last executing test programs: 10m20.936433308s ago: executing program 3 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xba01}, 0x8810) 10m20.836143056s ago: executing program 3 (id=974): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f000000a900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) times(0xfffffffffffffffc) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x408c5}, 0x4048040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x28, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 10m19.725939089s ago: executing program 3 (id=979): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x3, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40010) 10m19.65473804s ago: executing program 3 (id=980): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c7", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000040)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5b", 0x3a}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045d", 0xa0}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0) 10m19.654530714s ago: executing program 3 (id=981): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 10m19.606255491s ago: executing program 3 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m3.617080402s ago: executing program 32 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.190771851s ago: executing program 2 (id=5367): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x49, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x400, 0xc, 0x3, 0x3}, {0x3, 0xf, 0x0, 0x3960}, {0x7, 0xa0, 0x80, 0x6}, {0x4, 0x2, 0x0, 0x2}]}) mkdir(0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r6, 0x4, 0x42800) dup(r6) 15.899931743s ago: executing program 2 (id=5368): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x6, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000140)=""/131, 0x83, 0x0, &(0x7f00000003c0)=""/195, 0xc3}}, 0x10) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r3, 0x4) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44944) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="48f4070010001fff000000008100000000000025", @ANYRES32=0x0, @ANYBLOB="08000000003f0000200012800b00010067656e65766500001000028006410005004e2400000400060008000a00", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 15.800284008s ago: executing program 2 (id=5369): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe91, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x3d, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0x0, 0x0}, 0x10) 15.799937926s ago: executing program 2 (id=5370): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000600)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000000200)="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", 0x1bb}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f6", 0x43}, {&(0x7f0000002300)="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", 0x1f7}, {&(0x7f0000000f00)="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", 0x1000}], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2000000) 15.750691441s ago: executing program 2 (id=5372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syslog(0x4, &(0x7f0000007340)=""/170, 0xaa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="2e440f212c0f0ff796470f2281260fc75fa00f019c1758300000430f232ef243ae3667410fc73066ba610066ed0f30", 0x2f}], 0x1, 0x51, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000280)={0x1, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000340)={0x101ff, 0x2, 0x200000, 0x1000, &(0x7f000000f000/0x1000)=nil, 0x2, r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f00000002c0)={0x1, 0x0, 0x2013, 0x7ff, 0x1, 0x1, 0x5, 0x1}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) preadv(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x3, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e950088a8000088a8", 0x20, 0x24000801, &(0x7f0000000300)={0x11, 0x8100, r7, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.46068871s ago: executing program 2 (id=5374): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x40025f5, 0x2) r2 = socket(0x1e, 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/195, 0xc3}], 0x1}, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x10, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31363553}) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 1.959617746s ago: executing program 0 (id=5471): socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x34f983, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0406"], 0x7) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xf, 0x1}, {0xfff1, 0xf}, {0x0, 0xe}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000048}, 0x4c805) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r8 = memfd_secret(0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2}) 1.790029859s ago: executing program 0 (id=5472): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000001eaf"]) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000500)={0x1, 0x0, @pic={0x6, 0x7f, 0x0, 0x77, 0x4, 0x4, 0x85, 0x0, 0x9, 0x6, 0x9, 0x7f, 0xe, 0xd5, 0x7}}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x8}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x44010, &(0x7f00000001c0)=')E\xba\xecW\x10\xb2K') readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) r7 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x200, 0x10801) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) (async) r8 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x80c42, 0x1d0) quotactl_fd$Q_GETFMT(r8, 0xffffffff80000401, 0xee01, 0x0) 1.679475659s ago: executing program 0 (id=5473): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300000000000000000000000003", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 1.620746016s ago: executing program 0 (id=5474): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x5}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x202000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f00000001c0)={0xf, 0x2, 'client0\x00', 0x6, "2f26199f7fdd6188", "a392f7896cf01b60a97b5696d6de30b14a9b127e400445ccf5e8ca146ccdccef", 0x2, 0x9}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0xffffff7b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x8100}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1000}]}}}]}, 0x58}}, 0x40804) 1.620486599s ago: executing program 4 (id=5475): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000080000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074350111e0014000000110001"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.490453855s ago: executing program 4 (id=5476): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @empty, @rand_addr=0x64010102}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x80, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="1b00000000000300f2a9b7558c8e5f81006970366772657461703000000000000080e76541"], 0x2c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r3, &(0x7f0000000640)={&(0x7f00000002c0)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f0000000600)=""/4, 0x4}, 0x20000100) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x200004) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @empty, @rand_addr=0x64010102}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x80, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="1b00000000000300f2a9b7558c8e5f81006970366772657461703000000000000080e76541"], 0x2c}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) recvmsg(r3, &(0x7f0000000640)={&(0x7f00000002c0)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f0000000600)=""/4, 0x4}, 0x20000100) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x200004) (async) 1.430481257s ago: executing program 0 (id=5477): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a9ac8578bf8011ccb9606da2998936a5ec4899ff961444bf01b91d145a63037b", 0x5, 0x8, 0xfffffffb, 0x7f, 0x0, 0x2, 0x7ff, 0x7f600efd}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_generic(r0, 0x0, 0xc000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r5 = socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000005020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 1.159774237s ago: executing program 4 (id=5480): socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x80, 0x7, 0x5, 0x3, {{0x1c, 0x4, 0x1, 0x38, 0x70, 0x66, 0x0, 0xf8, 0x4, 0x0, @local, @remote, {[@noop, @rr={0x7, 0x17, 0x73, [@remote, @dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @multicast2]}, @timestamp_prespec={0x44, 0x44, 0x56, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7f}, {@private=0xa010102, 0x9978}, {@loopback, 0x8}, {@local, 0x3515}, {@multicast1, 0x5}, {@local, 0x830b}, {@rand_addr=0x64010101, 0x5}]}]}}}}}) sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="df542ddeec38447eb0674bde220e2fc29e4609ee31d1d3f70f96b7fd4aa2b2c00ee9ba1db285a055c706cc287eda7bab40fef32ed7225c232d14c91965f858c8a1f81638b0067353df9df3f1f5409b5dc7e121cdd0eb0a1ba9c75ad16dbe2677e3564ac5c5e15940f4a92da728061543063979b3be30f94a4ca1fc8f7474f52ccc2e199af1d4933b736020f285c9c5c52f0842bca3ff3795f2ba3e693f9ec5fd7da0e0c7468bb8fef629e7a271a1ed01f6570e9a603496cf8bf0199b25b68098e44cc76318fd5d34", 0xc8}], 0x1, &(0x7f00000003c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xd3, [@private=0xa010101, @multicast1, @multicast2]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbd0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x7f, 0x3, 0xa, [{@multicast2, 0x81}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}], 0xd8}, 0x20008044) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2d, 0x20005, 0xc5d, 0x2, 0xfffc, 0x4, 0xd4, 0x800000000002, 0x407, 0x829, 0x40002000400, 0x2, 0x89, 0x0, 0x200000000090, 0xc6b7], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 690.679887ms ago: executing program 1 (id=5482): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300000000000000030000000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 687.746817ms ago: executing program 4 (id=5483): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getdents64(r1, &(0x7f0000000300)=""/203, 0xcb) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001114013f27bd7000fcdbdf2508004a0002000000080003000a00000008004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES64=0x0, @ANYRES64=r0, @ANYRESDEC=r1], 0x44}}, 0x20000000) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) 687.412961ms ago: executing program 1 (id=5484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_addrs=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}) 550.799626ms ago: executing program 1 (id=5485): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000001180)) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x800) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006d6f6465000000006806b195093b87ff0000a58dbe38000000000000000100000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (fail_nth: 5) 545.98376ms ago: executing program 0 (id=5486): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff01000000350000005600000225001f0019000a0010", 0x25}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8000033fe3, 0x10000000) 497.963182ms ago: executing program 4 (id=5487): r0 = syz_io_uring_setup(0x516, &(0x7f00000006c0)={0x0, 0x3, 0x4, 0x3, 0x121}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x58, &(0x7f0000000100)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x200102a, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000080)={0x9, 0x4, 0x26}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) write(r7, 0x0, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f00000004c0)={0x0, 0x2, 0x2, 0xff, 0x1, 0x100}) ftruncate(r6, 0x8008976) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000580)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434a6012bf377f953fe1f06ff3cbe07750b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e7f1f310f5bccca6278ee41722baec82dc485c8b35a3f06000a6d371b9d1de9280769a8d5a97bb33a5d9a5e7e4160c990dc2c61976f0dcc781f54f933f04ddb", 