250][ T5901] usb 7-1: Product: syz [ 246.451002][ T5901] usb 7-1: Manufacturer: syz [ 246.464329][ T5901] usb 7-1: SerialNumber: syz [ 246.468919][ T5901] usb 7-1: config 0 descriptor?? [ 246.481468][ T5901] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 246.484638][ T5901] dvb-usb: bulk message failed: -22 (2/0) [ 246.491935][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.496364][ T5901] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 246.499724][ T5901] usb 7-1: media controller created [ 246.517129][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.535861][ T40] audit: type=1400 audit(1780874966.145:731): avc: denied { write } for pid=10591 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.598364][ T40] audit: type=1400 audit(1780874966.209:732): avc: denied { create } for pid=10597 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 246.605309][T10598] XFS (nbd3): SB validate failed with error -5. [ 246.640399][ T40] audit: type=1400 audit(1780874966.246:733): avc: denied { write } for pid=10604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.690605][ T40] audit: type=1400 audit(1780874966.283:734): avc: denied { write } for pid=10607 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.700867][T10579] dvb-usb: bulk message failed: -22 (3/0) [ 246.706647][ T5901] cxusb: set interface failed [ 246.708155][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 246.726905][ T5901] DVB: Unable to find symbol mt352_attach() [ 246.728743][ T5901] dvb-usb: bulk message failed: -22 (5/0) [ 246.730493][ T5901] zl10353_read_register: readreg error (reg=127, ret==-121) [ 246.732938][ T5901] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 246.779878][ T5901] rc_core: IR keymap rc-dvico-mce not found [ 246.782044][ T5901] Registered IR keymap rc-empty [ 246.782213][T10578] tipc: Resetting bearer [ 246.785454][ T5901] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 246.790517][ T5901] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input28 [ 246.806630][ T40] audit: type=1400 audit(1780874966.394:735): avc: denied { write } for pid=10618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.806952][ T5901] dvb-usb: schedule remote query interval to 100 msecs. [ 246.808629][T10578] tipc: Disabling bearer [ 246.817549][ T5901] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 246.824613][ T5901] usb 7-1: USB disconnect, device number 23 [ 246.857901][ T5901] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 246.866333][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 246.867450][ T5101] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 246.884637][ T40] audit: type=1400 audit(1780874966.468:736): avc: denied { write } for pid=10621 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.909252][ T50] usb 5-1: USB disconnect, device number 19 [ 246.931097][ T5453] veth0_vlan: left promiscuous mode [ 246.945062][ T5453] veth0_vlan: entered promiscuous mode [ 247.012726][ T40] audit: type=1400 audit(1780874966.588:737): avc: denied { write } for pid=10624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.056422][ T40] audit: type=1400 audit(1780874966.625:738): avc: denied { write } for pid=10627 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.193528][T10632] __nla_validate_parse: 5 callbacks suppressed [ 247.193545][T10632] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1478'. [ 247.200130][T10632] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1478'. [ 247.203303][T10632] bridge0: port 1(1x9) entered blocking state [ 247.205437][T10632] bridge0: port 1(1x9) entered forwarding state [ 247.208739][T10632] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1478'. [ 247.212090][T10632] bridge0: port 1(1x9) entered disabled state [ 247.248613][T10634] syzkaller1: entered promiscuous mode [ 247.250455][T10634] syzkaller1: entered allmulticast mode [ 247.253385][T10634] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 247.258958][T10634] Context (ID=0x0) not attached to queue pair (handle=0x1:0x9) [ 247.307674][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 247.462426][T10639] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1480'. [ 247.650906][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 247.732400][T10649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32891 sclass=netlink_route_socket pid=10649 comm=syz.2.1483 [ 247.765243][T10655] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 247.871462][T10664] netlink: 'syz.3.1487': attribute type 12 has an invalid length. [ 248.421854][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.298764][ T5901] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 249.460622][ T5901] usb 8-1: Using ep0 maxpacket: 32 [ 249.466372][ T5901] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 249.472847][ T5901] usb 8-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 249.476111][ T5901] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.478893][ T5901] usb 8-1: Product: syz [ 249.480541][ T5901] usb 8-1: Manufacturer: syz [ 249.482321][ T5901] usb 8-1: SerialNumber: syz [ 249.489437][ T5901] usb 8-1: config 0 descriptor?? [ 249.491925][T10736] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.498200][ T5901] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.547180][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.579740][ T59] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 249.716397][ T5901] usb 8-1: USB disconnect, device number 48 [ 249.741898][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 249.749133][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.785874][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.789443][ T59] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 249.793202][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.815235][ T59] usb 6-1: config 0 descriptor?? [ 249.819926][T10057] udevd[10057]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.290299][ T59] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 250.555217][ T5901] usb 6-1: USB disconnect, device number 27 [ 250.694245][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 250.694259][ T40] audit: type=1400 audit(1780874969.980:744): avc: denied { append } for pid=10784 comm="syz.3.1534" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 250.816785][ T40] audit: type=1400 