last executing test programs: 2m3.386081824s ago: executing program 32 (id=1411): capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0x1}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) 1m55.780939509s ago: executing program 4 (id=1574): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x14, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1m55.780694538s ago: executing program 4 (id=1575): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 1m55.670027592s ago: executing program 4 (id=1577): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xb}, 0x20) 1m55.668636304s ago: executing program 4 (id=1578): pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r1, 0xfffffffffffffc01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m55.542579326s ago: executing program 4 (id=1583): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x8, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0xc000) 1m55.531153713s ago: executing program 4 (id=1584): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) 1m52.8551727s ago: executing program 33 (id=1640): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x90) r2 = openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x220) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) 1m44.163075342s ago: executing program 1 (id=1809): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r0, 0xf5f) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m44.139663047s ago: executing program 1 (id=1811): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, r2, 0x36, 0x2004}, 0x20) 1m44.056621936s ago: executing program 1 (id=1813): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdn', @ANYRESHEX, @ANYRESHEX]) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x8f, 0xf, 0x80, 0x0, 0x0, 0x3, 0x0, 0xfe, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 1m44.051577072s ago: executing program 1 (id=1814): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m43.509685917s ago: executing program 1 (id=1830): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40010021, 0x0) 1m43.429206713s ago: executing program 1 (id=1832): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000040)={r1, 0x1, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000200)=0x1, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000200)={0x0, 0x1, r2}) 1m42.34484478s ago: executing program 5 (id=1868): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x800) preadv(r1, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/70, 0x4a}], 0x1, 0x8, 0x101) 1m40.91774347s ago: executing program 5 (id=1894): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000100100000100000001000007"], 0x18}, 0x0) 1m40.916182485s ago: executing program 5 (id=1896): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1m40.492987175s ago: executing program 34 (id=1584): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) 1m39.986831434s ago: executing program 5 (id=1920): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000380)="703a742d73742f6576656e7431202e2f66696c65303a30783020617267323d5ca78c15d892f2cb16bffa883f3f1a6b71a2799941fda9f8933a", 0x39) 1m39.984381646s ago: executing program 5 (id=1921): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) 1m39.9135434s ago: executing program 5 (id=1923): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000000c0)=[r2], 0x0, 0x1}) 1m36.563334502s ago: executing program 2 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 1m36.492220941s ago: executing program 2 (id=1962): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 1m36.409441514s ago: executing program 2 (id=1963): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x761, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x9, @remote, 0x40000000}}, 0xc, 0x2a}, 0x90) 1m36.408567913s ago: executing program 2 (id=1964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff") ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m36.288644415s ago: executing program 2 (id=1965): socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000700)="000000001bed00002a75d6d38e9cb3583c321201a24dd52b110251a3a00700e798", 0x21) 1m36.199151148s ago: executing program 2 (id=1966): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={r1, r2, 0x0, 0x8, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000000c0)={&(0x7f0000000040)=[r2], 0xde, 0x1, 0x1}) 1m28.451235552s ago: executing program 35 (id=1832): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000040)={r1, 0x1, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000200)=0x1, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000200)={0x0, 0x1, r2}) 1m24.62332696s ago: executing program 36 (id=1923): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000000c0)=[r2], 0x0, 0x1}) 1m21.127092848s ago: executing program 37 (id=1966): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={r1, r2, 0x0, 0x8, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000000c0)={&(0x7f0000000040)=[r2], 0xde, 0x1, 0x1}) 44.64609079s ago: executing program 7 (id=2554): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x801, 0x0, 0x20000000000}) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) 44.596893785s ago: executing program 7 (id=2558): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.507675651s ago: executing program 7 (id=2559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) 44.339026874s ago: executing program 7 (id=2564): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x6f}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) 44.256561768s ago: executing program 7 (id=2566): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 44.184963052s ago: executing program 7 (id=2567): syz_usb_connect(0x3, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 29.135218232s ago: executing program 38 (id=2567): syz_usb_connect(0x3, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 23.92851993s ago: executing program 9 (id=2931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)="54449c19218d63a6498634306578cc911f049913bc96e81680b3b12f71ebab51d62a72fa17fa06535e7de1f69857be99173004b527fc385dcf52c509e50370", 0x3f}], 0x1) 23.873413101s ago: executing program 9 (id=2933): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 23.730014413s ago: executing program 9 (id=2934): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 23.563167099s ago: executing program 9 (id=2939): r0 = getpgrp(0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x1, 0x0, 0xfffffffffffff708, 0x9, r0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r1, 0xc0686611, &(0x7f0000000080)=0x68) 23.478852281s ago: executing program 9 (id=2942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380"], 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000011000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008000f000500000008002e00"], 0x60}}, 0x0) 23.3858143s ago: executing program 9 (id=2945): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={0x0, 0x0, r3, r4, 0x3, 0x0, 0xfff80000, 0x400, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x5, 0x0, 0x10, 0x12f, 0xe154, 0x0, 0x0, 0x6, 0x0, "fe1d00003413000000000020b42717e47f00"}}) 12.828837534s ago: executing program 3 (id=3074): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) userfaultfd(0x801) 12.828448774s ago: executing program 3 (id=3075): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000540)=[@clear_death={0x400c6314, 0xfffffffc}], 0x0, 0x0, 0x0}) 12.75263701s ago: executing program 3 (id=3076): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) 12.746211664s ago: executing program 3 (id=3078): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r0, '\x00', {0xfff7, 0x4, 0x0, 0x0}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2031}, 0x0) 12.301209428s ago: executing program 3 (id=3082): chdir(0x0) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 12.22072919s ago: executing program 3 (id=3085): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={r3, 0x2, 0x8, 0x1, &(0x7f0000000000)=[{0x7, 0x8, 0x2, 0x100}]}) 6.276497142s ago: executing program 39 (id=2945): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={0x0, 0x0, r3, r4, 0x3, 0x0, 0xfff80000, 0x400, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x5, 0x0, 0x10, 0x12f, 0xe154, 0x0, 0x0, 0x6, 0x0, "fe1d00003413000000000020b42717e47f00"}}) 2.2492202s ago: executing program 8 (id=3171): timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='8', 0x1) 2.188959505s ago: executing program 8 (id=3172): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') 2.18843679s ago: executing program 8 (id=3173): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1012}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/syzkaller0/gro_flush_timeout\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='2', 0x1) 2.149787145s ago: executing program 8 (id=3174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea41c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 2.049541307s ago: executing program 8 (id=3175): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000300)=""/4092, 0xffc, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 1.955865667s ago: executing program 8 (id=3176): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x40007, 0x121001) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={r1, r2, 0x0, 0x8, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000000c0)=[r2], &(0x7f00000001c0), 0x1}) 785.663134ms ago: executing program 6 (id=3181): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 746.270111ms ago: executing program 6 (id=3182): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40090}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x1, 0xffe0}, {0xb, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 513.993454ms ago: executing program 6 (id=3185): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, 0x0) 439.052821ms ago: executing program 0 (id=3187): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 431.662231ms ago: executing program 6 (id=3188): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c0000f5000000007000000001000000000046"], 0x1342) 319.290552ms ago: executing program 0 (id=3189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 232.926217ms ago: executing program 0 (id=3190): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 186.102846ms ago: executing program 0 (id=3191): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40011}], 0x1}}], 0x1, 0x24008094) 128.603549ms ago: executing program 0 (id=3192): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)={r0}) 124.717019ms ago: executing program 6 (id=3193): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x0, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x1b, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c051}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffbc) 72.099283ms ago: executing program 0 (id=3194): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) close(r0) 0s ago: executing program 6 (id=3195): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) 0s ago: executing program 6 (id=3196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x5220, 0x0) kernel console output (not intermixed with test programs): .809113][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.809126][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.835855][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.835870][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.841128][ T5813] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.841153][ T5813] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.841170][ T5813] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.841188][ T5813] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.161934][ T5733] svc: failed to register nfsdv3 RPC service (errno 111). [ 121.163953][ T5733] svc: failed to register nfsaclv3 RPC service (errno 111). [ 121.163973][ T5733] failed to unregister udp with rpcbind [ 121.164454][ T5733] svc: failed to register nfsdv3 RPC service (errno 97). [ 121.164469][ T5733] svc: failed to register nfsaclv3 RPC service (errno 97). [ 121.164478][ T5733] failed to unregister udp with rpcbind [ 121.248974][ T5093] Bluetooth: hci4: command tx timeout [ 121.474663][T10380] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1941'. [ 121.475260][T10380] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1941'. [ 121.475636][T10380] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1941'. [ 122.582336][T10407] program syz.6.