0x135}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc9f57c89b4201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000000200)="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", 0x1bb}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f6", 0x43}, {&(0x7f0000002300)="9d2aba98f0b975bf7210f7e7d7d3e223f4d186282fe89a5b99d5c2ea2863634e543819ec0ae3fcdfd6c5ad048df8fe8110603326b3fd088763e7d695fcff918a8c5c1f7ea86505918c7773e5d247f6d714fb99e7a86dc53673d48d61d079cbf2c7298d22ddedc4103338fd0af6f0b5308ca1c7d34f26fb9f964c1d2b42173024df139d7b2146635a6002ce9d439265593fda27820c4899009d0e9e64542b5eae06df7a197bb1dfff597e2886a314b6b00b56664a0829b5bac45860aa6c1f7be92f29cd82a3ac64d6cd312390bd6cd3535dd6f9ecc3c92cb40196d68e610e4e7e99b9e9aaceeb9887ecbeb0c369c44b6aae92a0b646e48fec4280c10a1f1cc2fe4d1d51c72b983e2f2c3a05cb91d26c7132d821b05e26bafcd4c7699639f7003d62d112f5c2f6f8c6939bd812e16e6a6927ebb45ab6a66e4630f1476f48a113f0a89235ffffff7f166a7ce525308ae322aea9b9805b6392c4280b509679503ccbbe137d6185ff25437e5e4e6240a4a07e4051c6d030da271f946171b1ade790bdf2289c5e0ddcb33de11961264734ce77e04f94c330dac130362d5af3a5754cd69f72271157c82dd4ecf473f8b1bebcb5b9eaff0933322ca28291c278bd7f623eefc3779d980b9c39c1753488fb90ff8f4e0ce31b6e7f945f1feb0e0089b9e375c52218fbc945459f3861a6b197c74afafd944167eb991e", 0x1f7}, {&(0x7f0000000f00)="68352f73a8e95f91dec0a17ed6247f757f22a419c07e165820513b85c81e95944edd95a5b69d382e986dd37870aa77b4af5e0a240ac6d1ec86a91368094c6f512efde2d2550ba64d25be19512225709da7d52e4aa8a6db1efa448e75fb4a00e9cc4fb62b97a21eecb3242749f4cc53bad5a24a0c82237c85b807de66b259a5cf67c7880df314cd9bd06224d5e4eed4f77800a3ea82bd4fe2ebbf557b817c13db58beab47686cb8cdb2c628df45700a0d67f2bc5db983a3e610ffd3535780595b92c6c788a558548cf910ce54277ead2db97630b2580197a559782dafb43e09464bd94ac7b5686328d2d6e656f92096d90f444323ed7cf17a074031ce3658924f45724625265723eede402440882d7ca894250212fc705cd1953320bf9ab7069d6a64ef6977fcfea2cef191b71187a5ca39d8ada49d72a5542d788dbc5f3745e433ae1e9d80f5a345837d33b9d0bd88cc7c9ac3a42d2fcfa1038ee1178dbe80927ddb968d20c70a50ad84bdccfb2020b9c44b57a4852e6889c4786a4128e7a003a2516ac7058186653c949a0f59e5bb3697a2f693ae09729f8c3c6803655307f5dbe795278d497191a31b10ea01451257d79699d96b709ddce564d1174e3cf719a3920637badb0a7761af22ca0f0ee0ca204773055481107ace674af19da73e4a72ab9f3bd27c7b05bfaea247645405ea9f81d729871f012550df23c7b250941fdae846ae24858f82f8cfe583cc0323abf60a8467e0874755c0b87c5d3d27a007fa598bfbfbdd35a96046c01a88ef28479b94974c8111603254ad116eb68376a40c9db826797a412b612df9087c22cb18c38ed920c30382cea13936f279b764f002ac0e6c8e8dc0ae61a40cb73c0d3400b422f4560b371f2ba1e80985eb91b46e965af00e41be5d01f698f1daeba09b5062ac75758ed66d0c0e4ffda45bc837e9347a754c9f5556985da68e8b29d5f0afcb0a323dce69676bd531900c35012edfa78ec2307b895d50000daec5e4a2f7ccbcee9e895b3760c37f3f16d523b5dd4892a8556619221de0dcf23d2ee0719eb64b169522f8225e67c5152a23c3772f5da94bc840963fedb3eb78be6837bd5dfb1297460031c76c9f82cc223c04255eb672be9329bf351340668e0ca3dbeb54597d2b0be4fd92838e218df5745991357421e55b4cb5e53a32093a030a8f4d5d85e84fc0a6a26bf5496c93fc2f600f72118b0ab40078e7f1600ec57abf20f55ff91505be0adceb5f56e18264a76e42aa9e65a38b6c530adaee1c329f1b0d905cee4744fe8e80e7128a79845451123185cfff8049f66a311cf08a4208ce61e395b483f81fa27b6ff659263ebd1c49aa676d8a62975204d8b914f093fe8c2c55baf32bfe32475fe31222c96b4ed7ac85a6991d26b5a40ae19c9c581a4e6fbadeec75ea893c04708cc1a91d45f6a281e8677a9ee03d236b69b40282d6ff2b69d6cf07f4422433b0331bd318bc900da52ed7018d18ce00db3c3fcd4fa597324be4f07ffee5c3e8abd0afe1a8b080a94a1a35c7051d67de617898423dc4d45ac85e7bd5f5f90fe26cb70a8b112c02b65a236d386e2ffee52c31eeed185116c83384bb681c10719587bf3db1198b22b8e6c0fd5a52a100b9e81294bf9ca19dec96978a4532fcf00d7eb33c2e9b2da1569f8334688b006a7808c11373b8728cd174dd4a495ed8a10df9edffbd2ac0358185c6d397609164ad303b1d58fe33f5fa297daa1b8f7fb9a38924035bfdfa18e91de1c3514d1c0d7406bce509baba463a7848d60845929c437b78eeabeb55bea937f2c720ef5fd6dc59c7241e50abd0207872973284d01e0c8cd2d58a3313e2352d98b57795b6739fbd0e841ce0c78274af9cfb93ef2ca12a373bffbe0d657abae7282d8328534cdd0ac8b18cd4e6df601be8d181dd9b3f5f01c0e05d5868e898d2f8bb2420be39a622596af504d0953a73b81e7fcfb42f2fac98d170ba3b8e1aee913a2d26af3931ca9b00a33f262efea33b1a7b865e86fd4c6ca0b64c9215f67dcc0bab2b8e49a6f2b9e645699f3830a4fc091cb84ca60de3fd0a7f06b4a2ede1e6efd55413d81af5ea4d0e83a47f5577e5bfe99c1f9c40988f91feda62da643cd31c0fbf1bec0cad6313208e9d1526797ad00b954caa8d5b19465e8e0f0c586cfd17d5898f880675976978edf423208dcda64b190f02514b4f214b5d0dc71acae0df21941c2323e445e7c61d31a00f8ae78be076c7fed383d0304d882f9e2ff9553618baa5d0ab0cd4d857d85bd43599d49d170d6557bc69cb72cfd1cb89614882626f611bbeaac9b5c262335794516ea1ffb06745f2ead93d2d83b294de3a694bb9ac979db40a6bec662116516ed9ffde103812ea97e5017a7ca853bfd07819d9021f98ed3ce776e5afde7a21ecde55f9a101a53a71b65dfc44f8726c5593541134774cb631d33fd2eb23d01d7dd5719c4e0be5c5a860d9329c6799a65c66167540128b9dd984522d4e2da0784f70fcc6194e0baf286abfea92ae4e2ff3b4a9ade25c0b00c4b34e6e8cffd11be08036b64776ae2a9d81f3755593392276a9e6606407dd7dbc328d69a7207e5208f19874fc6fa14ebfac47e8a1e4c0361bbef14e38d9fd833b048f69daeb08ce6a1677cf5e7bab56e94b24fa7fc4ad97050c2761f58d77e341b1848eeac27aa2eb01d3dfb4e7407f284a7d9f3ff676168dc1e924199466dbe4aff95e5a0d4a34088ed764dea9d839c8ec466baa7486910c56012c62398c5fc7a2adb307518e3320eb61ea5ae0bbd74d3da75643074762b9bed6111ec1bfdee0930fc8f248c907a6c94b7391042c7be6de6b1142a65e5f376c67acc975bb1ff773fbd9d5dc8dc8a400a130f0c670119a26f0f3e39ac0b66fcd3c087245dd55561b23a530fc4d866098b1b3ca9ba8b20ea8b159ed93b47408c166268c9b898644926c4184d838b878ee8fa64a012679bd55c21e68828258b744c4b484bb8b8d5a6d105b082f82d65c9538c25ace25a710971dd6c868fa1427d6148fa5e70b335d5ee28d736db8d0b793d9cead0e9c7a348c00a5d948d042bcb6e1b301490363a20c9064655c28162617a974058f5c64ae688029ace23ce96402e40d7d984ea9e5d4c01ec283d05bc6a62a9f446f9ee41b316e1f82d81c1794686dc45abcfc798217f269b9775edbb42860d5c18606b1c8bad03d4ba4dca7420f14041f29a2e08651cad23259f7cd38374b78e5dc5f5304f9ee7882299c5d41bdd9a35089b3acf8110b9fd25ebcac94c4c6dd09177f4e0bb317689ea368a319b5a9e62a1652da854d7a9d7dbeb0324a7a5eb531716032e71ec409a91e7e951f8e63cfb8d59efffd1082104c08fad2c8b30bde03906bb4f81a57a309575f768b06421b1e65cfea5b5f05aad59a83da945e8c5b065312a9b550d43820ac902e7a9ef33ed58a8b59adc1f6a7c5579bd834552bdd22a297c210eaf53149269343d51866e24e021397693dd25a15b5b1a600dbd2428928ef37f409ce40e26f1ad668ee071f2dbc52df95a0c059e2fd7b0819674722ac9a3c24c3ffb63260308eec9c9d4d796a2861eb61c1192b4a95d9e5361a74f3adf8626acdccbc7547b9ea04233a63adb1723b27f5b2acf5c9115cbc49a3a834830b6100ea9f674fa619c1766a6ad5e59fc9f560e11b7c0ab067aa0e6c65283bea569238b9f15fbd43dc1de89eb126282aed9158a6e2f79ae537e62395c0bf539528e63925ee0466ab0cbe699f05bc7e23e0e5c1cf1cc0889f57ddc00e3cb90db7c717dd930db9f33d890e8c9cfb8419f690da573b229258105965081c09443e40fc0449ae6fe05e2948af521df909af99ae30f22f2145fe61cbfcefd80ddbc0b074aa232f87139ac20fc9d87d146b772a955b4c96d79641ad9b40d26942bcb52dc937876c964599a1b24037befb1a486baffedf3154641c8e8846b40446125209c68d1054e1ebc50d877f3de81a28f18cfca1473e8deb7ff91715b0aa4ddaa81c4f57575964d12fcde629f024b66702f07f85e317dc0921c605f4759ecb40976ba67bbe1bb258c8ae8d0eed1e816948648d37188984c491163ba9561fe92a0c048a409551945b7ac3829427e16f6310dd49d5df4b318dd6c467b9522e66e3c695a32ef175e7845e2b07fbf775b823e42309a29d2b0eaa36b1eebb5907fbb0b68a57c2c175002b3b768fee849780d8fd13dffc0259317f2d66241a780628d70d3f0462280c87c44f55c14187f61b29f926805e06833431e93446ea5e360a7071ca3d3e119d6a0fb7ed3dcabb705c80923fb822e448623e0bf03c8a748dead93deb03720ec92685ad4221cb1ccd6a2860551c5ef64e263b007abe2e7f19ba5db21a7b3496510dcdceee13ed7d9fb26c07656f2eedf719bdb32c48ef42586cd8139d2ca448e3ce0e695154f19112eb45aabfcd92dd8034dda25e8873440793741740c6f704e546f90b4b013fcc918397db7e40b13647fd89248b203edeca89a4e71c3e4abf7fb28034f085dd24bd044b838f8b040f0cf2f134c5d616675c9ef30d3ab5415c8e8acbee12cfd6590b2d23dba31caf68a46d9b11735db2844457d46e26fa1822f05e972b3a258dba7dc3a6fbed25c63244cc0f64a7338150c4af28e0c13e5df2133c276f7243d2875abb236701a5947a3430c320105246e6c4b59bc18f4402d15429c06854a08fa76d969972eb1cf5a22f0f25e7793f11a429a82bd9d400408d7e62c1fe104497ab938532884776c8ca6de84f7b692fe656bf5b679ad09cf69a833db25f666c80ad3d73b544c39b0cd59c47ea9df19809f5d8253e4e714ddde7be6cf9ea2addc55b5f2f850014e20e3692d1c5f22260b2ea196b2bb32ad5970b9b192c570bb4116394328c9467a121629c88d44639e5fb7ceffe9bb7290b4a1fc265baa0c2d3c335e8c6e6579a72cecbe0521ce22abb26f64335392865e4b101fdffe75f94078494f4a867b1b7fcd963537e345b93f377bc2060893c9e1c163c19c92a3b6ca22af708e7944ce964db8900be72d95e2e9cd9820a71aebfc4660a7b606c3aafffd7dd669db3aea08b465c02d457278c6f1996d045a4d9774d440129f45f7aa8bac607bf52a252593306c3c2b04bf544faa2ceb504f6fdc5868765357c9f3db833ea56b340eea753f3813ffdc149a39cf1e10d9817b0a14735aad5fb22f52dbfbdb4d6600086936bcf432c0efa6c74a9585cdf16bce19f7b48785f43609fb40610de519c8673902359c28f2458cd59a0faf769d06c4629c10bea0530abf2259b2b770e6834a95b84bce8ca549f0718283518cbc85dde271d9277b412d95d67e46988b779da10b868171bf9ff8624737fd3e64f1d988f84ef01bb5816d4b225e1711835c06ce419c8a22c232e0bfeef1182098695fbf5ce022ac06a13cbad84a93488a707a5e515ca6e2d0b771771df9762831b343a0cd9a9b9ad36ba99ff914c1a299659774092fe3d7f89ce395806ae290b8bb7e8326490b7251a00ea20be381681fc89d96bf8a25a00bb96f99db090ff1aaf0c4e017deb55c4d568be299d442b994ea431899bbd3cd8d9e521096e6cd161dd7f8bda5a93ac5dc28ecff87cb84003f064484429154413e54792db09e4ec679ead0421442d19f445cdd7b733c621a835dc86b109c5cee0874d1b49e4bda4204f33a6831aa862a3a7364d8a32f5ee9177fb4d5df2092cc80985d7cc80c89654a123a58e3b8d0022b6122cde2f2791367a82a92df725116458e1ea1aec0added07345b230e2412c2ee88e8acc0c3d4b7f24d7c529041d1", 0x1000}], 0x7) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000000)=0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(r4, r3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) mmap$binder(&(0x7f000020d000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x2) timer_settime(r9, 0x0, &(0x7f00000003c0)={{0x77359400}}, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0xc, 0x2, @tid=r10}, &(0x7f0000000080)=0x0) timer_settime(r11, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 472.772006ms ago: executing program 33 (id=5374): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x40025f5, 0x2) r2 = socket(0x1e, 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/195, 0xc3}], 0x1}, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x10, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31363553}) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 283.662814ms ago: executing program 1 (id=5489): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x810c5a, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="811e86492cd898013a3f97a8401a296c4aae8360844221841a232932fc2e37e315ce7776716e184d2bb82280", 0x2c}, {&(0x7f0000000d80)="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", 0x121}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77", 0x53}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376", 0x2e}], 0x6}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61", 0xc4}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="c02796b82493359feed42ca603faa516ba6465b3b3691f972df614c1d527e2055ea4f31ff35c4e746ce3308cca63e4ea38629d146c3da85fb8c55b70dc4ef7b6ea81e1121926ef171e3320149a5f58d15722f619b8854c04797e1b35f238a045dc6e04accc887a157a4f5e00fe5bbc24f5cc447b47a552084ac1b91e48c87f4ac3ff79bab962f579734a4798891df942e9240ed3b5c6effd89cd630516006047dfe11f1621c4640b3a1b752cccd80cf36c09267650af1383a8563f42e0531bb24e", 0xc1}, {&(0x7f0000000740)="8b2ca4caea95d8a4294cd20b0a61280e3e4869c6a8958f8719c7e14387613e4bad1955dd1c8d4067510ff85e040993946bc1a4cb6cd8f2d868957400f65c481cb8109a584a2f8f5f269f54b12b3d5445a92fa8ced69327b4744f3a1ea189a9082b6a069ae38fe8a59039c793eef0688786d88c260e9dead71d767e286b47e2cf5fd7aa53d00d0925eff04e9451b8708ac4d858addb9122f8b3bbe554fbf5212a44cffe738ec635426bc3", 