audit(1780874970.101:745): avc: denied { write } for pid=10798 comm="syz.3.1541" name="file0" dev="tmpfs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.834625][T10793] mmap: syz.0.1537 (10793): VmData 37466112 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 251.409122][ T5855] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 251.506311][ T3269] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 251.571296][ T5855] usb 6-1: Using ep0 maxpacket: 16 [ 251.681473][ T3269] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 251.684495][ T3269] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.687823][ T3269] usb 7-1: config 0 interface 0 has no altsetting 0 [ 251.692341][ T3269] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.695519][ T3269] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.698515][ T3269] usb 7-1: Product: syz [ 251.699937][ T3269] usb 7-1: Manufacturer: syz [ 251.702010][ T3269] usb 7-1: SerialNumber: syz [ 251.706319][ T3269] usb 7-1: config 0 descriptor?? [ 251.709706][ T3269] hub 7-1:0.0: bad descriptor, ignoring hub [ 251.712187][ T3269] hub 7-1:0.0: probe with driver hub failed with error -5 [ 251.717107][ T3269] usb 7-1: selecting invalid altsetting 0 [ 251.809501][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.145426][ T844] usb 7-1: USB disconnect, device number 24 [ 252.668411][ T40] audit: type=1400 audit(1780874971.819:746): avc: denied { unmount } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 252.924764][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.054670][ T29] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 253.220516][ T29] usb 7-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 253.223494][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.226003][ T29] usb 7-1: Product: syz [ 253.227345][ T29] usb 7-1: Manufacturer: syz [ 253.230935][ T29] usb 7-1: SerialNumber: syz [ 253.463407][ T29] gspca_main: pac207-2.14.0 probing 093a:2476 [ 253.465591][ T29] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 253.468722][ T29] uvcvideo 7-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 253.470929][ T29] uvcvideo 7-1:13.0: No valid video chain found. [ 253.474093][ T29] usb 7-1: USB disconnect, device number 25 [ 253.758476][ T50] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 253.920862][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 253.924139][ T50] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 253.927407][ T50] usb 5-1: config 179 has no interface number 0 [ 253.929388][ T50] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 253.932828][ T50] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 253.936232][ T50] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.939629][ T50] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 253.943174][ T50] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 253.947124][ T50] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 253.949894][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.954221][T10886] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 253.965878][ T844] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 254.042290][T10893] devpts: Bad value for 'gid' [ 254.043852][T10893] devpts: Bad value for 'gid' [ 254.050852][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.148673][ T844] usb 8-1: Using ep0 maxpacket: 32 [ 254.154128][ T844] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.158056][ T844] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 254.161121][ T844] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.168432][ T844] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.171978][ T844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.174534][ T844] usb 8-1: Product: syz [ 254.175962][ T844] usb 8-1: Manufacturer: syz [ 254.177912][ T844] usb 8-1: SerialNumber: syz [ 254.194698][ T50] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input30 [ 254.197535][ T844] cdc_ncm 8-1:1.0: skipping garbage [ 254.200811][ T844] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 254.205040][ T844] cdc_ncm 8-1:1.0: bind() failure [ 254.399067][ T50] usb 5-1: USB disconnect, device number 20 [ 254.399122][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 254.403449][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 254.407762][ T5855] usb 6-1: unable to get BOS descriptor or descriptor too short [ 254.412139][ T5855] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 254.414484][ T5855] usb 6-1: can't read configurations, error -71 [ 254.414604][ T5970] usb 8-1: USB disconnect, device number 49 [ 254.603134][ T844] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 254.767179][ T844] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 254.769752][ T844] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.775376][ T844] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 254.778604][ T844] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 254.781138][ T844] usb 7-1: Product: syz [ 254.782417][ T844] usb 7-1: Manufacturer: syz [ 254.783815][ T844] usb 7-1: SerialNumber: syz [ 254.786714][ T844] usb 7-1: config 0 descriptor?? [ 254.790216][ T844] hub 7-1:0.0: bad descriptor, ignoring hub [ 254.792707][ T844] hub 7-1:0.0: probe with driver hub failed with error -5 [ 254.827286][ T844] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 254.845590][T10100] udevd[10100]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.852226][ T5855] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 255.014629][ T5855] usb 6-1: Using ep0 maxpacket: 16 [ 255.017796][ T5855] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.020914][ T40] audit: type=1400 audit(1780874973.989:747): avc: denied { bind } for pid=10915 comm="syz.0.