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.613775][T10409] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 123.328924][ T5093] Bluetooth: hci4: command tx timeout [ 123.861693][T10453] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 123.861731][T10453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.336613][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 125.336633][ T43] audit: type=1800 audit(1791069847.501:1459): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1978" name="routing_algo" dev="sysfs" ino=66752 res=0 errno=0 [ 125.396709][ T43] audit: type=1400 audit(1791069847.561:1460): avc: denied { setattr } for pid=10475 comm="syz.6.1979" name="/" dev="configfs" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.408985][ T5093] Bluetooth: hci4: command tx timeout [ 126.413299][T10485] ip_tables: iptables: counters copy to user failed while replacing table [ 126.416811][T10485] ip_tables: iptables: counters copy to user failed while replacing table [ 126.457025][T10487] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1984'. [ 126.457994][T10487] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1984'. [ 126.504876][T10489] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.509725][ T43] audit: type=1400 audit(1791069848.681:1461): avc: denied { ioctl } for pid=10488 comm="syz.6.1985" path="/tracing/events/kvm/kvm_hv_stimer_cleanup/trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 126.509968][ T43] audit: type=1800 audit(1791069848.681:1462): pid=10489 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1985" name="trigger" dev="tracefs" ino=19680823 res=0 errno=0 [ 126.749074][T10499] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 126.801138][T10503] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 126.804960][ T43] audit: type=1800 audit(1791069848.971:1463): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152457 res=0 errno=0 [ 126.987066][T10509] kvm [10508]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 126.987941][T10509] kvm [10508]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 127.490673][ T5093] Bluetooth: hci4: command tx timeout [ 128.371752][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2000'. [ 128.393378][T10523] hsr_slave_1 (unregistering): left promiscuous mode [ 128.509832][ T43] audit: type=1800 audit(1791069850.681:1464): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2001" name="bind" dev="sysfs" ino=12888 res=0 errno=0 [ 128.551007][ T43] audit: type=1800 audit(1791069850.721:1465): pid=10527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2002" name="threaded" dev="sysfs" ino=145879 res=0 errno=0 [ 128.695299][ T43] audit: type=1800 audit(1791069850.861:1466): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35138 res=0 errno=0 [ 128.699921][ T43] audit: type=1800 audit(1791069850.861:1467): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35161 res=0 errno=0 [ 128.928947][ T5820] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 129.080260][ T5820] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.081454][ T5820] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.081480][ T5820] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.081504][ T5820] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.081538][ T5820] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.083791][ T5820] usb 11-1: config 0 descriptor?? [ 129.088453][ T43] audit: type=1800 audit(1791069851.251:1468): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152558 res=0 errno=0 [ 129.497724][ T5820] hid_parser_main: 28 callbacks suppressed [ 129.497739][ T5820] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 129.497753][ T5820] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 129.497765][ T5820] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 129.497800][ T5820] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 129.497821][ T5820] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 129.497839][ T5820] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 129.497857][ T5820] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 129.497883][ T5820] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 129.497903][ T5820] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 129.497922][ T5820] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 129.511409][ T5820] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 129.760960][ T1357] usb 11-1: USB disconnect, device number 2 [ 130.586659][T10545] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2010'. [ 130.811271][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 130.811314][ T43] audit: type=1400 audit(1791069852.981:1478): avc: denied { setopt } for pid=10557 comm="syz.6.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.812541][T10558] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2016'. [ 131.015723][T10562] syzkaller1: entered promiscuous mode [ 131.015750][T10562] syzkaller1: entered allmulticast mode [ 131.240730][ T43] audit: type=1800 audit(1791069853.411:1479): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152786 res=0 errno=0 [ 131.242614][ T43] audit: type=1800 audit(1791069853.411:1480): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152797 res=0 errno=0 [ 131.253837][ T5750] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.256771][ T5750] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.257844][ T5750] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.259873][ T5750] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.260498][ T5750] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.278608][ T43] audit: type=1800 audit(1791069853.441:1481): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152816 res=0 errno=0 [ 131.286570][ T43] audit: type=1800 audit(1791069853.451:1482): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152827 res=0 errno=0 [ 131.700253][T10569] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.700463][T10569] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.700581][T10569] bridge_slave_0: entered allmulticast mode [ 131.702863][T10569] bridge_slave_0: entered promiscuous mode [ 131.705754][T10569] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.705914][T10569] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.706023][T10569] bridge_slave_1: entered allmulticast mode [ 131.707550][T10569] bridge_slave_1: entered promiscuous mode [ 131.734731][T10569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.736602][T10569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.755349][T10569] team0: Port device team_slave_0 added [ 131.757834][T10569] team0: Port device team_slave_1 added [ 131.783562][T10569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.783580][T10569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.783605][T10569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.784996][T10569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.785014][T10569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.785045][T10569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.827887][T10569] hsr_slave_0: entered promiscuous mode [ 131.829378][T10569] hsr_slave_1: entered promiscuous mode [ 131.829968][T10569] debugfs: 'hsr0' already exists in 'hsr' [ 131.829987][T10569] Cannot create hsr debugfs directory [ 131.907511][ T43] audit: type=1800 audit(1791069854.071:1483): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27251 res=0 errno=0 [ 131.908403][ T43] audit: type=1800 audit(1791069854.071:1484): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27250 res=0 errno=0 [ 131.917031][ T43] audit: type=1800 audit(1791069854.081:1485): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158439 res=0 errno=0 [ 132.013061][T10569] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 132.016838][T10569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.017661][T10569] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 132.025685][T10569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.026687][T10569] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 132.031190][T10569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.032102][T10569] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 132.036056][T10569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.094166][T10569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.105042][T10569] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.108393][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.108493][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.116812][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.116901][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.159077][ T851] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 132.309671][ T851] usb 11-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 132.311036][ T851] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.311071][ T851] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.313358][ T851] usb 11-1: config 0 descriptor?? [ 132.317413][ T43] audit: type=1800 audit(1791069854.481:1486): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158807 res=0 errno=0 [ 132.321207][ T43] audit: type=1800 audit(1791069854.491:1487): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=158836 res=0 errno=0 [ 132.321740][ T851] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 132.471266][T10569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.611174][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.611225][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.687314][T10569] veth0_vlan: entered promiscuous mode [ 132.696853][T10569] veth1_vlan: entered promiscuous mode [ 132.715033][T10569] veth0_macvtap: entered promiscuous mode [ 132.718523][T10569] veth1_macvtap: entered promiscuous mode [ 132.729040][T10569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.737791][T10569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.825237][ T5812] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.835465][ T5812] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.835495][ T5812] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.835516][ T5812] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.895481][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.895502][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.927899][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.927914][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.133390][T10645] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2038'. [ 133.134750][T10645] netlink: 75 bytes leftover after parsing attributes in process `syz.7.2038'. [ 133.230500][T10651] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 133.338857][ T5750] Bluetooth: hci5: command tx timeout [ 133.676858][T10676] device-mapper: table: 248:0: multipath: not enough path parameters (-EINVAL) [ 133.676885][T10676] device-mapper: ioctl: error adding target to table [ 133.757827][T10678] printk: console [ttyS0] disabled [ 133.787376][T10678] printk: console [ttyS0] enabled [ 134.934901][ T9] usb 11-1: USB disconnect, device number 3 [ 135.051016][ T5093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 135.065906][ T5093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 135.068131][ T5093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 135.070615][ T5093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 135.071232][ T5093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 135.244457][T10730] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2072'. [ 135.418843][ T5093] Bluetooth: hci5: command tx timeout [ 135.443010][T10710] Process accounting resumed [ 135.554024][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.554165][T10716] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.554268][T10716] bridge_slave_0: entered allmulticast mode [ 135.555725][T10716] bridge_slave_0: entered promiscuous mode [ 135.559498][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.559627][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.559826][T10716] bridge_slave_1: entered allmulticast mode [ 135.561191][T10716] bridge_slave_1: entered promiscuous mode [ 135.596724][T10716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.600082][T10716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.628922][T10716] team0: Port device team_slave_0 added [ 135.631622][T10716] team0: Port device team_slave_1 added [ 135.657931][T10716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.657949][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.657971][T10716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.659924][T10716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.659935][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.659955][T10716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.701919][T10716] hsr_slave_0: entered promiscuous mode [ 135.703204][T10716] hsr_slave_1: entered promiscuous mode [ 135.704045][T10716] debugfs: 'hsr0' already exists in 'hsr' [ 135.704070][T10716] Cannot create hsr debugfs directory [ 135.847019][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 135.847038][ T43] audit: type=1800 audit(1791069858.011:1503): pid=10716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27251 res=0 errno=0 [ 135.850567][ T43] audit: type=1800 audit(1791069858.021:1504): pid=10716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27250 res=0 errno=0 [ 135.860595][ T43] audit: type=1800 audit(1791069858.021:1505): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164849 res=0 errno=0 [ 136.047297][ T43] audit: type=1800 audit(1791069858.211:1506): pid=10752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2078" name="driver_override" dev="sysfs" ino=2378 res=0 errno=0 [ 136.071164][T10716] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 136.074711][T10716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.075315][T10716] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 136.086702][T10716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.087143][T10716] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 136.097348][T10716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.098202][T10716] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 136.107466][T10716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.130644][T10760] binder: 10754:10760 ioctl c018620c 200000000240 returned -22 [ 136.131764][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.131813][T10716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.131951][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.131996][T10716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.171259][T10762] ip_tables: iptables: counters copy to user failed while replacing table [ 136.217443][T10716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.234478][ T223] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.235627][ T223] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.251724][T10716] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.262914][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.262984][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.266906][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.266967][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.315662][T10768] input: syz1 as /devices/virtual/input/input27 [ 136.319795][ T43] audit: type=1800 audit(1791069858.481:1507): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165209 res=0 errno=0 [ 136.319825][ T43] audit: type=1800 audit(1791069858.481:1508): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=165224 res=0 errno=0 [ 136.319845][ T43] audit: type=1800 audit(1791069858.481:1509): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=165227 res=0 errno=0 [ 136.326002][ T43] audit: type=1800 audit(1791069858.491:1510): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=165226 res=0 errno=0 [ 136.326043][ T43] audit: type=1800 audit(1791069858.491:1511): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=165225 res=0 errno=0 [ 136.326073][ T43] audit: type=1800 audit(1791069858.491:1512): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=165216 res=0 errno=0 [ 136.671404][T10716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.858433][T10716] veth0_vlan: entered promiscuous mode [ 136.870708][T10716] veth1_vlan: entered promiscuous mode [ 136.898463][T10716] veth0_macvtap: entered promiscuous mode [ 136.904926][T10716] veth1_macvtap: entered promiscuous mode [ 136.921141][T10716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.934660][T10716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.961420][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.988887][ T5785] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.988933][ T5785] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.988964][ T5785] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.037057][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.037079][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.073264][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.073285][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.169046][ T5093] Bluetooth: hci6: command tx timeout [ 137.225091][T10814] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.380408][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2099'. [ 137.488949][ T5093] Bluetooth: hci5: command tx timeout [ 137.624329][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2104'. [ 137.624364][T10833] netlink: 'syz.6.2104': attribute type 30 has an invalid length. [ 137.642185][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2104'. [ 137.642217][T10833] netlink: 'syz.6.2104': attribute type 30 has an invalid length. [ 137.659134][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.659252][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.659523][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.659791][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.699145][ T50] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 137.756642][T10839] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 137.859674][ T50] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.860804][ T50] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.860828][ T50] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.860845][ T50] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.860873][ T50] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.863198][ T50] usb 12-1: config 0 descriptor?? [ 137.879198][ T9] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 137.983091][T10847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10847 comm=syz.6.2109 [ 138.030068][ T9] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.033456][ T9] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.033474][ T9] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.033495][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.243517][ T9] usb 13-1: usb_control_msg returned -32 [ 138.243556][ T9] usbtmc 13-1:16.0: can't read capabilities [ 138.284445][ T50] hid_parser_main: 5 callbacks suppressed [ 138.284461][ T50] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 138.284477][ T50] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 138.284489][ T50] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 138.284500][ T50] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 138.284512][ T50] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 138.284524][ T50] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 138.284536][ T50] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 138.284547][ T50] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 138.284559][ T50] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 138.284571][ T50] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 138.308421][ T50] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 138.489240][ T10] usb 12-1: USB disconnect, device number 2 [ 138.499592][ T9] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 138.547712][ T5750] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 138.551113][ T5750] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 138.552702][ T5750] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 138.553435][ T5750] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 138.554381][ T5750] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 138.657028][ T9] usb 11-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 138.658624][ T9] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 138.658645][ T9] usb 11-1: can't read configurations, error -71 [ 138.814158][ T30] usb 13-1: USB disconnect, device number 2 [ 139.053095][T10852] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.053181][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.053236][T10852] bridge_slave_0: entered allmulticast mode [ 139.053997][T10852] bridge_slave_0: entered promiscuous mode [ 139.055491][T10852] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.055563][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.055626][T10852] bridge_slave_1: entered allmulticast mode [ 139.056455][T10852] bridge_slave_1: entered promiscuous mode [ 139.073922][T10852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.076648][T10852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.101181][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2113'. [ 139.101831][T10852] team0: Port device team_slave_0 added [ 139.104139][T10852] team0: Port device team_slave_1 added [ 139.126386][T10852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.126406][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.126427][T10852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.127637][T10852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.127650][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.127670][T10852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.149727][T10852] hsr_slave_0: entered promiscuous mode [ 139.150460][T10852] hsr_slave_1: entered promiscuous mode [ 139.151120][T10852] debugfs: 'hsr0' already exists in 'hsr' [ 139.151138][T10852] Cannot create hsr debugfs directory [ 139.231003][T10877] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 139.258901][ T5750] Bluetooth: hci6: command tx timeout [ 139.295248][T10879] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 139.385248][T10852] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 139.387919][T10852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.389863][T10852] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 139.397978][T10852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.413271][T10852] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 139.420391][T10852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.421127][T10852] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 139.433843][T10852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.484013][T10852] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.484062][T10852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.484172][T10852] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.484216][T10852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.524137][T10852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.534955][T10852] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.540169][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.545025][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.572277][T10903] input: syz0 as /devices/virtual/input/input28 [ 139.578940][ T5750] Bluetooth: hci5: command tx timeout [ 139.642925][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.642973][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.656700][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.656749][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.737892][T10914] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 140.007126][T10852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.163682][T10852] veth0_vlan: entered promiscuous mode [ 140.167190][T10852] veth1_vlan: entered promiscuous mode [ 140.181639][T10852] veth0_macvtap: entered promiscuous mode [ 140.185666][T10852] veth1_macvtap: entered promiscuous mode [ 140.198326][T10852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.204244][T10852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.239423][ T5785] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.239606][ T5785] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.239703][ T5785] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.239721][ T5785] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.323481][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.323504][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.365303][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.365319][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.393485][T10969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 140.393606][T10969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 140.393785][T10969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 140.393913][T10969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 140.394025][T10969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 140.394129][T10969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 140.394245][T10969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 140.394360][T10969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 140.609045][ T5750] Bluetooth: hci7: command tx timeout [ 141.091763][ T43] kauditd_printk_skb: 56 callbacks suppressed [ 141.091786][ T43] audit: type=1800 audit(1791069863.261:1569): pid=11022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2169" name="control" dev="sysfs" ino=5235 res=0 errno=0 [ 141.166818][T11022] smpboot: CPU 1 is now offline [ 141.299680][T11022] smpboot: CPU 3 is now offline [ 141.330218][ T5750] Bluetooth: hci6: command tx timeout [ 141.402661][ T43] audit: type=1800 audit(1791069863.571:1570): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=793 res=0 errno=0 [ 141.484567][T11024] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 141.611397][ T43] audit: type=1800 audit(1791069863.781:1571): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173004 res=0 errno=0 [ 141.615891][ T43] audit: type=1800 audit(1791069863.781:1572): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173016 res=0 errno=0 [ 141.635940][T11024] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 141.643561][ T43] audit: type=1800 audit(1791069863.811:1573): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173028 res=0 errno=0 [ 141.691770][ T43] audit: type=1800 audit(1791069863.861:1574): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173122 res=0 errno=0 [ 141.693525][ T43] audit: type=1800 audit(1791069863.861:1575): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173134 res=0 errno=0 [ 141.702075][ T43] audit: type=1800 audit(1791069863.871:1576): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173146 res=0 errno=0 [ 141.904201][ T43] audit: type=1400 audit(1791069864.071:1577): avc: denied { write } for pid=11039 comm="syz.8.2176" name="/" dev="ocfs2_dlmfs" ino=38647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.906140][ T43] audit: type=1400 audit(1791069864.071:1578): avc: denied { create } for pid=11039 comm="syz.8.2176" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 141.906314][T11040] dlm: no local IP address has been set [ 141.906323][T11040] dlm: cannot start dlm midcomms -107 [ 141.906342][T11040] (syz.8.2176,11040,3):user_dlm_register:674 ERROR: status = -107 [ 141.906356][T11040] (syz.8.2176,11040,3):dlmfs_mkdir:437 ERROR: Error -107 could not register domain "file1" [ 142.028131][T11059] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2185'. [ 142.408338][T11084] ecryptfs_get_tree: kern_path() failed [ 142.414289][T11084] Reading sb failed; rc = [-2] [ 142.418039][T11086] serial 00:04: in use; can't configure [ 142.487568][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2198'. [ 142.689446][ T5750] Bluetooth: hci7: command tx timeout [ 142.857259][T11105] Invalid argument reading file caps for ./file0 [ 143.113316][T11123] net_ratelimit: 46 callbacks suppressed [ 143.113335][T11123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.137806][T11125] jffs2: notice: (11125) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 143.248971][ T5820] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 143.408946][ T5750] Bluetooth: hci6: command tx timeout [ 143.409520][ T5820] usb 11-1: Using ep0 maxpacket: 8 [ 143.410242][ T5820] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.411359][ T5820] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.411386][ T5820] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.411411][ T5820] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.411433][ T5820] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.411468][ T5820] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.578901][ T10] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 143.624984][ T5820] usb 11-1: GET_CAPABILITIES returned 0 [ 143.625065][ T5820] usbtmc 11-1:16.0: can't read capabilities [ 143.731056][ T10] usb 12-1: not running at top speed; connect to a high speed hub [ 143.731076][ T10] usb 12-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 143.732061][ T10] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.732093][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.737493][ T10] cyberjack 12-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 143.761017][ T10] usb 12-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 143.827515][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.827598][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.828882][ T73] usb 11-1: USB disconnect, device number 6 [ 143.944432][T11134] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 143.948631][ T5845] usb 12-1: USB disconnect, device number 3 [ 143.952596][ T5845] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 143.953037][ T5845] cyberjack 12-1:1.0: device disconnected [ 144.772052][ T5750] Bluetooth: hci7: command tx timeout [ 145.213426][T11227] input: syz0 as /devices/virtual/input/input29 [ 145.264685][T11232] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input30 [ 145.321801][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 145.339520][T11239] sd 0:0:0:0: PR command failed: 1026 [ 145.339561][T11239] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 145.339595][T11239] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 145.698908][ T5845] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 145.795314][T11269] size and base must be multiples of 4 kiB [ 145.795336][T11269] CPU: 3 UID: 0 PID: 11269 Comm: syz.7.