0xaa}, {&(0x7f0000000900)="20a633b00a39b7c38c125947aa506f84773d64079e3cc89d9bea42fef61815c8bd81df04cedb98f219762d6d94edce95c1c907a27aef9f581854d94d2e1843d39ec7b4215b08b92b2fa7b5ae20a8507614cdf91cddedce7ae47f4cb6e78525d2aa962babc481516adc98dc5ee5af31b22187edbfd86755404c4fc5cdb12390ccd7c88c0f7f85bc2c50252050f179396cb5543682c65cb51a33e9291b62fa4db0e35cc1ae86a568d481ac2a84bad8b9f07015ada9426616beda808dca096535a60336ba17b7702d72fddb12ed88a71644d0e042425e2616c7d1957a4e1aa411b71ff115d3018d94b3f6b2b175", 0xec}, {&(0x7f0000000a00)="04bf63c62cda81941c9dc97549b9aea88a49dbfdf5874f9c5d25702253a2ff5afd3a951316e096031ba8774bbce5bfbcad2dd7f62a620f19179452d5c3df09313bb8d59f1325e275f84aebce5063aea554e1c54386bdb0e1d8f85e304751dbe4cb4db44203805b0715e8549c81f29ceff5c81d17bbd5fb3597f92e424c30a23e88c7230975f35d0b6e631e81006db864f7a11f11bb23dd7d56a1942fa7ecc7455531e203a785ac5294384492297768cae97f39fd8dc1093d0936e538531175a7d8dc8827ac445e4a912154b835e6e3e7f738d9dc563fd1ee3086bcc4", 0xdc}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x9}}}], 0x20}}], 0x2, 0x20008000) setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x4}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) 147.505116ms ago: executing program 1 (id=5490): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5, 0x0, 0x0, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2467726f75701f69643d49774c9647cb19729c77d5a8c6bba5df6b1685a19a64d42d5a8e4d24b0bf659071cd8ab68ee76d5238caf0d4a5c12f287623343d3df24adda1eaa003f0da7f1e4a03704479aed42717803ad49de124e3ad29a0", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) utimensat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file0\x00', 0x0, 0x100) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000004000000010000000000000000000000000000000000000093076b7a9470d39f0dfb0331f1dfa901bf6139e601aa01584657d34dca01baf912a652a8b735739faff3728b14dd1df894c952bfca488cde04bd5f90328c0570c17a14ae497765d6e56c7ce6e07262847c6ae1b33da88de9dbce54e098602a975af9a0cadbc50570b6fe8c61adb0f68158d9c332e779636fc2c4171b648affbca5407ec595dde5e023cb58244abc3fa97a086c3ced167313f7fdd46d7fc6500eb7893ab6770794cab0bf84b597b93d63e17798c5d2dd080e00b4c390ad9bd6d6b2a511"], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c040004000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x7, 0x5, 0x7, 0x8}, {0x9, 0x29, 0x81, 0x3}, {0xb, 0x7f, 0x4, 0x7}, {0xa5, 0x0, 0x1}, {0x3, 0x83, 0x0, 0x3}, {0x9, 0xd, 0x0, 0x5}, {0x6, 0x2, 0x4, 0x44c}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f00000000c0)={0x980903, 0x2}) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r10], 0x28}}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SG_GET_KEEP_ORPHAN(r13, 0x2288, &(0x7f00000010c0)) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000001000000000180012800b000100697036746e6c00000800028004000000081b0a00a4d5f4bae4bf4fb0dae984c0a495d6293fdf7b1d6a921d12134536eaeb4c1a46282ac765a844eb4c417ef82b813aa3da9d581c226ccf32d3e1164212d7297913555a1a1c9dd7e0c133b2b56d0ad20f36c424dde0cd327bfeabdd2b263d4f88df6b07031c4ab74ed1648e24c47e64043e37a04373157619c1caccb38981178c06b8fff9a8bd116fcd111ceacdf109cf469d48583f948c55de7bef757d53860ffc29a57a", @ANYRES32=r12, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 147.136279ms ago: executing program 4 (id=5491): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 1 (id=5492): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) kernel console output (not intermixed with test programs): 935364.285:2278): avc: denied { name_bind } for pid=20703 comm="syz.1.4808" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 741.905445][ T60] Bluetooth: Error in BCSP hdr checksum [ 741.975207][T20705] __nla_validate_parse: 4 callbacks suppressed [ 741.975223][T20705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4808'. [ 741.975262][T20710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4808'. [ 742.134970][ T1147] Bluetooth: Error in BCSP hdr checksum [ 742.184814][ T40] audit: type=1400 audit(1768935364.575:2279): avc: denied { read write } for pid=20712 comm="syz.0.4811" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 742.208416][ T40] audit: type=1400 audit(1768935364.575:2280): avc: denied { open } for pid=20712 comm="syz.0.4811" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 742.352882][ T40] audit: type=1400 audit(1768935364.755:2281): avc: denied { remount } for pid=20726 comm="syz.4.4815" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 742.405183][ T46] Bluetooth: Error in BCSP hdr checksum [ 742.676331][ T60] Bluetooth: Error in BCSP hdr checksum [ 742.773401][ T40] audit: type=1400 audit(1768935365.175:2282): avc: denied { mount } for pid=20734 comm="syz.1.4818" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 742.819996][T20735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.827046][T20735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.883004][ T40] audit: type=1400 audit(1768935365.285:2283): avc: denied { ioctl } for pid=20740 comm="syz.0.4819" path="socket:[76062]" dev="sockfs" ino=76062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 742.905492][ T6021] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 742.935736][ T46] Bluetooth: Error in BCSP hdr checksum [ 742.938405][T20742] trusted_key: syz.0.4819 sent an empty control message without MSG_MORE. [ 742.973693][ T40] audit: type=1400 audit(1768935365.375:2284): avc: denied { append } for pid=20743 comm="syz.1.4820" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 743.055056][ T6021] usb 7-1: Using ep0 maxpacket: 16 [ 743.059265][ T6021] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 743.065968][ T6021] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.071969][ T6021] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.078054][ T6021] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 743.086457][ T6021] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 743.090728][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.096483][ T6021] usb 7-1: config 0 descriptor?? [ 743.195129][ T60] Bluetooth: Error in BCSP hdr checksum [ 743.225359][T20753] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4824'. [ 743.386095][ T40] audit: type=1400 audit(1768935365.795:2285): avc: denied { getopt } for pid=20759 comm="syz.4.4827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 743.387880][T20760] binder_alloc: binder_alloc_mmap_handler: 20759 200000ffc000-200000ffd000 already mapped failed -16 [ 743.455226][ T13] Bluetooth: Error in BCSP hdr checksum [ 743.456823][T20761] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 743.709874][ T6021] usbhid 7-1:0.0: can't add hid device: -71 [ 743.715031][ T13] Bluetooth: Error in BCSP hdr checksum [ 743.719799][ T6021] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 743.736059][ T6021] usb 7-1: USB disconnect, device number 50 [ 743.824598][ T5949] Bluetooth: hci1: unexpected event for opcode 0x204e [ 743.871157][T20766] xt_SECMARK: invalid mode: 2 [ 743.875602][T20766] fuse: Bad value for 'fd' [ 743.985103][ T60] Bluetooth: Error in BCSP hdr checksum [ 744.164729][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4832'. [ 744.231087][T20776] ./bus: Can't lookup blockdev [ 744.245398][ T46] Bluetooth: Error in BCSP hdr checksum [ 744.307040][ T5949] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 744.327612][T20786] netlink: 'syz.2.4834': attribute type 10 has an invalid length. [ 744.329483][T20784] netlink: 188272 bytes leftover after parsing attributes in process `syz.0.4835'. [ 744.332324][T20786] veth1_vlan: left promiscuous mode [ 744.350803][T20786] team0: Device veth1_vlan failed to register rx_handler [ 744.399335][ T5950] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 744.505563][ T1183] Bluetooth: Error in BCSP hdr checksum [ 744.767719][ T46] Bluetooth: Error in BCSP hdr checksum [ 744.813818][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 744.813834][ T40] audit: type=1400 audit(1768935367.215:2289): avc: denied { watch_mount } for pid=20793 comm="syz.0.4839" path="/475" dev="tmpfs" ino=2598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 745.025514][ T1183] Bluetooth: Error in BCSP hdr checksum [ 745.176494][ T5949] block nbd1: Receive control failed (result -32) [ 745.177254][T20787] block nbd1: shutting down sockets [ 745.250038][T20800] overlayfs: overlapping lowerdir path [ 745.261010][T20800] overlayfs: overlapping lowerdir path [ 745.285193][ T1183] Bluetooth: Error in BCSP hdr checksum [ 745.332609][ T40] audit: type=1400 audit(1768935367.735:2290): avc: denied { append } for pid=20797 comm="syz.4.4841" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 745.384246][T20806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.385026][ T5989] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 745.392309][T20806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.544779][ T5989] usb 7-1: Using ep0 maxpacket: 16 [ 745.548813][ T5989] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 745.552319][ T5989] usb 7-1: config 0 has no interface number 0 [ 745.557746][ T5989] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 745.559889][ T13] Bluetooth: Error in BCSP hdr checksum [ 745.561840][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.568943][ T5989] usb 7-1: Product: syz [ 745.571031][ T5989] usb 7-1: Manufacturer: syz [ 745.573424][ T5989] usb 7-1: SerialNumber: syz [ 745.579201][ T5989] usb 7-1: config 0 descriptor?? [ 745.583235][ T5989] hub 7-1:0.132: bad descriptor, ignoring hub [ 745.586879][ T5989] hub 7-1:0.132: probe with driver hub failed with error -5 [ 745.593556][ T5989] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input60 [ 745.675823][ T40] audit: type=1400 audit(1768935368.085:2291): avc: denied { unmount } for pid=20811 comm="syz.0.4847" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 745.685320][ T5949] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 745.801302][T20820] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4849'. [ 745.806658][T20820] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4849'. [ 745.809424][T20818] netlink: 'syz.4.4848': attribute type 11 has an invalid length. [ 745.811092][T20820] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4849'. [ 745.815698][T20818] netlink: 35072 bytes leftover after parsing attributes in process `syz.4.4848'. [ 745.817576][ T60] Bluetooth: Error in BCSP hdr checksum [ 745.830184][T20818] input: syz0 as /devices/virtual/input/input61 [ 745.978014][T20830] syzkaller0: entered promiscuous mode [ 745.978102][ T40] audit: type=1400 audit(1768935368.385:2292): avc: denied { wake_alarm } for pid=20827 comm="syz.4.4853" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 745.981058][T20830] syzkaller0: entered allmulticast mode [ 746.075341][ T13] Bluetooth: Error in BCSP hdr checksum [ 746.195290][T20836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20836 comm=syz.4.4855 [ 746.205236][T20836] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4855'. [ 746.247668][ T40] audit: type=1400 audit(1768935368.655:2293): avc: denied { ioctl } for pid=20835 comm="syz.4.4855" path="socket:[76148]" dev="sockfs" ino=76148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 746.335293][ T13] Bluetooth: Error in BCSP hdr checksum [ 746.384190][T20840] bond1: entered promiscuous mode [ 746.398444][T20840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 746.605622][ T46] Bluetooth: Error in BCSP hdr checksum [ 746.849385][T20857] bridge0: port 1(syz_tun) entered blocking state [ 746.854928][T20857] bridge0: port 1(syz_tun) entered disabled state [ 746.858094][T20857] syz_tun: entered allmulticast mode [ 746.861961][T20857] syz_tun: entered promiscuous mode [ 746.869213][ T8676] Bluetooth: Error in BCSP hdr checksum [ 746.894808][ T5989] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 747.055028][ T5989] usb 9-1: Using ep0 maxpacket: 16 [ 747.060744][ T5989] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 747.067644][ T5989] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.072336][ T5989] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.077002][ T5989] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 747.082778][ T5989] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 747.087037][ T5989] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.092532][ T5989] usb 9-1: config 0 descriptor?? [ 747.126431][ T13] Bluetooth: Error in BCSP hdr checksum [ 747.385666][ T60] Bluetooth: Error in BCSP hdr checksum [ 747.644999][ T60] Bluetooth: Error in BCSP hdr checksum [ 747.905028][ T8676] Bluetooth: Error in BCSP hdr checksum [ 748.165394][ T13] Bluetooth: Error in BCSP hdr checksum [ 748.231730][T20897] vlan2: entered promiscuous mode [ 748.234331][T20897] bridge0: entered promiscuous mode [ 748.246736][T20897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.256515][T20897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.322765][T20899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.335893][T20899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.425026][ T5949] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 748.425591][ T8676] Bluetooth: Error in BCSP hdr checksum [ 748.429558][ T5949] Bluetooth: hci1: Injecting HCI hardware error event [ 748.434269][ T5949] Bluetooth: hci1: hardware error 0x00 [ 748.659727][T20903] __nla_validate_parse: 1 callbacks suppressed [ 748.659746][T20903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4878'. [ 748.685288][ T8676] Bluetooth: Error in BCSP hdr checksum [ 748.945227][ T13] Bluetooth: Error in BCSP hdr checksum [ 748.952244][T20907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4880'. [ 749.215198][ T60] Bluetooth: Error in BCSP hdr checksum [ 749.272830][T20916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 749.281391][ T7357] usb 7-1: USB disconnect, device number 51 [ 749.295375][ T5989] usbhid 9-1:0.0: can't add hid device: -71 [ 749.298134][ T5989] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 749.311941][T20916] netlink: 'syz.1.4883': attribute type 1 has an invalid length. [ 749.313065][ T5989] usb 9-1: USB disconnect, device number 64 [ 749.331190][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4883'. [ 749.337451][T20918] overlayfs: failed to clone upperpath [ 749.388526][ T6420] libceph: connect (1)[c::]:6789 error -101 [ 749.391287][ T6420] libceph: mon0 (1)[c::]:6789 connect error [ 749.432511][T20923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4885'. [ 749.485283][ T60] Bluetooth: Error in BCSP hdr checksum [ 749.542565][T20920] ceph: No mds server is up or the cluster is laggy [ 749.716360][T20935] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 749.720959][T20935] team0: Port device batadv3 added [ 749.755453][ T60] Bluetooth: Error in BCSP hdr checksum [ 749.802871][T20943] overlayfs: missing 'lowerdir' [ 749.980254][ T5950] block nbd4: Receive control failed (result -32) [ 749.991943][T20947] block nbd4: shutting down sockets [ 750.015822][ T13] Bluetooth: Error in BCSP hdr checksum [ 750.052309][T20947] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4894'. [ 750.134737][ T40] audit: type=1400 audit(1768935372.535:2294): avc: denied { connect } for pid=20963 comm="syz.2.4901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 750.193253][ T40] audit: type=1400 audit(1768935372.595:2295): avc: denied { read write } for pid=20963 comm="syz.2.4901" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 750.205393][ T40] audit: type=1400 audit(1768935372.605:2296): avc: denied { open } for pid=20963 comm="syz.2.4901" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 750.231394][T20971] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 750.267039][T20974] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 750.275198][ T46] Bluetooth: Error in BCSP hdr checksum [ 750.276723][T20974] Cannot find add_set index 0 as target [ 750.278301][T20975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4904'. [ 750.293621][T20978] netlink: 'syz.1.4905': attribute type 3 has an invalid length. [ 750.296962][ T5950] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 750.300664][T20978] netlink: 'syz.1.4905': attribute type 1 has an invalid length. [ 750.431454][ T40] audit: type=1400 audit(1768935372.835:2297): avc: denied { remount } for pid=20985 comm="syz.2.4907" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 750.439878][T20989] tmpfs: Group quota block hardlimit too large. [ 750.504821][ T5949] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 750.510639][T20994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 750.535083][ T6847] Bluetooth: Error in BCSP hdr checksum [ 750.541167][T20994] netlink: 'syz.1.4908': attribute type 1 has an invalid length. [ 750.543706][T20994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4908'. [ 750.628664][ T40] audit: type=1400 audit(1768935373.035:2298): avc: denied { firmware_load } for pid=20991 comm="syz.0.4910" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 750.685002][ T5989] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 750.795132][ T60] Bluetooth: Error in BCSP hdr checksum [ 750.825681][ T5989] usb 9-1: device descriptor read/64, error -71 [ 750.968063][T21010] overlayfs: failed to clone upperpath [ 751.028971][ T40] audit: type=1400 audit(1768935373.435:2299): avc: denied { read } for pid=21009 comm="syz.0.4915" lport=34699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 751.055417][ T6847] Bluetooth: Error in BCSP hdr checksum [ 751.065046][ T5989] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 751.214953][ T5989] usb 9-1: device descriptor read/64, error -71 [ 751.246129][T21016] netlink: 'syz.2.4917': attribute type 11 has an invalid length. [ 751.325152][ T6847] Bluetooth: Error in BCSP hdr checksum [ 751.337118][ T5989] usb usb9-port1: attempt power cycle [ 751.575298][ T46] Bluetooth: Error in BCSP hdr checksum [ 751.694803][ T5989] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 751.721500][ T5989] usb 9-1: device descriptor read/8, error -71 [ 751.847673][ T60] Bluetooth: Error in BCSP hdr checksum [ 751.974936][ T5989] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 751.995513][ T5989] usb 9-1: device descriptor read/8, error -71 [ 752.108081][ T5989] usb usb9-port1: unable to enumerate USB device [ 752.110115][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.114308][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.118337][ T60] Bluetooth: Error in BCSP hdr checksum [ 752.271902][T21048] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 752.298437][T21055] xt_hashlimit: size too large, truncated to 1048576 [ 752.375138][ T13] Bluetooth: Error in BCSP hdr checksum [ 752.480373][T21062] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 752.489322][T21062] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 752.493072][T21062] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 752.634014][T21068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21068 comm=syz.0.4932 [ 752.636561][ T6847] Bluetooth: Error in BCSP hdr checksum [ 752.693488][ T40] audit: type=1400 audit(1768935375.095:2300): avc: denied { map } for pid=21072 comm="syz.0.4933" path="socket:[79067]" dev="sockfs" ino=79067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 752.703408][ T40] audit: type=1800 audit(1768935375.105:2301): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4933" name="nullb0" dev="tmpfs" ino=2567 res=0 errno=0 [ 752.895878][ T46] Bluetooth: Error in BCSP hdr checksum [ 752.966196][T21077] kAFS: unable to lookup cell '(,c¾ûL' [ 752.970077][T21077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36896 sclass=netlink_route_socket pid=21077 comm=syz.1.4935 [ 753.158910][T21082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.163412][T21082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.165109][ T46] Bluetooth: Error in BCSP hdr checksum [ 753.435137][ T60] Bluetooth: Error in BCSP hdr checksum [ 753.617520][ T40] audit: type=1400 audit(1768935376.025:2302): avc: denied { write } for pid=21091 comm="syz.0.4941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 753.695107][ T60] Bluetooth: Error in BCSP hdr checksum [ 753.722871][T21098] syz_tun: left allmulticast mode [ 753.722898][T21098] syz_tun: left promiscuous mode [ 753.723088][T21098] bridge0: port 1(syz_tun) entered disabled state [ 753.758935][T21098] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 753.810039][ T5949] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 753.824835][ T985] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 753.955426][ T13] Bluetooth: Error in BCSP hdr checksum [ 753.977136][ T985] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.982490][ T985] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.986826][ T985] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 753.992449][ T985] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 753.996659][ T985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.002978][ T985] usb 9-1: config 0 descriptor?? [ 754.215127][ T13] Bluetooth: Error in BCSP hdr checksum [ 754.415345][ T985] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 754.418839][ T985] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 754.422481][ T985] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 754.426012][ T985] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 754.429645][ T985] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 754.435578][ T985] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 754.445010][ T985] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 754.447990][ T985] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 754.454904][ T985] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 754.458159][ T985] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 754.473853][ T985] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 754.485118][ T46] Bluetooth: Error in BCSP hdr checksum [ 754.676170][ T40] audit: type=1400 audit(1768935377.085:2303): avc: denied { bind } for pid=21085 comm="syz.4.4939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 754.746268][ T13] Bluetooth: Error in BCSP hdr checksum [ 754.912677][T21118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.917187][T21118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.016175][ T46] Bluetooth: Error in BCSP hdr checksum [ 755.021044][T21124] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4954'. [ 755.032962][T21124] x_tables: duplicate underflow at hook 2 [ 755.124397][T21126] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4955'. [ 755.194289][T21128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 755.285092][ T13] Bluetooth: Error in BCSP hdr checksum [ 755.314524][T21137] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 755.320364][T21137] team0: Port device batadv4 added [ 755.427203][T21143] netlink: 'syz.0.4959': attribute type 10 has an invalid length. [ 755.431231][T21143] team0: Device veth1_vlan failed to register rx_handler [ 755.434424][T21142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4960'. [ 755.505562][T21145] usb 2-1: USB disconnect, device number 2 [ 755.546384][ T60] Bluetooth: Error in BCSP hdr checksum [ 755.589955][T21146] hub 2-0:1.0: USB hub found [ 755.592810][T21146] hub 2-0:1.0: 6 ports detected [ 755.608427][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 755.608448][ T40] audit: type=1400 audit(1768935378.015:2305): avc: denied { ioctl } for pid=21144 comm="syz.1.4961" path="socket:[78371]" dev="sockfs" ino=78371 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 755.623828][ T40] audit: type=1400 audit(1768935378.015:2306): avc: denied { bind } for pid=21144 comm="syz.1.4961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 755.624907][T21145] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4961'. [ 755.745879][ T5989] usb 9-1: reset high-speed USB device number 69 using dummy_hcd [ 755.764856][ T7357] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 755.815273][ T6847] Bluetooth: Error in