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 255.021228][ T5855] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.037134][ T5855] usb 6-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 255.040826][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.043578][ T5855] usb 6-1: Product: syz [ 255.045094][ T5855] usb 6-1: Manufacturer: syz [ 255.046952][ T5855] usb 6-1: SerialNumber: syz [ 255.123327][ T844] usb 7-1: USB disconnect, device number 26 [ 255.177131][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 255.252961][ T50] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 255.279244][ T5855] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 255.282611][ T5855] usb 6-1: unit 0 not found! [ 255.313025][ T5855] usb 6-1: USB disconnect, device number 29 [ 255.426150][ T50] usb 8-1: Using ep0 maxpacket: 32 [ 255.430292][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 255.434856][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 255.439954][ T50] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.445184][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 255.447989][ T50] usb 8-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 255.451513][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.456794][ T50] usb 8-1: config 0 descriptor?? [ 255.685025][ T50] usbhid 8-1:0.0: can't add hid device: -71 [ 255.688327][ T50] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 255.693831][ T50] usb 8-1: USB disconnect, device number 50 [ 255.785745][T10953] syzkaller0: entered promiscuous mode [ 255.787511][T10953] syzkaller0: entered allmulticast mode [ 255.989523][ T5845] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 256.153654][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.157338][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.160639][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.164997][ T5845] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.168014][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.172123][ T5845] usb 5-1: config 0 descriptor?? [ 256.314295][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.628252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 257.440648][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 257.496124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 257.505597][T10981] syzkaller0: entered promiscuous mode [ 257.509674][T10981] syzkaller0: entered allmulticast mode [ 257.581053][T10987] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1616'. [ 257.836271][ T5845] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 257.849563][ T5845] usb 5-1: USB disconnect, device number 21 [ 257.875739][T10997] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1618'. [ 257.915255][T10992] syzkaller1: entered promiscuous mode [ 257.916367][T10998] fido_id[10998]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 257.917666][T10992] syzkaller1: entered allmulticast mode [ 257.972277][T11000] syzkaller0: entered promiscuous mode [ 257.974049][T11000] syzkaller0: entered allmulticast mode [ 258.060258][T11002] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1622'. [ 258.293986][T11030] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1634'. [ 258.305859][T11030] syzkaller1: entered promiscuous mode [ 258.310788][T11030] syzkaller1: entered allmulticast mode [ 258.567042][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.072437][ T40] audit: type=1400 audit(1780874977.728:748): avc: denied { accept } for pid=11055 comm="syz.0.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.686333][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.223932][ T40] audit: type=1400 audit(1780874978.781:749): avc: denied { write } for pid=11072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.238069][T11076] sctp: [Deprecated]: syz.0.1654 (pid 11076) Use of int in maxseg socket option. [ 260.238069][T11076] Use struct sctp_assoc_value instead [ 260.267659][ T40] audit: type=1400 audit(1780874978.827:750): avc: denied { write } for pid=11079 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.293181][T11084] loop2: detected capacity change from 0 to 7 [ 260.298435][T11084] Dev loop2: unable to read RDB block 7 [ 260.301099][T11084] loop2: unable to read partition table [ 260.303376][T11084] loop2: partition table beyond EOD, truncated [ 260.305702][T11084] loop_reread_partitions: partition scan of loop2 (被x]4 ) failed (rc=-5) [ 260.462517][ T40] audit: type=1400 audit(1780874978.965:751): avc: denied { write } for pid=11093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.477326][ T40] audit: type=1400 audit(1780874979.002:752): avc: denied { write } for pid=11101 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.554500][T11098] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1659'. [ 260.603266][ T844] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 260.781544][ T844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.790812][ T844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.798903][ T844] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.809804][ T844] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.813820][ T844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.819915][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.821913][ T844] usb 7-1: config 0 descriptor?? [ 261.028869][ T40] audit: type=1400 audit(1780874979.538:753): avc: denied { read } for pid=11123 comm="syz.3.1672" path="socket:[37451]" dev="sockfs" ino=37451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.301891][ T844] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 261.755346][ T40] audit: type=1400 audit(1780874980.202:754): avc: denied { bind } for pid=11143 comm="syz.3.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.761679][ T40] audit: type=1400 audit(1780874980.202:755): avc: denied { map } for pid=11143 comm="syz.3.1679" path="socket:[36498]" dev="sockfs" ino=36498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.113098][T11166] netlink: 'syz.0.1689': attribute type 1 has an invalid length. [ 262.146226][T11166] bond1: entered promiscuous mode [ 262.149167][T11166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.168728][T11166] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 262.173772][T11166] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 262.177975][T11166] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 262.218171][T11168] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 262.222064][T11168] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 262.545357][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.548364][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.649333][T11181] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 262.652141][T11181] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.659358][T11181] vhci_hcd vhci_hcd.0: Device attached [ 262.668047][T11182] usbip_core: unknown command [ 262.669751][T11182] vhci_hcd: unknown pdu 0 [ 262.671165][T11182] usbip_core: unknown command [ 262.673998][ T46] vhci_hcd vhci_hcd.0: stop threads [ 262.676371][ T46] vhci_hcd vhci_hcd.0: release socket [ 262.678762][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 262.857939][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 262.861749][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'. [ 263.072992][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.246336][ T40] audit: type=1400 audit(1780874981.587:756): avc: denied { remount } for pid=11201 comm="syz.1.1703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 263.338345][ T40] audit: type=1400 audit(1780874981.661:757): avc: denied { ioctl } for pid=11210 comm="syz.1.1706" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.547821][T11223] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1710'. [ 263.637677][ T5855] usb 7-1: USB disconnect, device number 27 [ 263.741698][T11241] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1718'. [ 263.895875][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1723'. [ 263.946046][T11255] syzkaller0: entered promiscuous mode [ 263.948526][T11255] syzkaller0: entered allmulticast mode [ 263.958477][T11255] tipc: Enabled bearer , priority 0 [ 263.964915][T11254] tipc: Resetting bearer [ 263.979283][ T844] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 263.985582][T11254] tipc: Disabling bearer [ 264.129848][T11260] syzkaller0: entered promiscuous mode [ 264.131673][T11260] syzkaller0: entered allmulticast mode [ 264.158252][ T844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.162788][ T844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.166644][ T844] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.172305][ T844] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.175731][ T844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.183684][ T844] usb 6-1: config 0 descriptor?? [ 264.188633][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.443477][T11267] syzkaller0: entered promiscuous mode [ 264.445451][T11267] syzkaller0: entered allmulticast mode [ 264.449448][T11267] TC_ACT_REPEAT abuse ? [ 264.619036][T11269] syzkaller0: entered promiscuous mode [ 264.621388][T11269] syzkaller0: entered allmulticast mode [ 264.661928][ T844] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 265.237160][T11306] team0 (unregistering): Port device team_slave_0 removed [ 265.244332][T11306] team0 (unregistering): Port device team_slave_1 removed [ 265.325943][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.367845][T11309] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.1748' sets config #1 [ 266.100114][T11326] program syz.3.1755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.180095][ T5845] IPVS: starting estimator thread 0... [ 266.251245][ T40] audit: type=1400 audit(1780874984.357:758): avc: denied { write } for pid=11338 comm="syz.3.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.279167][T11333] IPVS: using max 46 ests per chain, 110400 per kthread [ 266.363294][ T40] audit: type=1400 audit(1780874984.459:759): avc: denied { setopt } for pid=11350 comm="syz.0.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 266.372128][T11349] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1766'. [ 266.389115][T11349] syzkaller1: entered promiscuous mode [ 266.391602][T11349] syzkaller1: entered allmulticast mode [ 266.441521][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.554725][T11367] xt_hashlimit: size too large, truncated to 1048576 [ 266.719984][T11389] syzkaller1: entered promiscuous mode [ 266.722128][T11389] syzkaller1: entered allmulticast mode [ 266.729607][T11392] program syz.1.1785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.801460][ T59] usb 6-1: USB disconnect, device number 30 [ 266.936496][T11412] Failed to initialize the IGMP autojoin socket (err -2) [ 266.984211][T11418] loop2: detected capacity change from 0 to 7 [ 266.990599][T11418] Dev loop2: unable to read RDB block 7 [ 266.992369][T11418] loop2: unable to read partition table [ 266.995876][T11418] loop2: partition table beyond EOD, truncated [ 266.999364][T11418] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 267.059681][T11425] netlink: 'syz.1.1799': attribute type 1 has an invalid length. [ 267.086535][T11425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.101677][T11425] bond2: (slave geneve2): making interface the new active one [ 267.105724][T11425] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 267.183689][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1805'. [ 267.241885][T11441] syzkaller0: entered promiscuous mode [ 267.244843][T11441] syzkaller0: entered allmulticast mode [ 267.422676][T11457] syzkaller0: entered promiscuous mode [ 267.425075][T11457] syzkaller0: entered allmulticast mode [ 267.476141][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 267.490656][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 267.945455][ T6088] Bluetooth: hci4: Frame reassembly failed (-84) [ 267.947964][ T6088] Bluetooth: hci4: Frame reassembly failed (-84) [ 268.174621][ T3269] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 268.316094][T10040] syz_tun (unregistering): left allmulticast mode [ 268.350263][ T3269] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.354818][ T3269] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.360062][ T3269] usb 8-1: config 0 interface 0 has no altsetting 0 [ 268.362793][ T3269] usb 8-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 268.366375][ T3269] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.374530][ T3269] usb 8-1: config 0 descriptor?? [ 268.566180][ T6071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.570256][ T6071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.626611][ T40] audit: type=1400 audit(1780874986.545:760): avc: denied { execute } for pid=11533 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 268.633725][ T40] audit: type=1400 audit(1780874986.545:761): avc: denied { execute_no_trans } for pid=11533 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 268.701258][ T6071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.706433][ T6071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.716186][ T5845] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 