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.795364][T11269] Tainted: [L]=SOFTLOCKUP [ 145.795371][T11269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.795383][T11269] Call Trace: [ 145.795390][T11269] [ 145.795398][T11269] dump_stack_lvl+0x100/0x190 [ 145.795434][T11269] mtrr_del.cold+0x72/0x85 [ 145.795455][T11269] mtrr_ioctl+0xbc8/0xcf0 [ 145.795475][T11269] ? __pfx_mtrr_ioctl+0x10/0x10 [ 145.795494][T11269] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 145.795540][T11269] ? __fget_files+0x34/0x3d0 [ 145.795577][T11269] ? __pfx_mtrr_ioctl+0x10/0x10 [ 145.795598][T11269] proc_reg_unlocked_ioctl+0x229/0x320 [ 145.795619][T11269] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 145.795640][T11269] __x64_sys_ioctl+0x18e/0x210 [ 145.795664][T11269] do_syscall_64+0x123/0x790 [ 145.795688][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.795709][T11269] RIP: 0033:0x7fc15f19e159 [ 145.795725][T11269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.795744][T11269] RSP: 002b:00007fc160038028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.795763][T11269] RAX: ffffffffffffffda RBX: 00007fc15f425fa0 RCX: 00007fc15f19e159 [ 145.795776][T11269] RDX: 0000200000000040 RSI: 00000000400c4d04 RDI: 0000000000000004 [ 145.795788][T11269] RBP: 00007fc15f23506b R08: 0000000000000000 R09: 0000000000000000 [ 145.795799][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.795810][T11269] R13: 00007fc15f426038 R14: 00007fc15f425fa0 R15: 00007ffd72bde0d8 [ 145.795836][T11269] [ 145.859763][ T5845] usb 11-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 145.860636][ T5845] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.860666][ T5845] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 145.860682][ T5845] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 145.860697][ T5845] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 145.860711][ T5845] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.860724][ T5845] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 145.860738][ T5845] usb 11-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 145.862461][ T5845] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.862478][ T5845] usb 11-1: Product: syz [ 145.862487][ T5845] usb 11-1: Manufacturer: syz [ 145.862496][ T5845] usb 11-1: SerialNumber: syz [ 145.866996][T11271] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.882859][T11245] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 145.882994][T11245] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 145.883143][T11245] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 145.884757][ T5845] keyspan 11-1:1.0: Keyspan 1 port adapter converter detected [ 145.885197][ T5845] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 145.887947][ T5845] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 82 [ 145.888000][ T5845] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 145.891292][ T5845] usb 11-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 146.198855][ T5845] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 146.226343][ T1691] usb 11-1: USB disconnect, device number 7 [ 146.233364][ T1691] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 146.234996][ T1691] keyspan 11-1:1.0: device disconnected [ 146.348927][ T5845] usb 12-1: Using ep0 maxpacket: 8 [ 146.349684][ T5845] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 146.350651][ T5845] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 146.350672][ T5845] usb 12-1: config 0 has no interface number 0 [ 146.350726][ T43] kauditd_printk_skb: 76 callbacks suppressed [ 146.350737][ T43] audit: type=1800 audit(1791069868.521:1655): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174173 res=0 errno=0 [ 146.350877][ T5845] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.350896][ T5845] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 146.350920][ T5845] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.350939][ T5845] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.350968][ T5845] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.353926][ T5845] usb 12-1: config 0 descriptor?? [ 146.356929][ T43] audit: type=1800 audit(1791069868.521:1656): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174192 res=0 errno=0 [ 146.367059][ T43] audit: type=1800 audit(1791070124.584:1657): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=174221 res=0 errno=0 [ 146.367102][ T43] audit: type=1400 audit(1791070124.584:1658): avc: denied { write } for pid=11286 comm="syz.9.2288" name="/" dev="9p" ino=71827827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.367137][ T43] audit: type=1400 audit(1791070124.584:1659): avc: denied { write } for pid=11286 comm="syz.9.2288" name="/" dev="9p" ino=71827827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.367172][ T43] audit: type=1800 audit(1791070124.584:1660): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=174199 res=0 errno=0 [ 146.367202][ T43] audit: type=1400 audit(1791070124.584:1661): avc: denied { rename } for pid=11286 comm="syz.9.2288" name="file0" dev="9p" ino=71827855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.368302][ T43] audit: type=1800 audit(1791070124.584:1662): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=174200 res=0 errno=0 [ 146.372661][ T43] audit: type=1800 audit(1791070124.594:1663): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=174201 res=0 errno=0 [ 146.375829][ T5845] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 146.396297][ T43] audit: type=1800 audit(1791070124.614:1664): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174241 res=0 errno=0 [ 146.631230][ T42] usb 12-1: USB disconnect, device number 4 [ 146.632777][ C0] ldusb 12-1:0.55: usb_submit_urb failed (-19) [ 146.632934][T11275] ldusb 12-1:0.55: Couldn't submit interrupt_out_urb -19 [ 146.638581][ T42] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 146.849808][ T5750] Bluetooth: hci7: command tx timeout [ 146.952096][T11322] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 147.248952][ T5820] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 147.423511][ T5820] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 147.424545][ T5820] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.424569][ T5820] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 147.424604][ T5820] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.584263][T11353] netlink: zone id is out of range [ 147.584277][T11353] netlink: zone id is out of range [ 147.584284][T11353] netlink: zone id is out of range [ 147.584290][T11353] netlink: zone id is out of range [ 147.584297][T11353] netlink: zone id is out of range [ 147.584304][T11353] netlink: zone id is out of range [ 147.584670][T11353] netlink: zone id is out of range [ 147.584679][T11353] netlink: zone id is out of range [ 147.584686][T11353] netlink: zone id is out of range [ 147.657676][ T5820] usb 11-1: USB disconnect, device number 8 [ 147.938676][T11373] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 147.938676][T11373] The task syz.9.2320 (11373) triggered the difference, watch for misbehavior. [ 147.944662][T11374] netlink: 'syz.8.2322': attribute type 12 has an invalid length. [ 147.944684][T11374] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2322'. [ 147.945312][T11374] netlink: 'syz.8.2322': attribute type 12 has an invalid length. [ 147.945325][T11374] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2322'. [ 148.387809][T11390] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 148.387901][T11391] jffs2: notice: (11391) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 148.475987][T11396] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 148.604501][T11404] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input31 [ 149.044998][T11440] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 149.049168][ T5845] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 149.087100][T11442] loop5: detected capacity change from 0 to 7 [ 149.093540][T11442] Dev loop5: unable to read RDB block 7 [ 149.093560][T11442] loop5: AHDI p2 p4 [ 149.093572][T11442] loop5: partition table partially beyond EOD, truncated [ 149.103337][T11442] loop5: p4 start 254 is beyond EOD, truncated [ 149.209396][ T5845] usb 14-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 149.209839][ T5845] usb 14-1: config 57 has no interfaces? [ 149.210985][ T5845] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 149.210997][ T5845] usb 14-1: Product: syz [ 149.211004][ T5845] usb 14-1: Manufacturer: syz [ 149.444948][ T5845] usb 14-1: USB disconnect, device number 2 [ 149.733098][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2379'. [ 149.931045][T11518] kernel read not supported for file /o2net/connected_nodes (pid: 11518 comm: syz.6.2385) [ 150.090561][T11529] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 150.458868][ T42] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 150.628909][ T42] usb 13-1: Using ep0 maxpacket: 16 [ 150.629640][ T42] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.630697][ T42] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.630724][ T42] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.630744][ T42] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.630778][ T42] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.635159][ T42] usb 13-1: config 0 descriptor?? [ 150.784219][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2413'. [ 151.044834][ T42] hid_parser_main: 5 callbacks suppressed [ 151.044849][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 151.044862][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 151.044874][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 151.044886][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 151.044898][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 151.044909][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 151.044921][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 151.044933][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 151.044945][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 151.044956][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 151.047931][ T42] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:045E:07DA.000C/input/input32 [ 151.057292][T11602] overlay: filesystem on ./bus is read-only [ 151.158118][ T42] microsoft 0003:045E:07DA.000C: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 151.255975][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2426'. [ 151.263465][ T5845] usb 13-1: USB disconnect, device number 3 [ 151.434376][ T43] kauditd_printk_skb: 66 callbacks suppressed [ 151.434395][ T43] audit: type=1800 audit(1791070129.654:1731): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175542 res=0 errno=0 [ 151.436096][ T43] audit: type=1800 audit(1791070129.654:1732): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175557 res=0 errno=0 [ 151.540458][ T43] audit: type=1800 audit(1791070129.764:1733): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175572 res=0 errno=0 [ 151.546469][T11625] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.597470][ T43] audit: type=1800 audit(1791070129.814:1734): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2433" name="new_device" dev="sysfs" ino=27250 res=0 errno=0 [ 151.608857][ T42] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 151.670295][ T43] audit: type=1326 audit(1791070129.894:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.6.2434" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f830179e159 code=0x0 [ 151.709439][ T43] audit: type=1326 audit(1791070129.934:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.9.2436" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa07939e159 code=0x0 [ 151.783803][ T42] usb 12-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 151.784950][ T42] usb 12-1: config 1 has an invalid interface number: 3 but max is 0 [ 151.784970][ T42] usb 12-1: config 1 has no interface number 0 [ 151.787235][ T42] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.787251][ T42] usb 12-1: Product: syz [ 151.787259][ T42] usb 12-1: Manufacturer: syz [ 151.787267][ T42] usb 12-1: SerialNumber: syz [ 151.792084][ T43] audit: type=1800 audit(1791070130.014:1737): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175591 res=0 errno=0 [ 151.794482][ T42] usb 12-1: 3:1 : does not exist [ 151.794544][ T42] usb 12-1: 3:2 : does not exist [ 151.795358][ T43] audit: type=1800 audit(1791070130.014:1738): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=175623 res=0 errno=0 [ 151.795403][ T43] audit: type=1800 audit(1791070130.014:1739): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=175598 res=0 errno=0 [ 151.795437][ T43] audit: type=1800 audit(1791070130.014:1740): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=175599 res=0 errno=0 [ 152.230125][T11653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=11653 comm=syz.8.2444 [ 152.507099][T11668] device-mapper: table: 248:0: multipath: invalid number of paths (-EINVAL) [ 152.507124][T11668] device-mapper: ioctl: error adding target to table [ 152.557170][ T10] usb 12-1: USB disconnect, device number 5 [ 152.652164][ T1691] e1000 0000:00:06.0 eth0: Reset adapter [ 152.779263][ T1691] e1000 0000:00:06.0 eth0: Reset adapter [ 154.940240][ T1691] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 159.204582][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 159.204603][ T43] audit: type=1400 audit(1791070137.424:1759): avc: denied { write } for pid=11704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.270967][ T43] audit: type=1400 audit(1791070137.494:1760): avc: denied { write } for pid=11707 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.955216][ T43] audit: type=1400 audit(1791070140.174:1761): avc: denied { write } for pid=11709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.035472][ T43] audit: type=1400 audit(1791070140.254:1762): avc: denied { write } for pid=11712 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.461219][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2460'. [ 170.546723][T11729] loop5: detected capacity change from 0 to 4095 [ 170.700213][ T43] audit: type=1400 audit(1791070148.914:1763): avc: denied { nosuid_transition } for pid=11734 comm="syz.7.2469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 170.707183][ T43] audit: type=1400 audit(1791070148.924:1764): avc: denied { transition } for pid=11734 comm="syz.7.2469" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 170.707240][ T43] audit: type=1400 audit(1791070148.924:1765): avc: denied { entrypoint } for pid=11734 comm="syz.7.2469" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=18 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.707284][ T43] audit: type=1400 audit(1791070148.924:1766): avc: denied { share } for pid=11734 comm="syz.7.2469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 