BCSP hdr checksum [ 755.950004][ T7357] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 755.955519][ T7357] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 755.959157][ T7357] usb 2-1: Product: QEMU USB Tablet [ 755.961470][ T7357] usb 2-1: Manufacturer: QEMU [ 755.963556][ T7357] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 755.992758][ T7357] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.001A/input/input62 [ 756.070809][ T7357] hid-generic 0003:0627:0001.001A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 756.075244][ T13] Bluetooth: Error in BCSP hdr checksum [ 756.289953][T21154] cgroup: subsys name conflicts with all [ 756.293874][T21154] cgroup: subsys name conflicts with all [ 756.297581][T21154] cgroup: subsys name conflicts with all [ 756.300283][T21154] cgroup: subsys name conflicts with all [ 756.303011][T21154] cgroup: subsys name conflicts with all [ 756.305981][T21154] cgroup: subsys name conflicts with all [ 756.308726][T21154] cgroup: subsys name conflicts with all [ 756.311629][T21154] cgroup: subsys name conflicts with all [ 756.314496][T21154] cgroup: subsys name conflicts with all [ 756.317321][T21154] cgroup: subsys name conflicts with all [ 756.320505][T21154] cgroup: subsys name conflicts with all [ 756.324352][T21154] cgroup: subsys name conflicts with all [ 756.329316][T21154] cgroup: subsys name conflicts with all [ 756.331903][T21154] cgroup: subsys name conflicts with all [ 756.334767][T21154] cgroup: subsys name conflicts with all [ 756.335800][ T6847] Bluetooth: Error in BCSP hdr checksum [ 756.337433][T21154] cgroup: subsys name conflicts with all [ 756.342993][T21154] cgroup: subsys name conflicts with all [ 756.346514][T21154] cgroup: subsys name conflicts with all [ 756.349268][T21154] cgroup: subsys name conflicts with all [ 756.351997][T21154] cgroup: subsys name conflicts with all [ 756.354823][T21154] cgroup: subsys name conflicts with all [ 756.357584][T21154] cgroup: subsys name conflicts with all [ 756.360644][T21154] cgroup: subsys name conflicts with all [ 756.363982][T21154] cgroup: subsys name conflicts with all [ 756.367025][T21154] cgroup: subsys name conflicts with all [ 756.369740][T21154] cgroup: subsys name conflicts with all [ 756.372447][T21154] cgroup: subsys name conflicts with all [ 756.375233][T21154] cgroup: subsys name conflicts with all [ 756.378135][T21154] cgroup: subsys name conflicts with all [ 756.381054][T21154] cgroup: subsys name conflicts with all [ 756.384209][T21154] cgroup: subsys name conflicts with all [ 756.389814][T21154] cgroup: subsys name conflicts with all [ 756.392747][T21154] cgroup: subsys name conflicts with all [ 756.395698][T21154] cgroup: subsys name conflicts with all [ 756.398837][T21154] cgroup: subsys name conflicts with all [ 756.402287][T21154] cgroup: subsys name conflicts with all [ 756.405079][T21154] cgroup: subsys name conflicts with all [ 756.407785][T21154] cgroup: subsys name conflicts with all [ 756.410473][T21154] cgroup: subsys name conflicts with all [ 756.413089][T21154] cgroup: subsys name conflicts with all [ 756.415863][T21154] cgroup: subsys name conflicts with all [ 756.418629][T21154] cgroup: subsys name conflicts with all [ 756.421740][T21154] cgroup: subsys name conflicts with all [ 756.425565][T21154] cgroup: subsys name conflicts with all [ 756.428903][T21154] cgroup: subsys name conflicts with all [ 756.431676][T21154] cgroup: subsys name conflicts with all [ 756.434447][T21154] cgroup: subsys name conflicts with all [ 756.437182][T21154] cgroup: subsys name conflicts with all [ 756.440056][T21154] cgroup: subsys name conflicts with all [ 756.442753][T21154] cgroup: subsys name conflicts with all [ 756.446672][T21154] cgroup: subsys name conflicts with all [ 756.449596][T21154] cgroup: subsys name conflicts with all [ 756.452529][T21154] cgroup: subsys name conflicts with all [ 756.455500][T21154] cgroup: subsys name conflicts with all [ 756.458203][T21154] cgroup: subsys name conflicts with all [ 756.460938][T21154] cgroup: subsys name conflicts with all [ 756.463641][T21154] cgroup: subsys name conflicts with all [ 756.467189][T21154] cgroup: subsys name conflicts with all [ 756.470724][T21154] cgroup: subsys name conflicts with all [ 756.473591][T21154] cgroup: subsys name conflicts with all [ 756.476666][T21154] cgroup: subsys name conflicts with all [ 756.479299][T21154] cgroup: subsys name conflicts with all [ 756.482044][T21154] cgroup: subsys name conflicts with all [ 756.484909][T21154] cgroup: subsys name conflicts with all [ 756.487768][T21154] cgroup: subsys name conflicts with all [ 756.559299][T21158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 756.595575][ T46] Bluetooth: Error in BCSP hdr checksum [ 756.616993][T21160] input: syz1 as /devices/virtual/input/input63 [ 756.643753][ T40] audit: type=1400 audit(1768935379.045:2307): avc: denied { read write } for pid=21161 comm="syz.4.4966" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 756.644075][T21162] random: crng reseeded on system resumption [ 756.660338][ T40] audit: type=1400 audit(1768935379.045:2308): avc: denied { ioctl open } for pid=21161 comm="syz.4.4966" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 756.675562][T21162] syz_tun: entered allmulticast mode [ 756.683947][T21162] pimreg: entered allmulticast mode [ 756.691686][T21161] syz_tun: left allmulticast mode [ 756.850052][ T40] audit: type=1400 audit(1768935379.255:2309): avc: denied { accept } for pid=21167 comm="syz.0.4970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 756.855192][ T1183] Bluetooth: Error in BCSP hdr checksum [ 756.945176][ T61] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 756.964659][ T5949] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 757.015180][T21184] overlayfs: missing 'workdir' [ 757.021931][ T40] audit: type=1400 audit(1768935379.425:2310): avc: denied { map } for pid=21183 comm="syz.4.4976" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 757.053895][T21186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 757.062263][T21188] x_tables: duplicate underflow at hook 2 [ 757.094987][ T61] usb 7-1: Using ep0 maxpacket: 16 [ 757.098686][ T61] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 757.102983][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.118577][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.123048][ T61] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 757.129849][ T1183] Bluetooth: Error in BCSP hdr checksum [ 757.129988][ T61] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 757.144763][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.156624][ T61] usb 7-1: config 0 descriptor?? [ 757.173357][T21191] hsr0 speed is unknown, defaulting to 1000 [ 757.178664][T21191] lo speed is unknown, defaulting to 1000 [ 757.178714][T21190] hsr0 speed is unknown, defaulting to 1000 [ 757.192314][T21190] lo speed is unknown, defaulting to 1000 [ 757.288451][ T6420] usb 9-1: USB disconnect, device number 69 [ 757.395488][ T6847] Bluetooth: Error in BCSP hdr checksum [ 757.399410][ T40] audit: type=1400 audit(1768935379.805:2311): avc: denied { ioctl } for pid=21199 comm="syz.1.4982" path="socket:[78442]" dev="sockfs" ino=78442 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 757.575474][ T61] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.001B/input/input64 [ 757.648096][ T61] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.001B/input/input65 [ 757.655334][ T6847] Bluetooth: Error in BCSP hdr checksum [ 757.720415][ T61] kye 0003:0458:5013.001B: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 757.770907][ T61] usb 7-1: USB disconnect, device number 52 [ 757.784384][T21209] fido_id[21209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 757.853698][T21211] pim6reg1: entered promiscuous mode [ 757.860220][T21211] pim6reg1: entered allmulticast mode [ 757.915062][ T6847] Bluetooth: Error in BCSP hdr checksum [ 758.099684][T21217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4988'. [ 758.176416][ T60] Bluetooth: Error in BCSP hdr checksum [ 758.273934][T21229] sctp: [Deprecated]: syz.1.4993 (pid 21229) Use of int in max_burst socket option. [ 758.273934][T21229] Use struct sctp_assoc_value instead [ 758.282873][T21229] gfs2: Unknown parameter 'aclÿÿÿÿ' [ 758.328927][ T40] audit: type=1400 audit(1768935380.735:2312): avc: denied { append } for pid=21232 comm="syz.1.4994" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 758.354517][ T40] audit: type=1400 audit(1768935380.755:2313): avc: denied { create } for pid=21232 comm="syz.1.4994" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 758.365306][ T40] audit: type=1400 audit(1768935380.755:2314): avc: denied { remove_name } for pid=21232 comm="syz.1.4994" name="control" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 758.437668][ T8676] Bluetooth: Error in BCSP hdr checksum [ 758.517710][T21238] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4996'. [ 758.595366][T21243] nfs4: Bad value for 'source' [ 758.598827][T21242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4999'. [ 758.610099][T21242] ip6gre1: entered promiscuous mode [ 758.612699][T21242] ip6gre1: entered allmulticast mode [ 758.697754][ T1183] Bluetooth: Error in BCSP hdr checksum [ 758.746864][T21253] netlink: 'syz.1.4997': attribute type 10 has an invalid length. [ 758.763701][T21253] team0: Device veth1_vlan failed to register rx_handler [ 758.793774][T21250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5001'. [ 758.968503][ T46] Bluetooth: Error in BCSP hdr checksum [ 759.225333][ T6847] Bluetooth: Error in BCSP hdr checksum [ 759.382346][T21272] 8021q: VLANs not supported on ip6_vti0 [ 759.490852][ T6847] Bluetooth: Error in BCSP hdr checksum [ 759.563659][T21278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.571212][T21278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.745202][ T1183] Bluetooth: Error in BCSP hdr checksum [ 759.826361][ T7357] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 759.987491][ T7357] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 759.992362][ T7357] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 759.997241][ T7357] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 760.002338][ T7357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.005129][ T60] Bluetooth: Error in BCSP hdr checksum [ 760.010416][T21276] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 760.017820][ T7357] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 760.182840][T21283] comedi comedi4: comedi_config --init_data is deprecated [ 760.220430][ T61] usb 7-1: USB disconnect, device number 53 [ 760.237967][T21286] tmpfs: Bad value for 'mpol' [ 760.265650][ T60] Bluetooth: Error in BCSP hdr checksum [ 760.280416][ T5950] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 760.456761][T21295] netlink: 147760 bytes leftover after parsing attributes in process `syz.1.5016'. [ 760.525198][ T46] Bluetooth: Error in BCSP hdr checksum [ 760.548151][T21300] netlink: 'syz.0.5018': attribute type 1 has an invalid length. [ 760.566930][T21300] smc: adding net device bond0 with user defined pnetid SYZ2 [ 760.574873][T21300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.581700][T21300] bond0: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 760.590159][T21300] bond0: entered allmulticast mode [ 760.795145][ T6847] Bluetooth: Error in BCSP hdr checksum [ 760.849678][T21315] netlink: 'syz.0.5023': attribute type 10 has an invalid length. [ 760.852899][T21315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5023'. [ 761.033590][T21324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5027'. [ 761.042025][T21324] fuse: Unknown parameter 'f ' [ 761.055221][ T1147] Bluetooth: Error in BCSP hdr checksum [ 761.315116][ T1147] Bluetooth: Error in BCSP hdr checksum [ 761.575071][ T46] Bluetooth: Error in BCSP hdr checksum [ 761.845630][ T13] Bluetooth: Error in BCSP hdr checksum [ 762.029367][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 762.029384][ T40] audit: type=1326 audit(1768935384.435:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.1.5035" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f134958f7c9 code=0x0 [ 762.108264][ T13] Bluetooth: Error in BCSP hdr checksum [ 762.188930][T21351] kvm: Disabled LAPIC found during irq injection [ 762.200923][T21350] SET target dimension over the limit! [ 762.266745][ T5949] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 762.375312][ T46] Bluetooth: Error in BCSP hdr checksum [ 762.399064][T21360] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 762.403932][T21360] team0: Port device batadv3 added [ 762.430321][T21362] fuse: Bad value for 'fd' [ 762.645099][ T1147] Bluetooth: Error in BCSP hdr checksum [ 762.807766][T21381] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5046'. [ 762.813649][T21381] netlink: 'syz.4.5046': attribute type 10 has an invalid length. [ 762.824590][T21381] team0: Device veth1_vlan failed to register rx_handler [ 762.905476][ T13] Bluetooth: Error in BCSP hdr checksum [ 762.969537][T21388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.975220][T21388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.046754][T21390] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 763.159614][T21396] syz_tun: entered allmulticast mode [ 763.165217][ T1147] Bluetooth: Error in BCSP hdr checksum [ 763.165481][T21395] syz_tun: left allmulticast mode [ 763.229721][ T40] audit: type=1400 audit(1768935385.635:2319): avc: denied { listen } for pid=21401 comm="syz.2.5057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 763.238447][ T40] audit: type=1400 audit(1768935385.645:2320): avc: denied { accept } for pid=21401 comm="syz.2.5057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 763.299263][T21404] overlay: filesystem on ./file1 not supported as upperdir [ 763.363163][T21408] overlayfs: failed to clone upperpath [ 763.435117][ T13] Bluetooth: Error in BCSP hdr checksum [ 763.466378][T21410] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5060'. [ 763.544158][T21416] pim6reg1: entered promiscuous mode [ 763.546943][T21416] pim6reg1: entered allmulticast mode [ 763.573063][T21418] netlink: 'syz.0.5063': attribute type 1 has an invalid length. [ 763.604224][T21418] bond2: entered promiscuous mode [ 763.606719][T21418] bond2: entered allmulticast mode [ 763.609372][T21418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 763.625633][T21418] erspan1: entered allmulticast mode [ 763.633343][T21418] bond2: (slave erspan1): making interface the new active one [ 763.637229][T21418] erspan1: entered promiscuous mode [ 763.641158][T21418] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 763.662138][T21425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21425 comm=syz.1.5066 [ 763.672775][T21425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21425 comm=syz.1.5066 [ 763.696008][ T46] Bluetooth: Error in BCSP hdr checksum [ 763.768752][ T40] audit: type=1400 audit(1768935386.175:2321): avc: denied { getopt } for pid=21431 comm="syz.1.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 763.779668][T21435] xt_hashlimit: invalid rate [ 763.966575][ T13] Bluetooth: Error in BCSP hdr checksum [ 764.011933][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803f479400: rx timeout, send abort [ 764.025877][ T40] audit: type=1400 audit(1768935386.435:2322): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 764.038254][ T40] audit: type=1400 audit(1768935386.445:2323): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.048778][ T40] audit: type=1400 audit(1768935386.445:2324): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.059253][ T40] audit: type=1400 audit(1768935386.445:2325): avc: denied { add_name } for pid=5329 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.068171][ T40] audit: type=1400 audit(1768935386.445:2326): avc: denied { create } for pid=5329 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 764.068213][ T40] audit: type=1400 audit(1768935386.445:2327): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 764.232431][ T13] Bluetooth: Error in BCSP hdr checksum [ 764.495286][ T13] Bluetooth: Error in BCSP hdr checksum [ 764.518179][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803f479400: abort rx timeout. Force session deactivation [ 764.534826][ T985] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 764.699380][ T985] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 764.704053][ T985] usb 7-1: config 0 interface 0 has no altsetting 0 [ 764.711672][ T985] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 764.715649][ T985] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 764.719089][ T985] usb 7-1: Product: syz [ 764.720523][ T985] usb 7-1: Manufacturer: syz [ 764.722203][ T985] usb 7-1: SerialNumber: syz [ 764.727538][ T985] usb 7-1: config 0 descriptor?? [ 764.731281][T21476] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 764.739483][ T985] usb 7-1: selecting invalid altsetting 0 [ 764.755724][ T8676] Bluetooth: Error in BCSP hdr checksum [ 764.948703][T17789] usb 7-1: USB disconnect, device number 54 [ 765.026267][ T13] Bluetooth: Error in BCSP hdr checksum [ 765.041805][T21516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5085'. [ 765.285702][ T1147] Bluetooth: Error in BCSP hdr checksum [ 765.545711][ T8676] Bluetooth: Error in BCSP hdr checksum [ 765.816476][ T8676] Bluetooth: Error in BCSP hdr checksum [ 765.955522][T21544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.962837][T21544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.039632][T21547] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 766.049367][T21544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.054008][T21544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.075134][ T8676] Bluetooth: Error in BCSP hdr checksum [ 766.093751][T21551] netlink: 'syz.0.5094': attribute type 5 has an invalid length. [ 766.185116][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 766.335258][ T13] Bluetooth: Error in BCSP hdr checksum [ 766.595325][ T13] Bluetooth: Error in BCSP hdr checksum [ 766.710094][T21571] hsr0 speed is unknown, defaulting to 1000 [ 766.714291][T21571] lo speed is unknown, defaulting to 1000 [ 766.756933][ T5949] Bluetooth: hci4: unexpected event for opcode 0x204e [ 766.855839][ T46] Bluetooth: Error in BCSP hdr checksum [ 766.872932][T21580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 766.887143][T21580] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5102'. [ 767.115141][ T13] Bluetooth: Error in BCSP hdr checksum [ 767.375290][ T46] Bluetooth: Error in BCSP hdr checksum [ 767.635351][ T13] Bluetooth: Error in BCSP hdr checksum [ 767.695499][T21597] overlayfs: failed to resolve './file0': -2 [ 767.895306][ T13] Bluetooth: Error in BCSP hdr checksum [ 767.994156][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 767.994170][ T40] audit: type=1400 audit(1768935390.395:2333): avc: denied { mounton } for pid=21613 comm="syz.4.5115" path="/295/file0" dev="tmpfs" ino=1625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 768.158111][ T1147] Bluetooth: Error in BCSP hdr checksum [ 768.415068][ T13] Bluetooth: Error in BCSP hdr checksum [ 768.575376][T21619] Invalid source name [ 768.577258][T21619] UBIFS error (pid: 21619): cannot open "ubifs", error -22 [ 768.675552][ T6847] Bluetooth: Error in BCSP hdr checksum [ 768.706565][T21622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 768.722573][T21622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5117'. [ 768.730003][T21624] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 768.735559][T21624] team0: Port device batadv2 added [ 768.937964][ T1147] Bluetooth: Error in BCSP hdr checksum [ 769.043755][T21633] overlayfs: failed to clone upperpath [ 769.053210][ T40] audit: type=1400 audit(1768935391.455:2334): avc: denied { read } for pid=21628 comm="syz.2.5121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 769.205376][ T13] Bluetooth: Error in BCSP hdr checksum [ 769.450474][ T40] audit: type=1400 audit(1768935391.855:2335): avc: denied { getopt } for pid=21643 comm="syz.0.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 769.460480][ T13] Bluetooth: Error in BCSP hdr checksum [ 769.460624][T21647] netlink: zone id is out of range [ 769.466976][T21647] fuse: Bad value for 'fd' [ 769.470189][T21647] fuse: Unknown parameter 'mask' [ 769.543735][T21649] syzkaller0: entered promiscuous mode [ 769.547203][T21649] syzkaller0: entered allmulticast mode [ 769.715587][ T1147] Bluetooth: Error in BCSP hdr checksum [ 769.751446][T21651] syz_tun: entered allmulticast mode [ 769.760335][T21651] pimreg: entered allmulticast mode [ 769.770961][T21650] syz_tun: left allmulticast mode [ 769.867574][ T40] audit: type=1400 audit(1768935392.275:2336): avc: denied { setattr } for pid=21652 comm="syz.1.5127" name="nbd1" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.871009][T21653] overlayfs: failed to resolve './file1': -2 [ 769.975087][ T13] Bluetooth: Error in BCSP hdr checksum [ 770.235051][ T6847] Bluetooth: Error in BCSP hdr checksum [ 770.505110][ T13] Bluetooth: Error in BCSP hdr checksum [ 770.765089][ T46] Bluetooth: Error in BCSP hdr checksum [ 771.025659][ T1147] Bluetooth: Error in BCSP hdr checksum [ 771.137743][T21685] netlink: 'syz.0.5136': attribute type 10 has an invalid length. [ 771.143615][T21685] team0: Device veth1_vlan failed to register rx_handler [ 771.145429][ T6036] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 771.193659][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803f59e800: rx timeout, send abort [ 771.197227][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88803f59e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 771.286909][T21688] binder: 21687:21688 ioctl 800454e1 200000000000 returned -22 [ 771.297155][ T1147] Bluetooth: Error in BCSP hdr checksum [ 771.315655][ T6036] usb 7-1: Using ep0 maxpacket: 16 [ 771.319921][ T6036] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 771.327290][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.332281][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.342102][ T6036] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 771.355453][ T6036] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 771.360581][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.384273][ T6036] usb 7-1: config 0 descriptor?? [ 771.405156][T21696] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5141'. [ 771.409634][T21696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5141'. [ 771.555800][ T46] Bluetooth: Error in BCSP hdr checksum [ 771.810776][ T6036] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.001C/input/input66 [ 771.815584][ T13] Bluetooth: Error in BCSP hdr checksum [ 771.826414][ T6036] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.001C/input/input67 [ 771.911535][ T6036] kye 0003:0458:5013.001C: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 771.966484][T21711] netlink: 'syz.0.5145': attribute type 1 has an invalid length. [ 772.075081][ T46] Bluetooth: Error in BCSP hdr checksum [ 772.208202][ T7357] usb 7-1: USB disconnect, device number 55 [ 772.335630][ T46] Bluetooth: Error in BCSP hdr checksum [ 772.428099][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 772.435746][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 772.443026][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 772.447328][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 772.451191][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 772.508483][T21722] hsr0 speed is unknown, defaulting to 1000 [ 772.512993][T21722] lo speed is unknown, defaulting to 1000 [ 772.595190][ T6847] Bluetooth: Error in BCSP hdr checksum [ 772.638255][T21722] chnl_net:caif_netlink_parms(): no params data