268.716539][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.723606][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.728414][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.736865][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.743425][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.752601][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.756804][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.764491][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.768807][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.772393][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.812149][ T6071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.815526][ T6071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.823448][ T3269] hid_parser_main: 5 callbacks suppressed [ 268.823466][ T3269] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 268.829919][ T3269] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 268.832937][ T3269] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 268.836575][ T3269] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 268.840319][ T3269] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 268.843318][ T3269] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 268.846185][ T3269] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 268.848935][ T3269] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 268.851766][ T3269] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 268.854578][ T3269] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 268.860013][ T3269] logitech 0003:046D:C294.000A: hidraw1: USB HID v0.08 Device [HID 046d:c294] on usb-dummy_hcd.3-1/input0 [ 268.864574][ T3269] logitech 0003:046D:C294.000A: no inputs found [ 268.890997][ T5845] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.898059][ T5845] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 268.906507][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 268.909860][ T5845] usb 5-1: Product: syz [ 268.911836][ T5845] usb 5-1: Manufacturer: syz [ 268.913784][ T5845] usb 5-1: SerialNumber: syz [ 268.943403][ T6071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.952598][ T6071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.024858][T11534] Failed to initialize the IGMP autojoin socket (err -2) [ 269.034614][ T29] usb 8-1: USB disconnect, device number 51 [ 269.130532][ T6071] bridge_slave_1: left allmulticast mode [ 269.133230][ T6071] bridge_slave_1: left promiscuous mode [ 269.139297][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.146663][ T5845] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 269.147458][ T6071] bridge_slave_0: left allmulticast mode [ 269.153891][ T6071] bridge_slave_0: left promiscuous mode [ 269.156229][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.422069][ T5853] usb 5-1: USB disconnect, device number 22 [ 269.433993][ T5853] usblp0: removed [ 269.652876][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.660590][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.664452][ T6071] bond0 (unregistering): Released all slaves [ 269.668256][T11551] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 269.739601][ T6071] tipc: Left network mode [ 269.855178][ T40] audit: type=1400 audit(1780874987.680:762): avc: denied { write } for pid=11557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.921412][ T40] audit: type=1400 audit(1780874987.745:763): avc: denied { write } for pid=11567 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.962572][T11534] bridge0: port 1(bridge_slave_1) entered blocking state [ 269.965466][T11534] bridge0: port 1(bridge_slave_1) entered disabled state [ 269.968319][T11534] bridge_slave_1: entered allmulticast mode [ 269.973051][T11534] bridge_slave_1: entered promiscuous mode [ 270.036729][T11534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.049356][T11534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.101077][T11534] team0: Port device team_slave_0 added [ 270.115365][ T40] audit: type=1400 audit(1780874987.921:764): avc: denied { write } for pid=11571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.127395][T11534] team0: Port device team_slave_1 added [ 270.172052][ T40] audit: type=1400 audit(1780874987.976:765): avc: denied { write } for pid=11574 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.178491][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 270.183264][ T5101] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 270.227078][T11534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.229332][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.237700][T11534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.258786][T11534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.261769][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.272608][T11534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.311321][ T6071] hsr_slave_0: left promiscuous mode [ 270.314029][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.317536][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.332182][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.335326][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.354382][ T6071] veth1_macvtap: left promiscuous mode [ 270.357593][ T6071] veth0_macvtap: left promiscuous mode [ 270.360183][ T6071] veth1_vlan: left promiscuous mode [ 270.363257][ T6071] veth0_vlan: left promiscuous mode [ 270.440996][ T6071] pim6reg (unregistering): left allmulticast mode [ 270.597681][ T40] audit: type=1326 audit(1780874988.364:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11588 comm="syz.1.1862" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29b999ce59 code=0x0 [ 270.674341][T11591] Invalid argument reading file caps for ./file0 [ 270.782467][T11534] hsr_slave_0: entered promiscuous mode [ 270.790035][T11534] hsr_slave_1: entered promiscuous mode [ 270.794598][T11534] debugfs: 'hsr0' already exists in 'hsr' [ 270.797284][T11534] Cannot create hsr debugfs directory [ 270.965254][ T40] audit: type=1400 audit(1780874988.705:767): avc: denied { write } for pid=11609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.045233][ T5101] Bluetooth: hci1: command tx timeout [ 271.146789][T11623] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1872'. [ 271.149683][T11623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1872'. [ 271.152962][T11623] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1872'. [ 