170.707321][ T43] audit: type=1400 audit(1791070148.924:1767): avc: denied { noatsecure } for pid=11734 comm="syz.7.2469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 170.755394][T11729] buffer_io_error: 138 callbacks suppressed [ 170.755416][T11729] Buffer I/O error on dev loop5, logical block 511, async page read [ 170.766192][T11731] Buffer I/O error on dev loop5, logical block 511, async page read [ 171.409103][ T43] audit: type=1400 audit(1791070149.634:1768): avc: denied { mount } for pid=11774 comm="syz.7.2488" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 171.456859][ T43] audit: type=1400 audit(1791070149.674:1769): avc: denied { unmount } for pid=10569 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 171.528350][ T43] audit: type=1800 audit(1791070149.744:1770): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2490" name="remove" dev="sysfs" ino=2287 res=0 errno=0 [ 171.537614][ T43] audit: type=1800 audit(1791070149.754:1771): pid=11786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2491" name="new_array" dev="sysfs" ino=64791 res=0 errno=0 [ 171.539384][ T43] audit: type=1800 audit(1791070149.764:1772): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2490" name="rescan" dev="sysfs" ino=1106 res=0 errno=0 [ 171.556854][T11784] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 171.569336][T11784] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 171.569432][T11784] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 171.569707][T11784] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref] [ 171.612839][T11784] pci 0000:00:03.0: Adding to iommu group 3 [ 171.647302][T11784] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref]: assigned [ 171.657388][T11784] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 171.660302][T11784] pci 0000:00:03.0: BAR 0 [io 0x2020-0x203f]: assigned [ 171.980237][T11801] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2498'. [ 171.980261][T11801] bond0: ARP target 8.4.0.0 is already present [ 171.980273][T11801] bond0: option arp_ip_target: invalid value (1032) [ 172.381156][T11814] net_ratelimit: 497 callbacks suppressed [ 172.381170][T11814] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.237929][T11845] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 173.238326][T11845] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 173.427956][T11861] sd 0:0:0:0: PR command failed: 1026 [ 173.427982][T11861] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 173.428001][T11861] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 173.769661][T11873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.833309][T11768] Set syz1 is full, maxelem 65536 reached [ 173.892842][T11879] misc userio: Begin command sent, but we're already running [ 174.614572][T11911] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 174.614594][T11911] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 174.623994][T11911] overlayfs: conflicting lowerdir path [ 175.096079][T11941] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 175.190827][T11950] binder: 11949:11950 ioctl c0306201 2000000001c0 returned -14 [ 175.851385][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 175.851398][ T43] audit: type=1804 audit(1791070155.068:1802): pid=11968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.2569" name="/newroot/70/bus" dev="tmpfs" ino=395 res=1 errno=0 [ 176.028435][T11978] input: syz0 as /devices/virtual/input/input34 [ 176.030473][ T43] audit: type=1800 audit(1791070155.248:1803): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177288 res=0 errno=0 [ 176.033927][ T43] audit: type=1800 audit(1791070155.248:1804): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=177303 res=0 errno=0 [ 176.035461][ T43] audit: type=1800 audit(1791070155.248:1805): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22535 res=0 errno=0 [ 176.039316][ T43] audit: type=1800 audit(1791070155.248:1806): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22564 res=0 errno=0 [ 176.070260][ T43] audit: type=1800 audit(1791070155.288:1807): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=177306 res=0 errno=0 [ 176.071229][ T43] audit: type=1800 audit(1791070155.288:1808): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=177305 res=0 errno=0 [ 176.076221][ T43] audit: type=1800 audit(1791070155.288:1809): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=177304 res=0 errno=0 [ 176.076266][ T43] audit: type=1800 audit(1791070155.288:1810): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=177295 res=0 errno=0 [ 176.078007][ T43] audit: type=1800 audit(1791070155.288:1811): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=177298 res=0 errno=0 [ 176.216306][T11982] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 176.946541][T12035] syzkaller1: entered promiscuous mode [ 176.950545][T12035] syzkaller1: entered allmulticast mode [ 177.671165][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2610'. [ 178.184670][T12116] type: 4261412864 invalid [ 178.378887][ T5845] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 178.378917][ T5845] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 178.380021][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.436185][T12128] ip_tables: iptables: counters copy to user failed while replacing table [ 178.832131][T12144] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 178.971517][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2638'. [ 179.747610][T12196] tunl0: entered promiscuous mode [ 179.749726][T12196] netlink: 'syz.6.2657': attribute type 4 has an invalid length. [ 179.749745][T12196] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2657'. [ 180.043189][T12219] »»»»»»: renamed from vlan0 (while UP) [ 180.608964][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.611129][ T5845] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 180.611147][ T5845] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 181.095280][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 181.095293][ T43] audit: type=1800 audit(1791070160.308:1847): pid=12269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2689" name="bus" dev="tmpfs" ino=966 res=0 errno=0 [ 181.144322][T12273] tipc: Enabling not permitted [ 181.144342][T12273] tipc: Enabling of bearer rejected, failed to enable media [ 181.277270][ T43] audit: type=1400 audit(1791070160.488:1848): avc: denied { setopt } for pid=12282 comm="syz.6.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.387348][ T43] audit: type=1400 audit(1791070160.598:1849): avc: denied { setattr } for pid=12290 comm="syz.6.2700" name="unix" dev="proc" ino=4026533134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 181.592135][ T43] audit: type=1400 audit(1791070160.808:1850): avc: denied { mount } for pid=12310 comm="syz.9.2710" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 181.601969][ T43] audit: type=1400 audit(1791070160.818:1851): avc: denied { unmount } for pid=10852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 181.811772][T12330] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.962201][ T43] audit: type=1800 audit(1791070161.178:1852): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177742 res=0 errno=0 [ 181.972998][ T43] audit: type=1800 audit(1791070161.178:1853): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177754 res=0 errno=0 [ 181.993932][ T43] audit: type=1800 audit(1791070161.208:1854): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177766 res=0 errno=0 [ 182.011475][T12346] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 182.011492][T12346] CPU: 1 UID: 0 PID: 12346 Comm: syz.8.2724 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.011510][T12346] Tainted: [L]=SOFTLOCKUP [ 182.011514][T12346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.011521][T12346] Call Trace: [ 182.011525][T12346] [ 182.011530][T12346] dump_stack_lvl+0x100/0x190 [ 182.011553][T12346] sysfs_warn_dup.cold+0x1c/0x28 [ 182.011572][T12346] sysfs_create_dir_ns+0x24b/0x2b0 [ 182.011589][T12346] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 182.011604][T12346] ? find_held_lock+0x2b/0x80 [ 182.011621][T12346] ? kobject_add_internal+0x25f/0x930 [ 182.011637][T12346] ? kobject_add_internal+0x25f/0x930 [ 182.011655][T12346] ? class_dir_child_ns_type+0xd/0x60 [ 182.011673][T12346] kobject_add_internal+0x2c8/0x930 [ 182.011691][T12346] kobject_add+0x16a/0x1e0 [ 182.011706][T12346] ? __pfx_kobject_add+0x10/0x10 [ 182.011722][T12346] ? get_device_parent+0x1b3/0x4c0 [ 182.011738][T12346] ? kobject_put+0xb9/0x640 [ 182.011757][T12346] device_add+0x294/0x1970 [ 182.011789][T12346] ? lockdep_init_map_type+0x5c/0x250 [ 182.011805][T12346] ? __pfx_device_add+0x10/0x10 [ 182.011822][T12346] ? lockdep_init_map_type+0x5c/0x250 [ 182.011837][T12346] ? __init_waitqueue_head+0xca/0x150 [ 182.011857][T12346] tty_register_device_attr+0x388/0x810 [ 182.011875][T12346] ? lockdep_init_map_type+0x5c/0x250 [ 182.011889][T12346] ? __pfx_tty_register_device_attr+0x10/0x10 [ 182.011915][T12346] ? tty_port_init+0x156/0x1c0 [ 182.011939][T12346] gsm_activate_mux+0x155/0x2a0 [ 182.011961][T12346] gsmld_ioctl+0xbbc/0x15c0 [ 182.011983][T12346] ? __pfx_gsmld_ioctl+0x10/0x10 [ 182.012016][T12346] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.012038][T12346] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 182.012062][T12346] ? __pfx_gsmld_ioctl+0x10/0x10 [ 182.012078][T12346] tty_ioctl+0x12f0/0x1800 [ 182.012101][T12346] ? __pfx_tty_ioctl+0x10/0x10 [ 182.012122][T12346] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 182.012149][T12346] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 182.012177][T12346] ? __fget_files+0x34/0x3d0 [ 182.012211][T12346] ? selinux_file_ioctl+0x13b/0x290 [ 182.012233][T12346] ? selinux_file_ioctl+0xb6/0x290 [ 182.012267][T12346] ? __pfx_tty_ioctl+0x10/0x10 [ 182.012296][T12346] __x64_sys_ioctl+0x18e/0x210 [ 182.012319][T12346] do_syscall_64+0x123/0x790 [ 182.012343][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.012362][T12346] RIP: 0033:0x7f449919e159 [ 182.012377][T12346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.012395][T12346] RSP: 002b:00007f4499ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.012413][T12346] RAX: ffffffffffffffda RBX: 00007f4499426090 RCX: 00007f449919e159 [ 182.012425][T12346] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 182.012436][T12346] RBP: 00007f449923506b R08: 0000000000000000 R09: 0000000000000000 [ 182.012447][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.012457][T12346] R13: 00007f4499426128 R14: 00007f4499426090 R15: 00007ffe83a60168 [ 182.012480][T12346] [ 182.023244][T12346] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 182.098883][ T43] audit: type=1800 audit(1791070161.308:1855): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177790 res=0 errno=0 [ 182.103080][ T43] audit: type=1800 audit(1791070161.318:1856): pid=12350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177778 res=0 errno=0 [ 182.689276][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.698890][ T5845] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 182.698906][ T5845] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 182.698903][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.718933][ T10] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 182.772392][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.868846][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 182.869509][ T10] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.870515][ T10] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 182.870539][ T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 182.870557][ T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.870575][ T10] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.870606][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.083194][ T10] usb 11-1: GET_CAPABILITIES returned 0 [ 183.083218][ T10] usbtmc 11-1:16.0: can't read capabilities [ 183.179878][T12400] vcan0: tx address claim with dlc 0 [ 183.204066][T12403] netlink: Unknown NAT attribute (type=1025, max=9) [ 183.204101][T12403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.287471][T11990] usb 11-1: USB disconnect, device number 9 [ 183.545197][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2751'. [ 183.547088][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.756432][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2757'. [ 183.811839][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.837341][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2760'. [ 183.933455][T12444] i2c i2c-0: new_device: Missing parameters [ 183.991844][T12450] vhci_hcd vhci_hcd.0: failed to lookup sock [ 184.209055][T12468] syz_tun: entered allmulticast mode [ 184.213507][T12467] syz_tun: left allmulticast mode [ 184.238617][T12470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.253904][T12473] xt_hashlimit: size too large, truncated to 1048576 [ 184.648895][ T50] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 184.737660][T12483] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 184.808876][ T50] usb 14-1: Using ep0 maxpacket: 8 [ 184.809742][ T50] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.811296][ T50] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.811325][ T50] usb 14-1: config 0 has no interface number 0 [ 184.811374][ T50] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.811423][ T50] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.812479][ T1691] kernel read not supported for file /swaps (pid: 1691 comm: kworker/0:2) [ 184.820569][ T50] usb 14-1: config 0 descriptor?? [ 184.850213][ T5750] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.851534][ T50] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 184.851980][ T5845] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 184.851996][ T5845] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 184.852160][ T1691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.887561][T12487] rnbd_client L213: map_device: Parameters missing [ 185.042187][T12497] binder: 12496:12497 ioctl c0306201 200000000080 returned -14 [ 185.110929][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2793'. [ 185.110954][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2793'. [ 185.111162][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2793'. [ 185.111180][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2793'. [ 185.195972][T12513] binder: 12512:12513 