found [ 772.738603][T21722] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.742382][T21722] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.746342][T21722] bridge_slave_0: entered allmulticast mode [ 772.750497][T21722] bridge_slave_0: entered promiscuous mode [ 772.756381][T21722] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.759772][T21722] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.763140][T21722] bridge_slave_1: entered allmulticast mode [ 772.767560][T21722] bridge_slave_1: entered promiscuous mode [ 772.797712][T21722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.805800][T21722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.835986][T21722] team0: Port device team_slave_0 added [ 772.841358][T21722] team0: Port device team_slave_1 added [ 772.856107][ T6847] Bluetooth: Error in BCSP hdr checksum [ 772.868759][T21722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.873133][T21722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.884435][T21722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.889803][T21739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5154'. [ 772.894595][T21739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5154'. [ 772.903148][T21722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.907106][T21722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.920379][T21722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.006719][T21722] hsr_slave_0: entered promiscuous mode [ 773.010394][T21722] hsr_slave_1: entered promiscuous mode [ 773.013886][T21722] debugfs: 'hsr0' already exists in 'hsr' [ 773.017453][T21722] Cannot create hsr debugfs directory [ 773.071984][T21753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 773.093273][T21753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5157'. [ 773.115139][ T13] Bluetooth: Error in BCSP hdr checksum [ 773.176944][T21722] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.266401][T21722] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.357944][T21722] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.375467][ T6847] Bluetooth: Error in BCSP hdr checksum [ 773.425806][T21722] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.645594][ T13] Bluetooth: Error in BCSP hdr checksum [ 773.719700][T21722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 773.726639][T21722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 773.733121][T21722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 773.740928][T21722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 773.769956][T21722] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.773357][T21722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.777214][T21722] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.780277][T21722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.832220][T21722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.847152][T21722] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.934020][ T99] Bluetooth: Error in BCSP hdr checksum [ 774.022910][T21778] xt_cgroup: path and classid specified [ 774.100819][T21784] syzkaller1: entered promiscuous mode [ 774.103330][T21784] syzkaller1: entered allmulticast mode [ 774.166362][ T75] Bluetooth: Error in BCSP hdr checksum [ 774.166898][T21722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.215973][T21722] veth0_vlan: entered promiscuous mode [ 774.227513][T21722] veth1_vlan: entered promiscuous mode [ 774.252469][T21722] veth0_macvtap: entered promiscuous mode [ 774.260912][T21722] veth1_macvtap: entered promiscuous mode [ 774.277370][T21722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.288641][T21722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.298608][ T99] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.302499][ T99] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.316251][ T99] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.326217][ T99] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.409235][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.412781][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.426521][ T13] Bluetooth: Error in BCSP hdr checksum [ 774.434568][T21796] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5167'. [ 774.438994][T21796] block nbd0: not configured, cannot reconfigure [ 774.439279][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.446602][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.514872][ T5950] Bluetooth: hci3: command tx timeout [ 774.519306][T21801] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 774.685210][ T99] Bluetooth: Error in BCSP hdr checksum [ 774.761590][T21810] bridge_slave_0: left allmulticast mode [ 774.763984][T21810] bridge_slave_0: left promiscuous mode [ 774.768767][T21810] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.775869][T21810] bridge_slave_1: left allmulticast mode [ 774.778214][T21810] bridge_slave_1: left promiscuous mode [ 774.780802][T21810] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.792915][T21810] bond0: (slave bond_slave_0): Releasing backup interface [ 774.801044][T21810] bond0: (slave bond_slave_1): Releasing backup interface [ 774.807885][T21811] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5170'. [ 774.819886][T21810] team0: Port device team_slave_0 removed [ 774.829982][T21810] team0: Port device team_slave_1 removed [ 774.833097][T21810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.836873][T21810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.841282][T21810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.846035][T21810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.850899][T21810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 774.945992][ T13] Bluetooth: Error in BCSP hdr checksum [ 775.099814][T21817] kvm: Disabled LAPIC found during irq injection [ 775.192587][ T40] audit: type=1400 audit(1768935397.595:2337): avc: denied { mounton } for pid=21821 comm="syz.0.5175" path="/6/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 775.221294][ T75] Bluetooth: Error in BCSP hdr checksum [ 775.286579][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5176'. [ 775.406137][T21835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5181'. [ 775.444811][T21838] binder: 21837:21838 ioctl c0306201 2000000001c0 returned -14 [ 775.448158][T21836] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 775.448341][T21838] binder: 21837:21838 ioctl c1004110 200000000200 returned -22 [ 775.476362][T21836] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5180'. [ 775.485104][ T13] Bluetooth: Error in BCSP hdr checksum [ 775.527772][T21841] netlink: 504 bytes leftover after parsing attributes in process `syz.1.5183'. [ 775.714915][T17792] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 775.733520][T21849] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 775.737487][ T60] Bluetooth: Error in BCSP hdr checksum [ 775.739359][T21849] team0: Port device batadv3 added [ 775.800627][T21852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5186'. [ 775.885060][T17792] usb 5-1: Using ep0 maxpacket: 8 [ 775.889407][T17792] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 775.893505][T17792] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 775.898263][T17792] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 775.902503][T17792] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 775.908399][T17792] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.914870][T17792] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 775.925035][T17792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.995513][ T99] Bluetooth: Error in BCSP hdr checksum [ 776.032574][T21858] xt_l2tp: invalid flags combination: 8 [ 776.055009][ T985] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 776.089599][T21860] fuse: Bad value for 'user_id' [ 776.091794][T21860] fuse: Bad value for 'user_id' [ 776.173100][ T40] audit: type=1400 audit(1768935398.575:2338): avc: denied { write } for pid=21861 comm="syz.1.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 776.204906][ T985] usb 7-1: Invalid ep0 maxpacket: 64 [ 776.259115][ T13] Bluetooth: Error in BCSP hdr checksum [ 776.335023][ T985] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 776.484884][ T985] usb 7-1: Invalid ep0 maxpacket: 64 [ 776.487363][ T985] usb usb7-port1: attempt power cycle [ 776.515164][ T13] Bluetooth: Error in BCSP hdr checksum [ 776.775265][ T99] Bluetooth: Error in BCSP hdr checksum [ 776.824927][ T985] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 776.845632][ T985] usb 7-1: Invalid ep0 maxpacket: 64 [ 776.974926][ T985] usb 7-1: new low-speed USB device number 59 using dummy_hcd [ 776.995687][ T985] usb 7-1: Invalid ep0 maxpacket: 64 [ 777.001347][ T985] usb usb7-port1: unable to enumerate USB device [ 777.045197][ T99] Bluetooth: Error in BCSP hdr checksum [ 777.265085][T21886] input: syz1 as /devices/virtual/input/input69 [ 777.314884][ T5950] Bluetooth: hci3: command tx timeout [ 777.319656][ T13] Bluetooth: Error in BCSP hdr checksum [ 777.335053][T21890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.338775][T21890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.575330][ T99] Bluetooth: Error in BCSP hdr checksum [ 777.835143][ T99] Bluetooth: Error in BCSP hdr checksum [ 778.002063][T21898] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 778.018914][T21898] __nla_validate_parse: 7 callbacks suppressed [ 778.018935][T21898] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5199'. [ 778.095043][ T1147] Bluetooth: Error in BCSP hdr checksum [ 778.355181][ T99] Bluetooth: Error in BCSP hdr checksum [ 778.452326][T17792] usb 5-1: usb_control_msg returned -71 [ 778.455917][T17792] usbtmc 5-1:16.0: can't read capabilities [ 778.477163][T17792] usb 5-1: USB disconnect, device number 53 [ 778.625342][ T99] Bluetooth: Error in BCSP hdr checksum [ 778.886659][ T1147] Bluetooth: Error in BCSP hdr checksum [ 779.147432][ T1183] Bluetooth: Error in BCSP hdr checksum [ 779.370634][T21924] bond0: (slave batadv0): Releasing backup interface [ 779.381424][T21924] bridge_slave_0: left allmulticast mode [ 779.383826][T21924] bridge_slave_0: left promiscuous mode [ 779.390025][T21924] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.396538][T21924] bridge_slave_1: left allmulticast mode [ 779.398983][T21924] bridge_slave_1: left promiscuous mode [ 779.401435][T21924] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.405113][ T99] Bluetooth: Error in BCSP hdr checksum [ 779.410251][T21924] bond0: (slave bond_slave_0): Releasing backup interface [ 779.416792][T21924] bond0: (slave bond_slave_1): Releasing backup interface [ 779.418328][T21925] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5209'. [ 779.428094][T21924] team0: Port device team_slave_0 removed [ 779.432509][T21924] team0: Port device team_slave_1 removed [ 779.436430][T21924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.440626][T21924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.444339][T21924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 779.665302][ T60] Bluetooth: Error in BCSP hdr checksum [ 779.767523][T21927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.773421][T21927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.778964][T21927] FAULT_INJECTION: forcing a failure. [ 779.778964][T21927] name failslab, interval 1, probability 0, space 0, times 0 [ 779.785431][T14069] Bluetooth: hci4: command 0x0405 tx timeout [ 779.791495][T21927] CPU: 1 UID: 0 PID: 21927 Comm: syz.1.5210 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.791533][T21927] Tainted: [L]=SOFTLOCKUP [ 779.791540][T21927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 779.791551][T21927] Call Trace: [ 779.791557][T21927] [ 779.791564][T21927] dump_stack_lvl+0x16c/0x1f0 [ 779.791611][T21927] should_fail_ex+0x512/0x640 [ 779.791647][T21927] ? fs_reclaim_acquire+0xae/0x150 [ 