271.162564][T11534] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 271.171366][T11534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.174126][T11534] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 271.178869][T11534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.182817][T11534] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 271.188277][T11534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.193334][T11534] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 271.197052][ T50] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 271.200927][T11534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.206497][T11625] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1873'. [ 271.213027][ T6071] IPVS: stop unused estimator thread 0... [ 271.328380][T11534] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.360138][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 271.365991][ T50] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 271.371121][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 271.376361][ T50] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 271.380055][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.404358][ T50] usb 5-1: config 0 descriptor?? [ 271.494511][ T6076] bridge0: port 1(bridge_slave_1) entered blocking state [ 271.497271][ T6076] bridge0: port 1(bridge_slave_1) entered forwarding state [ 271.861257][ T50] apple 0003:05AC:027C.000B: reserved main item tag 0xd [ 271.866972][ T50] apple 0003:05AC:027C.000B: hidraw1: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.0-1/input0 [ 271.910804][T11534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.933445][ T5845] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 272.077548][ T5901] usb 5-1: USB disconnect, device number 23 [ 272.103911][ T5845] usb 6-1: unable to get BOS descriptor or descriptor too short [ 272.109238][ T5845] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.113623][ T5845] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.120030][ T5845] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 272.124988][ T5845] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 272.138794][ T5845] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 272.143488][ T5845] usb 6-1: config 1 interface 1 has no altsetting 0 [ 272.149078][ T5845] usb 6-1: string descriptor 0 read error: -22 [ 272.152051][ T5845] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 272.155754][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.161192][ T6585] syz_tun (unregistering): left allmulticast mode [ 272.230362][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 272.230375][ T40] audit: type=1400 audit(1780874989.878:769): avc: denied { write } for pid=11678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.299339][ T40] audit: type=1400 audit(1780874989.933:770): avc: denied { write } for pid=11685 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.365431][ T6585] tipc: Resetting bearer [ 272.375503][ T6585] tipc: Disabling bearer [ 272.427013][ T40] audit: type=1400 audit(1780874990.053:771): avc: denied { write } for pid=11693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.474613][ T40] audit: type=1400 audit(1780874990.099:772): avc: denied { write } for pid=11699 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.605868][ T40] audit: type=1400 audit(1780874990.229:773): avc: denied { write } for pid=11706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.657378][ T40] audit: type=1400 audit(1780874990.265:774): avc: denied { write } for pid=11713 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.665288][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.673794][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.680391][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.685220][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.694568][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.802396][ T40] audit: type=1400 audit(1780874990.404:775): avc: denied { write } for pid=11729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.854385][ T40] audit: type=1400 audit(1780874990.459:776): avc: denied { write } for pid=11742 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.877502][T11718] Failed to initialize the IGMP autojoin socket (err -2) [ 272.936419][T11534] veth0_macvtap: entered promiscuous mode [ 272.945157][T11534] veth1_macvtap: entered promiscuous mode [ 272.970374][ T40] audit: type=1400 audit(1780874990.552:777): avc: denied { write } for pid=11752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.992564][T11534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.017219][T11534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.024112][T11534] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 273.034426][T11534] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 273.043573][T11534] wireguard: wg0: Could not create IPv4 socket [ 273.046466][ T40] audit: type=1400 audit(1780874990.626:778): avc: denied { write } for pid=11755 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.055671][T11534] wireguard: wg1: Could not create IPv4 socket [ 273.066968][T11534] wireguard: wg2: Could not create IPv4 socket qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xac000) [ 273.169375][ T5901] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 273.181308][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 273.184014][ T1134] ata1: failed to read log page 10h (errno=-5) [ 273.187550][ T1134] ata1.00: NCQ disabled due to excessive errors [ 273.190458][ T1134] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 273.193458][ T1134] ata1.00: irq_stat 0x41000008 [ 273.195299][ T1134] ata1.00: failed command: READ FPDMA QUEUED [ 273.197648][ T1134] ata1.00: cmd 60/60:70:1e:24:01/05:00:00:00:00/40 tag 14 ncq dma 704512 in [ 273.197648][ T1134] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 273.204448][ T1134] ata1.00: status: { DRDY } [ 273.206262][ T1134] ata1.00: error: { ABRT } [ 273.210341][ T1134] ata1.00: configured for UDMA/100 [ 273.213006][ T1134] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 273.216700][ T1134] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 273.219731][ T1134] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 273.223234][ T1134] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 