ioctl 4018620d 0 returned -22 [ 185.579939][ T35] usb 14-1: USB disconnect, device number 3 [ 185.731964][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.889244][ T1691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.194981][ T223] IPVS: starting estimator thread 0... [ 186.195152][T12528] CIFS: Attempting to mount //127.0.0.1/share [ 186.202276][T12529] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 186.220222][T12532] FAULT_INJECTION: forcing a failure. [ 186.220222][T12532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 186.220257][T12532] CPU: 2 UID: 0 PID: 12532 Comm: syz.8.2805 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.220285][T12532] Tainted: [L]=SOFTLOCKUP [ 186.220292][T12532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.220304][T12532] Call Trace: [ 186.220311][T12532] [ 186.220320][T12532] dump_stack_lvl+0x100/0x190 [ 186.220352][T12532] should_fail_ex.cold+0x5/0xa [ 186.220377][T12532] ? prepare_alloc_pages+0x16d/0x5b0 [ 186.220407][T12532] should_fail_alloc_page+0xeb/0x140 [ 186.220437][T12532] prepare_alloc_pages+0x1f0/0x5b0 [ 186.220466][T12532] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 186.220491][T12532] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 186.220515][T12532] ? rcu_is_watching+0x13/0xc0 [ 186.220543][T12532] ? trace_kmem_cache_alloc+0x91/0x100 [ 186.220573][T12532] ? kmem_cache_alloc_lru_noprof+0x2d1/0x6a0 [ 186.220600][T12532] ? __lock_acquire+0x5c0/0x1f40 [ 186.220623][T12532] ? __css_rstat_updated+0x1ce/0x590 [ 186.220649][T12532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.220682][T12532] ? rcu_is_watching+0x13/0xc0 [ 186.220708][T12532] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 186.220739][T12532] ? find_held_lock+0x2b/0x80 [ 186.220778][T12532] ? __lock_acquire+0x5c0/0x1f40 [ 186.220800][T12532] ? rcu_is_watching+0x13/0xc0 [ 186.220819][T12532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.220846][T12532] ? policy_nodemask+0xed/0x4f0 [ 186.220882][T12532] alloc_pages_mpol+0x201/0x550 [ 186.220911][T12532] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 186.220941][T12532] ? filemap_get_entry+0x22d/0x450 [ 186.220969][T12532] ? filemap_get_entry+0x22d/0x450 [ 186.221001][T12532] folio_alloc_noprof+0x22/0x250 [ 186.221022][T12532] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 186.221059][T12532] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 186.221085][T12532] ? rcu_is_watching+0x13/0xc0 [ 186.221111][T12532] ? trace_kmalloc+0xeb/0x110 [ 186.221140][T12532] __filemap_get_folio_mpol+0x653/0x1280 [ 186.221173][T12532] ioctx_alloc+0x7e1/0x21a0 [ 186.221200][T12532] ? __pfx_ioctx_alloc+0x10/0x10 [ 186.221223][T12532] __x64_sys_io_setup+0xc9/0x220 [ 186.221241][T12532] do_syscall_64+0x123/0x790 [ 186.221261][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.221282][T12532] RIP: 0033:0x7f449919e159 [ 186.221296][T12532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.221314][T12532] RSP: 002b:00007f449a01d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 186.221335][T12532] RAX: ffffffffffffffda RBX: 00007f4499425fa0 RCX: 00007f449919e159 [ 186.221346][T12532] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 186.221357][T12532] RBP: 00007f449923506b R08: 0000000000000000 R09: 0000000000000000 [ 186.221367][T12532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.221377][T12532] R13: 00007f4499426038 R14: 00007f4499425fa0 R15: 00007ffe83a60168 [ 186.221401][T12532] [ 186.301268][T12530] IPVS: using max 43 ests per chain, 103200 per kthread [ 186.418145][ T43] kauditd_printk_skb: 92 callbacks suppressed [ 186.418160][ T43] audit: type=1800 audit(1791070165.628:1949): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178838 res=0 errno=0 [ 186.783462][T12556] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2816'. [ 186.930909][ T1691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.009023][ T5845] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 187.009047][ T5845] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 187.013319][ T5750] Bluetooth: hci5: command 0x0c1a tx timeout [ 187.034422][T12528] CIFS: VFS: cifs_mount failed w/return code = -112 [ 187.365342][ T43] audit: type=1800 audit(1791070166.578:1950): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178956 res=0 errno=0 [ 187.368643][ T43] audit: type=1400 audit(1791070166.578:1951): avc: denied { write } for pid=12570 comm="syz.9.2823" name="/" dev="9p" ino=71827827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.369645][ T43] audit: type=1400 audit(1791070166.588:1952): avc: denied { create } for pid=12570 comm="syz.9.2823" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 187.598507][T12575] ovs-dp0: entered promiscuous mode [ 187.649264][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.656423][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2826'. [ 187.699261][T12580] input input35: cannot allocate more than FF_MAX_EFFECTS effects [ 187.761948][T12582] syzkaller1: entered promiscuous mode [ 187.761967][T12582] syzkaller1: entered allmulticast mode [ 187.831008][ T43] audit: type=1800 audit(1791070167.048:1953): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2830" name="run" dev="sysfs" ino=1286 res=0 errno=0 [ 187.980504][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.223873][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2837'. [ 188.353427][ T43] audit: type=1800 audit(1791070167.568:1954): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2842" name="drivers_autoprobe" dev="sysfs" ino=3448 res=0 errno=0 [ 188.409039][ T43] audit: type=1800 audit(1791070167.628:1955): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179203 res=0 errno=0 [ 188.432678][ T43] audit: type=1800 audit(1791070167.638:1956): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179225 res=0 errno=0 [ 188.433428][ T50] wacom 0003:056A:003F.000D: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 188.474765][ T43] audit: type=1800 audit(1791070167.688:1957): pid=12616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=179205 res=0 errno=0 [ 188.769090][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.008954][ T1691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.168789][ T5845] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 189.168807][ T5845] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 189.168986][ T5750] Bluetooth: hci6: command 0x0c1a tx timeout [ 189.963011][ T43] audit: type=1400 audit(1791070169.178:1958): avc: denied { shutdown } for pid=12643 comm="syz.6.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.051878][ T1691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.204447][T12655] jffs2: notice: (12655) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 190.255514][T12658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.089228][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.248932][ T5845] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 191.248953][ T5845] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 191.249103][ T5750] Bluetooth: hci7: command 0x0c1a tx timeout [ 191.360535][ T5748] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 191.361691][ T5748] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 191.365005][ T5748] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 191.368417][ T5748] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 191.393833][ T5748] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 191.438847][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 191.438860][ T43] audit: type=1800 audit(1791070170.658:1967): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22535 res=0 errno=0 [ 191.442612][ T43] audit: type=1800 audit(1791070170.658:1968): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22564 res=0 errno=0 [ 191.453553][ T43] audit: type=1800 audit(1791070170.658:1969): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26237 res=0 errno=0 [ 191.453596][ T43] audit: type=1800 audit(1791070170.658:1970): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26363 res=0 errno=0 [ 191.460621][ T5093] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 191.464584][ T5093] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 191.467033][ T5093] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 191.470531][ T5093] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 191.471145][ T5093] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 191.476004][ T43] audit: type=1800 audit(1791070170.688:1971): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26550 res=0 errno=0 [ 191.562283][ T43] audit: type=1800 audit(1791070170.778:1972): pid=11871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180165 res=0 errno=0 [ 191.563261][ T43] audit: type=1800 audit(1791070170.778:1973): pid=12357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180154 res=0 errno=0 [ 191.564665][T12673] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 191.661140][T12689] __nla_validate_parse: 1 callbacks suppressed [ 191.661160][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2872'. [ 191.664163][T12689] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2872'. [ 191.664191][T12689] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 191.762497][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.810561][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.877316][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.018068][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.039488][ T43] audit: type=1800 audit(1791070171.258:1974): pid=12716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2881" name="group_addr" dev="sysfs" ino=167437 res=0 errno=0 [ 192.131849][ T1691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.133426][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.153389][T12722] input: syz1 as /devices/virtual/input/input39 [ 192.175767][ T43] audit: type=1800 audit(1791070171.388:1975): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181571 res=0 errno=0 [ 192.177533][ T43] audit: type=1800 audit(1791070171.388:1976): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=181600 res=0 errno=0 [ 192.465694][T12741] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 192.528086][T12667] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.528241][T12667] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.528386][T12667] bridge_slave_0: entered allmulticast mode [ 192.532569][T12667] bridge_slave_0: entered promiscuous mode [ 192.535687][T12667] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.535765][T12667] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.535827][T12667] bridge_slave_1: entered allmulticast mode [ 192.536984][T12667] bridge_slave_1: entered promiscuous mode [ 192.564773][ T12] bridge_slave_1: left allmulticast mode [ 192.564800][ T12] bridge_slave_1: left promiscuous mode [ 192.568898][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.573641][ T12] bridge_slave_0: left allmulticast mode [ 192.573671][ T12] bridge_slave_0: left promiscuous mode [ 192.573905][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.765757][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.768536][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.775360][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.787686][ T12] bond0 (unregistering): Released all slaves [ 192.818487][T12667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.826918][T12667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.916164][T12667] team0: Port device team_slave_0 added [ 192.918001][T12667] team0: Port device team_slave_1 added [ 192.975772][T12667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.975791][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.975817][T12667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.993632][T12667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.993648][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.993669][T12667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.057187][T12667] hsr_slave_0: entered promiscuous mode [ 193.057695][T12667] hsr_slave_1: entered promiscuous mode [ 193.058102][T12667] debugfs: 'hsr0' already exists in 'hsr' [ 193.058121][T12667] Cannot create hsr debugfs directory [ 193.182831][ T1691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.214842][ T12] hsr_slave_0: left promiscuous mode [ 193.215477][ T12] hsr_slave_1: left promiscuous mode [ 193.215923][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.215937][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.223130][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.223144][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.238131][ T12] veth1_macvtap: left promiscuous mode [ 193.238157][ T12] veth0_macvtap: left promiscuous mode [ 193.238285][ T12] veth1_vlan: left promiscuous mode [ 193.238319][ T12] veth0_vlan: left promiscuous mode [ 193.420117][ T5750] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 193.488944][ T5750] Bluetooth: hci10: command tx timeout [ 193.495000][ T12] team0 (unregistering): Port device team_slave_1 removed [ 193.507774][ T12] team0 (unregistering): Port device team_slave_0 removed [ 193.634416][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 194.060106][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.060165][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.089585][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 194.215227][ T10] net_ratelimit: 4 callbacks suppressed [ 194.215247][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.385551][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 194.616829][T12667] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 194.619450][T12667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.620179][T12667] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 194.630627][T12667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.631275][T12667] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 194.636150][T12667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.636540][T12667] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 194.641773][T12667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.643248][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 194.702156][T12667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.709558][T12667] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.713385][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.713432][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.716945][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.717052][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.269607][ T1691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.285589][T12667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.322409][T12667] veth0_vlan: entered promiscuous mode [ 195.340731][T12667] veth1_vlan: entered promiscuous mode [ 195.410673][T12667] veth0_macvtap: entered promiscuous mode [ 195.418360][T12667] veth1_macvtap: entered promiscuous mode [ 195.453935][T12667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.464642][T12667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.490957][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.491101][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.513646][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.549385][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.569009][ T5750] Bluetooth: hci10: command tx timeout [ 195.641140][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.641164][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.695528][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.695547][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.886429][T12917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=12917 comm=syz.3.2863 [ 195.984526][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2935'. [ 195.984548][T12922] bridge: RTM_NEWNEIGH with invalid ether address [ 195.985013][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2935'. [ 195.985027][T12922] bridge: RTM_NEWNEIGH with invalid ether address [ 196.177229][T12940] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2942'. [ 196.276742][T12954] input: syz0 as /devices/virtual/input/input40 [ 196.301573][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.452828][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.469804][T12970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.476847][ T43] kauditd_printk_skb: 80 callbacks suppressed [ 196.476860][ T43] audit: type=1400 audit(1791070175.688:2057): avc: denied { write } for pid=12964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.478073][T12970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.478411][T12970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.480673][T12970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.481069][T12970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.481958][T12970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.556099][ T43] audit: type=1400 audit(1791070175.768:2058): avc: denied { write } for pid=12974 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.674269][ T43] audit: type=1400 audit(1791070175.888:2059): avc: denied { write } for pid=12981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.748436][ T43] audit: type=1400 audit(1791070175.958:2060): avc: denied { write } for pid=12990 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.768655][ T43] audit: type=1400 audit(1791070175.978:2061): avc: denied { setopt } for pid=12993 comm="syz.3.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.854786][ T43] audit: type=1400 audit(1791070176.068:2062): avc: denied { write } for pid=12999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.905698][ T43] audit: type=1400 audit(1791070176.118:2063): avc: denied { write } for pid=13002 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.909415][T13004] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 196.911795][ T43] audit: type=1800 audit(1791070176.128:2064): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188827 res=0 errno=0 [ 197.001949][ T43] audit: type=1400 audit(1791070176.218:2065): avc: denied { write } for pid=13006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.071305][ T43] audit: type=1800 audit(1791070176.288:2066): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34988 res=0 errno=0 [ 197.650323][ T5750] Bluetooth: hci10: command tx timeout [ 197.826422][T13055] netlink: 'syz.6.2979': attribute type 39 has an invalid length. [ 198.569960][T13063] loop5: detected capacity change from 0 to 4095 [ 198.592682][T11752] Buffer I/O error on dev loop5, logical block 511, async page read [ 198.644705][T13063] Buffer I/O error on dev loop5, logical block 511, async page read [ 199.009337][T13082] can0: slcan on pts0. [ 199.100932][T11990] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 199.140481][T13081] can0 (unregistered): slcan off pts0. [ 199.193416][T13089] syzkaller1: entered promiscuous mode [ 199.193431][T13089] syzkaller1: entered allmulticast mode [ 199.249940][T11990] usb 13-1: Using ep0 maxpacket: 16 [ 199.250677][T11990] usb 13-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 199.253428][T11990] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 199.257642][T11990] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.257664][T11990] usb 13-1: Product: syz [ 199.257677][T11990] usb 13-1: Manufacturer: syz [ 199.257690][T11990] usb 13-1: SerialNumber: syz [ 199.413221][ T10] net_ratelimit: 15 callbacks suppressed [ 199.413241][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.489277][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.545710][T13102] input: syz0 as /devices/virtual/input/input41 [ 199.545740][T13102] input: failed to attach handler leds to device input41, error: -6 [ 199.728925][ T5750] Bluetooth: hci10: command tx timeout [ 200.457670][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.489098][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.852842][ T10] usb 13-1: USB disconnect, device number 4 [ 201.889496][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.055677][T13132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.055803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.092793][T13134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.092935][T13134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.093104][T13134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.886781][T13116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.021516][T13145] FAULT_INJECTION: forcing a failure. [ 203.021516][T13145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.021549][T13145] CPU: 2 UID: 0 PID: 13145 Comm: syz.6.3010 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.021571][T13145] Tainted: [L]=SOFTLOCKUP [ 203.021578][T13145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.021587][T13145] Call Trace: [ 203.021593][T13145] [ 203.021600][T13145] dump_stack_lvl+0x100/0x190 [ 203.021645][T13145] should_fail_ex.cold+0x5/0xa [ 203.021669][T13145] _copy_from_user+0x2e/0xd0 [ 203.021698][T13145] do_ip_setsockopt+0x2a67/0x3310 [ 203.021729][T13145] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 203.021753][T13145] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 203.021779][T13145] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 203.021810][T13145] ip_setsockopt+0x5a/0xf0 [ 203.021831][T13145] tcp_setsockopt+0xa7/0x100 [ 203.021852][T13145] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 203.021872][T13145] do_sock_setsockopt+0xf3/0x1d0 [ 203.021893][T13145] __sys_setsockopt+0x195/0x220 [ 203.021920][T13145] __x64_sys_setsockopt+0xbd/0x160 [ 203.021941][T13145] ? do_syscall_64+0xae/0x790 [ 203.021965][T13145] ? lockdep_hardirqs_on+0x7d/0x110 [ 203.021984][T13145] do_syscall_64+0x123/0x790 [ 203.022006][T13145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.022023][T13145] RIP: 0033:0x7f830179e159 [ 203.022037][T13145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.022052][T13145] RSP: 002b:00007f83025b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.022068][T13145] RAX: ffffffffffffffda RBX: 00007f8301a25fa0 RCX: 00007f830179e159 [ 203.022080][T13145] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 203.022090][T13145] RBP: 00007f830183506b R08: 0000000000000090 R09: 0000000000000000 [ 203.022099][T13145] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 203.022109][T13145] R13: 00007f8301a26038 R14: 00007f8301a25fa0 R15: 00007ffd1a290728 [ 203.022133][T13145] [ 203.092340][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 203.092356][ T43] audit: type=1800 audit(1791070182.308:2106): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189506 res=0 errno=0 [ 203.119655][ T43] audit: type=1800 audit(1791070182.328:2107): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4926 res=0 errno=0 [ 203.312309][T13165] netlink: 'syz.6.3018': attribute type 1 has an invalid length. [ 203.312331][T13165] netlink: 'syz.6.3018': attribute type 2 has an invalid length. [ 203.357600][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3022'. [ 203.456622][ T43] audit: type=1400 audit(1791070182.668:2108): avc: denied { bind } for pid=13181 comm="syz.8.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.532396][ T43] audit: type=1800 audit(1791070182.748:2109): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189706 res=0 errno=0 [ 203.532468][ T43] audit: type=1800 audit(1791070182.748:2110): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189717 res=0 errno=0 [ 203.532530][ T223] Bluetooth: hci5: Frame reassembly failed (-84) [ 203.570649][ T43] audit: type=1400 audit(1791070182.788:2111): avc: denied { mounton } for pid=13191 comm="syz.6.3031" path="/proc/875/task" dev="proc" ino=50561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 203.860755][T13207] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 204.376066][T13216] device-mapper: ioctl: Invalid ioctl structure: name t, dev f802 [ 204.568425][ T43] audit: type=1800 audit(1791070183.778:2112): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189736 res=0 errno=0 [ 204.570822][ T43] audit: type=1800 audit(1791070183.788:2113): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=189740 res=0 errno=0 [ 204.572149][T13221] syzkaller1: entered promiscuous mode [ 204.572168][T13221] syzkaller1: entered allmulticast mode [ 204.609251][ T10] net_ratelimit: 242 callbacks suppressed [ 204.609344][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.067132][ T43] audit: type=1800 audit(1791070184.278:2114): pid=13239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3050" name="xps_cpus" dev="sysfs" ino=161101 res=0 errno=0 [ 205.133757][T13244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.134373][T13244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.134680][T13244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.138859][T13244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.139123][T13244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.139302][T13244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.139471][T13244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.139640][T13244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.139844][T13244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.580128][ T5093] Bluetooth: hci5: command 0x1003 tx timeout [ 205.580412][ T5750] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 205.946437][ T43] audit: type=1400 audit(1791070185.158:2115): avc: denied { write } for pid=13280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.785034][T13314] binder: 13313:13314 ioctl c0306201 2000000001c0 returned -22 [ 208.139187][ T10] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 208.174991][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 208.175012][ T43] audit: type=1400 audit(1791070187.388:2119): avc: denied { write } for pid=13374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.249976][ T43] audit: type=1400 audit(1791070187.468:2120): avc: denied { write } for pid=13377 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.289851][ T10] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 208.292243][ T10] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.292268][ T10] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.294243][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.294265][ T10] usb 13-1: Product: syz [ 208.294275][ T10] usb 13-1: Manufacturer: syz [ 208.294287][ T10] usb 13-1: SerialNumber: syz [ 208.299687][ T43] audit: type=1800 audit(1791070187.518:2121): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190865 res=0 errno=0 [ 208.303611][ T43] audit: type=1800 audit(1791070187.518:2122): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=190897 res=0 errno=0 [ 208.304473][ T43] audit: type=1800 audit(1791070187.518:2123): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=190872 res=0 errno=0 [ 208.305286][ T43] audit: type=1800 audit(1791070187.518:2124): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=190873 res=0 errno=0 [ 208.306244][ T43] audit: type=1800 audit(1791070187.518:2125): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=190894 res=0 errno=0 [ 208.307047][ T43] audit: type=1800 audit(1791070187.518:2126): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=190895 res=0 errno=0 [ 208.307918][ T43] audit: type=1800 audit(1791070187.518:2127): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=190874 res=0 errno=0 [ 208.315123][ T43] audit: type=1800 audit(1791070187.528:2128): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=190896 res=0 errno=0 [ 209.384320][T13399] netlink: 'syz.6.3100': attribute type 1 has an invalid length. [ 209.384401][T13399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.384440][T13399] IPv6: NLM_F_CREATE should be set when creating new route [ 209.384458][T13399] IPv6: NLM_F_CREATE should be set when creating new route [ 209.979243][ C0] net_ratelimit: 737 callbacks suppressed [ 209.979264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.910770][ T1691] usb 13-1: USB disconnect, device number 5 [ 210.955343][T13417] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3108'. [ 213.312465][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 213.312483][ T43] audit: type=1400 audit(1791070192.528:2135): avc: denied { bind } for pid=13433 comm="syz.8.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 213.312516][ T43] audit: type=1400 audit(1791070192.528:2136): avc: denied { read } for pid=13433 comm="syz.8.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 213.323597][T13436] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 213.374666][ T43] audit: type=1800 audit(1791070192.588:2137): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=191010 res=0 errno=0 [ 213.376871][ T43] audit: type=1800 audit(1791070192.588:2138): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=191021 res=0 errno=0 [ 213.401548][ T5093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.404926][ T5093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.420141][ T5093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.426360][ T5093] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.427057][ T5093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.458835][ T43] audit: type=1800 audit(1791070192.668:2139): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=191040 res=0 errno=0 [ 213.467719][ T43] audit: type=1800 audit(1791070192.678:2140): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=191051 res=0 errno=0 [ 214.022358][T13439] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.022460][T13439] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.022641][T13439] bridge_slave_0: entered allmulticast mode [ 214.023665][T13439] bridge_slave_0: entered promiscuous mode [ 214.025879][T13439] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.025999][T13439] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.026092][T13439] bridge_slave_1: entered allmulticast mode [ 214.027378][T13439] bridge_slave_1: entered promiscuous mode [ 214.052527][T13439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.054727][T13439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.071142][T13439] team0: Port device team_slave_0 added [ 214.072703][T13439] team0: Port device team_slave_1 added [ 214.085519][T13439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.085529][T13439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.085543][T13439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.086209][T13439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.086217][T13439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.086229][T13439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.106870][T13439] hsr_slave_0: entered promiscuous mode [ 214.107347][T13439] hsr_slave_1: entered promiscuous mode [ 214.107673][T13439] debugfs: 'hsr0' already exists in 'hsr' [ 214.107684][T13439] Cannot create hsr debugfs directory [ 214.181947][ T43] audit: type=1800 audit(1791070193.398:2141): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27251 res=0 errno=0 [ 214.253616][ T43] audit: type=1400 audit(1791070193.458:2142): avc: denied { write } for pid=13472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.321226][ T43] audit: type=1400 audit(1791070193.538:2143): avc: denied { write } for pid=13477 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.431099][ T43] audit: type=1400 audit(1791070193.648:2144): avc: denied { write } for pid=13479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.827976][T13439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.830464][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.831206][T13439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.836191][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.839485][T13439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.843558][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.844474][T13439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.862336][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.892826][T13439] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.892995][T13439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.893191][T13439] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.893273][T13439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.943042][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.945554][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.971415][T13505] bridge_slave_0: left allmulticast mode [ 214.971442][T13505] bridge_slave_0: left promiscuous mode [ 214.971649][T13505] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.975357][T13505] bridge_slave_1: left allmulticast mode [ 214.975383][T13505] bridge_slave_1: left promiscuous mode [ 214.975557][T13505] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.993482][T13505] bond0: (slave bond_slave_0): Releasing backup interface [ 214.999356][T13505] bond0: (slave bond_slave_1): Releasing backup interface [ 215.024049][T13505] team0: Port device team_slave_0 removed [ 215.030449][T13505] team0: Port device team_slave_1 removed [ 215.031307][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.031324][T13505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.034211][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.034228][T13505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.036787][T13505] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.043230][T13506] team0: Mode changed to "activebackup" [ 215.083216][T13439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.128241][T13439] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.139824][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.139917][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.152224][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.152313][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.246419][T13518] raw_sendmsg: syz.6.3128 forgot to set AF_INET. Fix it! [ 215.489544][ T5093] Bluetooth: hci5: command tx timeout [ 215.522969][T13439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.571596][T13439] veth0_vlan: entered promiscuous mode [ 215.583962][T13439] veth1_vlan: entered promiscuous mode [ 215.618871][T13439] veth0_macvtap: entered promiscuous mode [ 215.621094][T13439] veth1_macvtap: entered promiscuous mode [ 215.647253][T13439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.665301][T13439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.708945][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.709130][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.709279][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.739234][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.845245][T13544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.845268][T13544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.877155][T13544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.877179][T13544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.085132][T13589] gadgetfs: bound to dummy_udc driver [ 216.450702][T13620] team0: Port device xfrm0 added [ 216.642046][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3153'. [ 217.182137][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3167'. [ 217.183570][T13671] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.194674][T13671] bridge_slave_1 (unregistering): left allmulticast mode [ 217.194740][T13671] bridge_slave_1 (unregistering): left promiscuous mode [ 217.194788][T13671] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.568993][ T5093] Bluetooth: hci5: command tx timeout [ 218.620218][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 218.620239][ T43] audit: type=1400 audit(1791070197.828:2183): avc: denied { accept } for pid=13696 comm="syz.6.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.786174][T13703] af_packet: packet size is too long (3372220416 > 2016) [ 218.848300][T13705] netlink: 'syz.6.3182': attribute type 21 has an invalid length. [ 218.848323][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3182'. [ 218.963490][T13705] netlink: 'syz.6.3182': attribute type 21 has an invalid length. [ 218.963507][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3182'. [ 219.083595][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3184'. [ 219.116082][ T43] audit: type=1800 audit(1791070198.328:2184): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197944 res=0 errno=0 [ 219.333994][ T43] audit: type=1800 audit(1791070198.548:2185): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197963 res=0 errno=0 [ 219.336741][ T43] audit: type=1800 audit(1791070198.548:2186): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=197967 res=0 errno=0 [ 219.347262][ T43] audit: type=1800 audit(1791070198.558:2187): pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=197995 res=0 errno=0 [ 219.425778][ T43] audit: type=1400 audit(1791070198.638:2188): avc: denied { write } for pid=13726 comm="syz.0.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.504917][ T43] audit: type=1400 audit(1791070198.718:2189): avc: denied { write } for pid=13729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.565764][T13734] SELinux: failed to load policy [ 219.603158][ T43] audit: type=1400 audit(1791070198.818:2190): avc: denied { write } for pid=13739 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.610828][ T43] audit: type=1400 audit(1791070198.828:2191): avc: denied { connect } for pid=13741 comm="syz.6.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.611129][ T43] audit: type=1400 audit(1791070198.828:2192): avc: denied { getopt } for pid=13741 comm="syz.6.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.653754][T13745] ------------[ cut here ]------------ [ 219.653771][T13745] Reader on commit with 928 missed events [ 219.653782][T13745] WARNING: kernel/trace/ring_buffer.c:8033 at ring_buffer_map_get_reader+0x70e/0x930, CPU#3: syz.6.3196/13745 [ 219.664137][T13745] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 219.666021][T13745] CPU: 3 UID: 0 PID: 13745 Comm: syz.6.3196 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.670772][T13745] Tainted: [L]=SOFTLOCKUP [ 219.672507][T13745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.675635][T13745] RIP: 0010:ring_buffer_map_get_reader+0x711/0x930 [ 219.677856][T13745] Code: 48 c1 ea 03 80 3c 02 00 0f 85 2b 02 00 00 4c 3b a3 a8 00 00 00 0f 85 a5 72 12 ff e8 49 85 fb ff 48 8d 3d f2 6f 38 0f 4c 89 fe <67> 48 0f b9 3a e9 fb fc ff ff 4c 8b 74 24 58 4c 8b 7c 24 60 e9 cc [ 219.684761][T13745] RSP: 0018:ffffc9000ca67d98 EFLAGS: 00010087 [ 219.687467][T13745] RAX: 00000000000007ed RBX: ffff88801c0e5000 RCX: ffffc9000c001000 [ 219.690773][T13745] RDX: 0000000000080000 RSI: 00000000000003a0 RDI: ffffffff91493480 [ 219.694089][T13745] RBP: ffff88805f5d8c80 R08: 0000000000000007 R09: 0000000000000000 [ 219.697398][T13745] R10: 00000000000003a0 R11: ffff88801c0e50b0 R12: ffff88805f5d8c80 [ 219.700739][T13745] R13: dffffc0000000000 R14: ffff88801c0e50b0 R15: 00000000000003a0 [ 219.704158][T13745] FS: 00007f83025b36c0(0000) GS:ffff8880d5e4e000(0000) knlGS:0000000000000000 [ 219.707310][T13745] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.709596][T13745] CR2: 0000001b2e112ff8 CR3: 0000000037757000 CR4: 0000000000352ef0 [ 219.712602][T13745] Call Trace: [ 219.713820][T13745] [ 219.714775][T13745] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 219.716839][T13745] tracing_buffers_ioctl+0x2e6/0x3d0 [ 219.718537][T13745] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 219.720368][T13745] __x64_sys_ioctl+0x18e/0x210 [ 219.721962][T13745] do_syscall_64+0x123/0x790 [ 219.723500][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.725399][T13745] RIP: 0033:0x7f830179e159 [ 219.727031][T13745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.735112][T13745] RSP: 002b:00007f83025b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.737839][T13745] RAX: ffffffffffffffda RBX: 00007f8301a25fa0 RCX: 00007f830179e159 [ 219.740953][T13745] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000004 [ 219.744270][T13745] RBP: 00007f830183506b R08: 0000000000000000 R09: 0000000000000000 [ 219.747593][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.751002][T13745] R13: 00007f8301a26038 R14: 00007f8301a25fa0 R15: 00007ffd1a290728 [ 219.754501][T13745] [ 219.755864][T13745] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 219.758965][T13745] CPU: 3 UID: 0 PID: 13745 Comm: syz.6.3196 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.762959][T13745] Tainted: [L]=SOFTLOCKUP [ 219.765325][T13745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.770479][T13745] Call Trace: [ 219.771830][T13745] [ 219.773078][T13745] dump_stack_lvl+0x100/0x190 [ 219.774907][T13745] vpanic+0x553/0x970 [ 219.776201][T13745] ? __pfx_vpanic+0x10/0x10 [ 219.777691][T13745] panic+0xd1/0xe0 [ 219.778931][T13745] ? __pfx_panic+0x10/0x10 [ 219.780420][T13745] check_panic_on_warn.cold+0x19/0x34 [ 219.782242][T13745] ? ring_buffer_map_get_reader+0x70e/0x930 [ 219.784173][T13745] __warn.cold+0x191/0x318 [ 219.785798][T13745] __report_bug+0x30f/0x440 [ 219.787297][T13745] ? ring_buffer_map_get_reader+0x70e/0x930 [ 219.789327][T13745] ? __pfx___report_bug+0x10/0x10 [ 219.791674][T13745] ? rb_set_head_page+0x1e6/0x2f0 [ 219.793955][T13745] report_bug_entry+0xe2/0x290 [ 219.796070][T13745] ? ring_buffer_map_get_reader+0x711/0x930 [ 219.798258][T13745] handle_bug+0x1cd/0x2a0 [ 219.799670][T13745] exc_invalid_op+0x17/0x50 [ 219.801107][T13745] asm_exc_invalid_op+0x1a/0x20 [ 219.802690][T13745] RIP: 0010:ring_buffer_map_get_reader+0x711/0x930 [ 219.804798][T13745] Code: 48 c1 ea 03 80 3c 02 00 0f 85 2b 02 00 00 4c 3b a3 a8 00 00 00 0f 85 a5 72 12 ff e8 49 85 fb ff 48 8d 3d f2 6f 38 0f 4c 89 fe <67> 48 0f b9 3a e9 fb fc ff ff 4c 8b 74 24 58 4c 8b 7c 24 60 e9 cc [ 219.811182][T13745] RSP: 0018:ffffc9000ca67d98 EFLAGS: 00010087 [ 219.813168][T13745] RAX: 00000000000007ed RBX: ffff88801c0e5000 RCX: ffffc9000c001000 [ 219.815874][T13745] RDX: 0000000000080000 RSI: 00000000000003a0 RDI: ffffffff91493480 [ 219.818837][T13745] RBP: ffff88805f5d8c80 R08: 0000000000000007 R09: 0000000000000000 [ 219.821710][T13745] R10: 00000000000003a0 R11: ffff88801c0e50b0 R12: ffff88805f5d8c80 [ 219.824527][T13745] R13: dffffc0000000000 R14: ffff88801c0e50b0 R15: 00000000000003a0 [ 219.827194][T13745] ? ring_buffer_map_get_reader+0x707/0x930 [ 219.829340][T13745] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 219.831431][T13745] tracing_buffers_ioctl+0x2e6/0x3d0 [ 219.833225][T13745] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 219.835160][T13745] __x64_sys_ioctl+0x18e/0x210 [ 219.836839][T13745] do_syscall_64+0x123/0x790 [ 219.838700][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.841157][T13745] RIP: 0033:0x7f830179e159 [ 219.843043][T13745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.849644][T13745] RSP: 002b:00007f83025b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.852293][T13745] RAX: ffffffffffffffda RBX: 00007f8301a25fa0 RCX: 00007f830179e159 [ 219.854873][T13745] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000004 [ 219.857482][T13745] RBP: 00007f830183506b R08: 0000000000000000 R09: 0000000000000000 [ 219.860233][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.863326][T13745] R13: 00007f8301a26038 R14: 00007f8301a25fa0 R15: 00007ffd1a290728 [ 219.865999][T13745] [ 219.867743][T13745] Kernel Offset: disabled [ 219.869166][T13745] Rebooting in 86400 seconds..