24 1e 00 05 60 00 [ 273.226273][ T1134] I/O error, dev sda, sector 74782 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 273.230084][ T1134] ata1: EH complete [ 273.248890][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.254269][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.263288][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.267459][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.270607][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.342843][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.352173][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.357898][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 273.363067][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.370465][ T5901] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.373235][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.383268][ T5901] usb 5-1: config 0 descriptor?? [ 273.452924][T11763] Failed to initialize the IGMP autojoin socket (err -2) [ 273.504218][ T5845] usb 6-1: USB disconnect, device number 31 [ 273.850251][ T5901] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 274.672250][T11884] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1891'. [ 274.711772][ T9] usb 5-1: USB disconnect, device number 24 [ 274.979512][T11763] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 274.986530][T11763] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 274.997365][T11763] wireguard: wg0: Could not create IPv4 socket [ 275.003445][T11763] wireguard: wg1: Could not create IPv4 socket [ 275.007954][T11763] wireguard: wg2: Could not create IPv4 socket [ 275.097476][ T5853] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 275.257043][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.267207][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.272732][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.280122][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.283654][ T5853] usb 6-1: Using ep0 maxpacket: 16 [ 275.289247][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.294114][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.303181][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.307240][ T5853] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.312409][ T5853] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.323686][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.329699][ T5853] usb 6-1: config 0 descriptor?? [ 275.519144][T11921] Failed to initialize the IGMP autojoin socket (err -2) [ 275.787413][ T5853] hid_parser_main: 32 callbacks suppressed [ 275.787428][ T5853] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 275.792379][ T5853] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 275.794774][ T5853] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 275.797266][ T5853] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 275.800372][ T5853] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 275.803690][ T5853] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 275.806124][ T5853] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 275.808531][ T5853] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 275.811154][ T5853] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 275.813389][ T5853] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 275.819859][ T5853] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input33 [ 275.834258][ T5853] microsoft 0003:045E:07DA.000D: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 276.005430][ T5853] usb 6-1: USB disconnect, device number 32 [ 276.825161][T12009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1899'. [ 277.175958][ T5853] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 277.349252][ T5853] usb 6-1: Using ep0 maxpacket: 16 [ 277.353651][ T5853] usb 6-1: unable to get BOS descriptor or descriptor too short [ 277.357874][ T5853] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.362653][ T5853] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.368900][ T5853] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 277.372514][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.375711][ T5853] usb 6-1: Product: syz [ 277.377436][ T5853] usb 6-1: Manufacturer: syz [ 277.379460][ T5853] usb 6-1: SerialNumber: syz [ 277.533426][ T5101] Bluetooth: hci1: command tx timeout [ 277.607824][ T5853] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 277.611631][ T5853] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 277.708142][ T5101] Bluetooth: hci2: command 0x1003 tx timeout [ 277.711669][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 277.711683][ T40] audit: type=1400 audit(1780874994.937:836): avc: denied { write } for pid=12042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.713016][ T5752] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 277.779517][ T40] audit: type=1400 audit(1780874994.992:837): avc: denied { write } for pid=12045 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.850514][T12051] ------------[ cut here ]------------ [ 277.852284][T12051] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 277.852294][T12051] WARNING: fs/exec.c:118 at path_noexec+0x1cf/0x230, CPU#3: syz.0.1902/12051 [ 277.858390][T12051] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 277.860173][T12051] CPU: 3 UID: 0 PID: 12051 Comm: syz.0.1902 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.863082][ T40] audit: type=1400 audit(1780874995.075:838): avc: denied { write } for pid=5662 comm="syz-executor" path="pipe:[6620]" dev="pipefs" ino=6620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 277.864764][T12051] Tainted: [L]=SOFTLOCKUP [ 277.875754][T12051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.880278][T12051] RIP: 0010:path_noexec+0x1cf/0x230 [ 277.882785][T12051] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 aa 52 7d ff 83 e3 01 e8 c2 57 7d ff 89 d8 5b 5d 41 5c e9 57 63 01 09 e8 b2 57 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 d4 3b eb ff e9 a3 fe ff ff e8 ca 3b eb [ 277.890136][T12051] RSP: 0018:ffffc90002737bd8 EFLAGS: 00010283 [ 277.891643][ T40] audit: type=1400 audit(1780874995.094:839): avc: denied { write } for pid=12049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.892543][T12051] RAX: 00000000000000ab RBX: 0000000000000000 RCX: ffffc900044b9000 [ 277.904672][T12051] RDX: 0000000000080000 RSI: ffffffff828b594e RDI: ffff888025894a80 [ 277.908054][T12051] RBP: ffff8880225651a0 R08: 0000000000000007 R09: 0000000000000000 [ 277.911289][T12051] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 277.914469][T12051] R13: 0000000000000001 R14: ffff888039a71008 R15: 0000000000000000 [ 277.917872][T12051] FS: 00007f54e5ec86c0(0000) GS:ffff8880d6687000(0000) knlGS:0000000000000000 [ 277.921675][T12051] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.924516][T12051] CR2: 000000110c3aef9a CR3: 0000000023047000 CR4: 0000000000352ef0 [ 277.927772][T12051] Call Trace: [ 277.929264][T12051] [ 277.929873][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.933411][T12051] do_mmap+0x857/0x12f0 [ 277.935228][T12051] ? __pfx_do_mmap+0x10/0x10 [ 277.937258][T12051] ? __pfx_down_write_killable+0x10/0x10 [ 277.939651][T12051] vm_mmap_pgoff+0x29e/0x470 [ 277.941813][T12051] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 277.942055][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.944010][T12051] ? __fget_files+0x215/0x3d0 [ 277.948141][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.949064][T12051] ? __fget_files+0x21f/0x3d0 [ 277.952262][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.953456][T12051] ksys_mmap_pgoff+0x3cb/0x610 [ 277.956840][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.958221][T12051] ? __x64_sys_futex+0x358/0x4d0 [ 277.959886][ T40] audit: type=1400 audit(1780874995.168:840): avc: denied { write } for pid=12056 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.972223][T12051] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 277.974572][T12051] ? __pfx___x64_sys_futex+0x10/0x10 [ 277.976659][T12051] ? selinux_file_ioctl+0xb6/0x290 [ 277.978765][T12051] __x64_sys_mmap+0x125/0x190 [ 277.980344][T12051] do_syscall_64+0x115/0x870 [ 277.981890][T12051] ? clear_bhb_loop+0x40/0x90 [ 277.983438][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.985358][T12051] RIP: 0033:0x7f54e4f9ce59 [ 277.986844][T12051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.993088][T12051] RSP: 002b:00007f54e5ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 277.995685][T12051] RAX: ffffffffffffffda RBX: 00007f54e5215fa0 RCX: 00007f54e4f9ce59 [ 277.998181][T12051] RDX: 0000000002000003 RSI: 0000000000001000 RDI: 0000200000fff000 [ 278.001213][T12051] RBP: 00007f54e5032d6f R08: 0000000000000005 R09: 0000000000000000 [ 278.004485][T12051] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 278.007569][T12051] R13: 00007f54e5216038 R14: 00007f54e5215fa0 R15: 00007ffd52f666f8 [ 278.010934][T12051] [ 278.012345][T12051] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 278.015418][T12051] CPU: 3 UID: 0 PID: 12051 Comm: syz.0.1902 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.019943][T12051] Tainted: [L]=SOFTLOCKUP [ 278.021755][T12051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.025800][T12051] Call Trace: [ 278.027176][T12051] [ 278.028481][T12051] dump_stack_lvl+0x100/0x190 [ 278.030547][T12051] vpanic+0x552/0x970 [ 278.032284][T12051] ? __pfx_vpanic+0x10/0x10 [ 278.034188][T12051] panic+0xd1/0xe0 [ 278.035770][T12051] ? __pfx_panic+0x10/0x10 [ 278.037686][T12051] check_panic_on_warn.cold+0x19/0x34 [ 278.039929][T12051] ? path_noexec+0x1cf/0x230 [ 278.041892][T12051] __warn.cold+0x191/0x328 [ 278.043776][T12051] __report_bug+0x296/0x3d0 [ 278.045625][T12051] ? path_noexec+0x1cf/0x230 [ 278.047555][T12051] ? __pfx___report_bug+0x10/0x10 [ 278.049695][T12051] ? arch_get_unmapped_area_topdown+0x559/0xa50 [ 278.052264][T12051] ? futex_unqueue+0x133/0x2c0 [ 278.054267][T12051] ? path_noexec+0x1cf/0x230 [ 278.056169][T12051] report_bug+0xb2/0x220 [ 278.058003][T12051] ? path_noexec+0x1cf/0x230 [ 278.059745][T12051] handle_bug+0x16a/0x2a0 [ 278.061491][T12051] exc_invalid_op+0x17/0x50 [ 278.063447][T12051] asm_exc_invalid_op+0x1a/0x20 [ 278.065488][T12051] RIP: 0010:path_noexec+0x1cf/0x230 [ 278.067664][T12051] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 aa 52 7d ff 83 e3 01 e8 c2 57 7d ff 89 d8 5b 5d 41 5c e9 57 63 01 09 e8 b2 57 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 d4 3b eb ff e9 a3 fe ff ff e8 ca 3b eb [ 278.075418][T12051] RSP: 0018:ffffc90002737bd8 EFLAGS: 00010283 [ 278.077657][T12051] RAX: 00000000000000ab RBX: 0000000000000000 RCX: ffffc900044b9000 [ 278.080526][T12051] RDX: 0000000000080000 RSI: ffffffff828b594e RDI: ffff888025894a80 [ 278.083399][T12051] RBP: ffff8880225651a0 R08: 0000000000000007 R09: 0000000000000000 [ 278.086319][T12051] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 278.089136][T12051] R13: 0000000000000001 R14: ffff888039a71008 R15: 0000000000000000 [ 278.091961][T12051] ? path_noexec+0x1ce/0x230 [ 278.093643][T12051] ? path_noexec+0x1ce/0x230 [ 278.095312][T12051] do_mmap+0x857/0x12f0 [ 278.096823][T12051] ? __pfx_do_mmap+0x10/0x10 [ 278.098333][T12051] ? __pfx_down_write_killable+0x10/0x10 [ 278.100264][T12051] vm_mmap_pgoff+0x29e/0x470 [ 278.101987][T12051] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 278.103831][T12051] ? __fget_files+0x215/0x3d0 [ 278.105549][T12051] ? __fget_files+0x21f/0x3d0 [ 278.107225][T12051] ksys_mmap_pgoff+0x3cb/0x610 [ 278.109005][T12051] ? __x64_sys_futex+0x358/0x4d0 [ 278.110777][T12051] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 278.112673][T12051] ? __pfx___x64_sys_futex+0x10/0x10 [ 278.114563][T12051] ? selinux_file_ioctl+0xb6/0x290 [ 278.116399][T12051] __x64_sys_mmap+0x125/0x190 [ 278.118122][T12051] do_syscall_64+0x115/0x870 [ 278.119787][T12051] ? clear_bhb_loop+0x40/0x90 [ 278.121502][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.123606][T12051] RIP: 0033:0x7f54e4f9ce59 [ 278.125209][T12051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.131994][T12051] RSP: 002b:00007f54e5ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 278.134866][T12051] RAX: ffffffffffffffda RBX: 00007f54e5215fa0 RCX: 00007f54e4f9ce59 [ 278.137660][T12051] RDX: 0000000002000003 RSI: 0000000000001000 RDI: 0000200000fff000 [ 278.140463][T12051] RBP: 00007f54e5032d6f R08: 0000000000000005 R09: 0000000000000000 [ 278.143259][T12051] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 278.145852][T12051] R13: 00007f54e5216038 R14: 00007f54e5215fa0 R15: 00007ffd52f666f8 [ 278.148331][T12051] [ 278.150106][T12051] Kernel Offset: disabled [ 278.151269][T12051] Rebooting in 86400 seconds..