779.791672][T21927] should_failslab+0xc2/0x120 [ 779.791695][T21927] __kmalloc_noprof+0xeb/0x910 [ 779.791710][T21927] ? tomoyo_encode2+0x100/0x3e0 [ 779.791736][T21927] ? tomoyo_encode2+0x100/0x3e0 [ 779.791758][T21927] tomoyo_encode2+0x100/0x3e0 [ 779.791784][T21927] tomoyo_encode+0x29/0x50 [ 779.791806][T21927] tomoyo_realpath_from_path+0x18f/0x6e0 [ 779.791838][T21927] tomoyo_path_number_perm+0x245/0x580 [ 779.791856][T21927] ? tomoyo_path_number_perm+0x237/0x580 [ 779.791878][T21927] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 779.791900][T21927] ? find_held_lock+0x2b/0x80 [ 779.791948][T21927] ? find_held_lock+0x2b/0x80 [ 779.791973][T21927] ? hook_file_ioctl_common+0x144/0x410 [ 779.791996][T21927] ? __fget_files+0x20e/0x3c0 [ 779.792023][T21927] security_file_ioctl+0x9b/0x240 [ 779.792050][T21927] __x64_sys_ioctl+0xb7/0x210 [ 779.792069][T21927] do_syscall_64+0xcd/0xf80 [ 779.792094][T21927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.792109][T21927] RIP: 0033:0x7f134958f7c9 [ 779.792121][T21927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.792136][T21927] RSP: 002b:00007f134a4a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.792151][T21927] RAX: ffffffffffffffda RBX: 00007f13497e5fa0 RCX: 00007f134958f7c9 [ 779.792161][T21927] RDX: 0000200000000140 RSI: 0000000040084504 RDI: 0000000000000004 [ 779.792170][T21927] RBP: 00007f134a4a8090 R08: 0000000000000000 R09: 0000000000000000 [ 779.792179][T21927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.792187][T21927] R13: 00007f13497e6038 R14: 00007f13497e5fa0 R15: 00007ffd0a541b08 [ 779.792210][T21927] [ 779.792299][T21927] ERROR: Out of memory at tomoyo_realpath_from_path. [ 779.925515][ T1183] Bluetooth: Error in BCSP hdr checksum [ 780.185630][ T60] Bluetooth: Error in BCSP hdr checksum [ 780.445422][ T75] Bluetooth: Error in BCSP hdr checksum [ 780.585128][ T5949] Bluetooth: hci1: command 0x1003 tx timeout [ 780.585253][ T5950] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 780.638868][ T5950] Bluetooth: hci4: unknown advertising packet type: 0x82 [ 780.639032][ T5950] Bluetooth: hci4: Malformed LE Event: 0x02 [ 780.705633][ T75] Bluetooth: Error in BCSP hdr checksum [ 780.725913][T21946] QAT: Device 2 not found [ 780.728709][ T5950] Bluetooth: hci4: unexpected event for opcode 0x204e [ 780.834911][T21950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 780.848762][T21950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5219'. [ 780.965565][ T1183] Bluetooth: Error in BCSP hdr checksum [ 781.046675][T21952] xt_hashlimit: size too large, truncated to 1048576 [ 781.149122][T21954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5220'. [ 781.227393][ T60] Bluetooth: Error in BCSP hdr checksum [ 781.384122][ T5950] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 781.387591][ T5950] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 781.442003][T21963] binder: 21961:21963 ioctl c0306201 200000000080 returned -14 [ 781.446936][ T40] audit: type=1400 audit(1768935403.855:2339): avc: denied { validate_trans } for pid=21962 comm="syz.4.5225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 781.486747][ T99] Bluetooth: Error in BCSP hdr checksum [ 781.577327][ T40] audit: type=1400 audit(1768935403.985:2340): avc: denied { listen } for pid=21971 comm="syz.4.5228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 781.587216][ T40] audit: type=1400 audit(1768935403.995:2341): avc: denied { write } for pid=21973 comm="syz.0.5229" name="file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 781.596612][ T40] audit: type=1400 audit(1768935403.995:2342): avc: denied { open } for pid=21973 comm="syz.0.5229" path="/12/file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 781.596651][T17789] IPVS: starting estimator thread 0... [ 781.633572][T21977] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 781.638261][T21977] team0: Port device batadv4 added [ 781.685262][ T40] audit: type=1400 audit(1768935404.095:2343): avc: denied { attach_queue } for pid=21978 comm="syz.4.5231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 781.694835][ T40] audit: type=1400 audit(1768935404.095:2344): avc: denied { connect } for pid=21978 comm="syz.4.5231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 781.704879][T21975] IPVS: using max 31 ests per chain, 74400 per kthread [ 781.746507][ T1183] Bluetooth: Error in BCSP hdr checksum [ 781.748109][T21987] fuse: Bad value for 'fd' [ 781.767407][T21985] overlayfs: missing 'lowerdir' [ 781.812559][T21993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5238'. [ 781.861821][ T5950] Bluetooth: Unknown LE signaling command 0x94 [ 781.865534][ T5950] Bluetooth: Wrong link type (-22) [ 781.901706][T21996] hsr0 speed is unknown, defaulting to 1000 [ 781.908138][T21996] lo speed is unknown, defaulting to 1000 [ 781.938165][T22001] SELinux: Context Ü is not valid (left unmapped). [ 781.974411][T22004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5240'. [ 781.979486][T22004] netlink: 'syz.1.5240': attribute type 30 has an invalid length. [ 781.992933][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.997010][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.000818][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.004531][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.015394][ T60] Bluetooth: Error in BCSP hdr checksum [ 782.277209][ T99] Bluetooth: Error in BCSP hdr checksum [ 782.368621][T22007] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 782.385010][T22007] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5241'. [ 782.535158][ T1147] Bluetooth: Error in BCSP hdr checksum [ 782.685131][ T6420] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 782.800426][ T1147] Bluetooth: Error in BCSP hdr checksum [ 782.845006][ T6420] usb 5-1: Using ep0 maxpacket: 8 [ 782.849486][ T6420] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 782.853771][ T6420] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 782.858207][ T6420] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 782.862488][ T6420] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.869406][ T6420] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 782.873897][ T6420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.934954][T17792] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 783.004762][T17789] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 783.055034][ T75] Bluetooth: Error in BCSP hdr checksum [ 783.082542][ T6420] usb 5-1: GET_CAPABILITIES returned 0 [ 783.084438][ T6420] usbtmc 5-1:16.0: can't read capabilities [ 783.086847][T17792] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 783.090568][T17792] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 783.095607][T17792] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 783.098929][T17792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.104785][T22012] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 783.111294][T17792] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 783.187316][T17789] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 783.191337][T17789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.198109][T17789] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 783.202628][T17789] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 783.206634][T17789] usb 7-1: Manufacturer: syz [ 783.211761][T17789] usb 7-1: config 0 descriptor?? [ 783.275769][T17789] rc_core: IR keymap rc-hauppauge not found [ 783.277864][T17789] Registered IR keymap rc-empty [ 783.281834][T17789] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 783.288007][ T61] usb 5-1: USB disconnect, device number 54 [ 783.292193][T17789] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input70 [ 783.315124][ T75] Bluetooth: Error in BCSP hdr checksum [ 783.361250][T17792] usb 9-1: USB disconnect, device number 70 [ 783.431248][T22014] syz_tun: entered allmulticast mode [ 783.440163][T22013] syz_tun: left allmulticast mode [ 783.491031][T22021] input: syz0 as /devices/virtual/input/input71 [ 783.531725][T17789] usb 7-1: USB disconnect, device number 60 [ 783.586171][ T75] Bluetooth: Error in BCSP hdr checksum [ 783.845936][ T1183] Bluetooth: Error in BCSP hdr checksum [ 784.106301][ T8676] Bluetooth: Error in BCSP hdr checksum [ 784.135411][T22031] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 784.294916][ T985] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 784.375186][ T1183] Bluetooth: Error in BCSP hdr checksum [ 784.446813][ T985] usb 5-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 784.452374][ T985] usb 5-1: config 1 interface 0 has no altsetting 0 [ 784.457522][ T985] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.461946][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 784.465539][ T985] usb 5-1: SerialNumber: syz [ 784.498382][ T5950] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 784.544872][T17789] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 784.602654][ T40] audit: type=1400 audit(1768935407.005:2345): avc: denied { listen } for pid=22039 comm="syz.1.5254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 784.637157][ T13] Bluetooth: Error in BCSP hdr checksum [ 784.683609][ T985] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 784.695000][T17789] usb 9-1: Using ep0 maxpacket: 16 [ 784.697168][ T985] usb 5-1: USB disconnect, device number 55 [ 784.702529][T17789] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 784.707342][T17789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.711913][T17789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.716390][T17789] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 784.723400][T17789] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 784.728085][T17789] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.736221][T17789] usb 9-1: config 0 descriptor?? [ 784.890270][ T40] audit: type=1400 audit(1768935407.295:2346): avc: denied { append } for pid=22052 comm="syz.1.5258" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 784.895102][T22053] program syz.1.5258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 784.905685][ T8676] Bluetooth: Error in BCSP hdr checksum [ 784.989269][ T40] audit: type=1400 audit(1768935407.395:2347): avc: denied { read } for pid=22054 comm="syz.2.5259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 785.003444][ T40] audit: type=1400 audit(1768935407.405:2348): avc: denied { ioctl } for pid=22054 comm="syz.2.5259" path="socket:[83761]" dev="sockfs" ino=83761 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 785.165356][ T13] Bluetooth: Error in BCSP hdr checksum [ 785.168380][T17789] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.001D/input/input72 [ 785.241529][T22066] i2c i2c-1: Invalid block write size 34 [ 785.254651][T17789] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.001D/input/input73 [ 785.322856][T17789] kye 0003:0458:5013.001D: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 785.363933][ T61] usb 9-1: USB disconnect, device number 71 [ 785.396288][T22069] fido_id[22069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/9-1/report_descriptor': No such file or directory [ 785.427614][ T13] Bluetooth: Error in BCSP hdr checksum [ 785.685145][ T8676] Bluetooth: Error in BCSP hdr checksum [ 785.946214][ T99] Bluetooth: Error in BCSP hdr checksum [ 786.077262][T22078] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 786.080397][T22078] UDF-fs: Scanning with blocksize 2048 failed [ 786.085568][T22078] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 786.090089][T22078] UDF-fs: Scanning with blocksize 4096 failed [ 786.134870][T22084] input: syz1 as /devices/virtual/input/input74 [ 786.215626][ T13] Bluetooth: Error in BCSP hdr checksum [ 786.266410][T22090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5268'. [ 786.453889][T22106] overlayfs: overlapping lowerdir path [ 786.481914][T22109] hsr0 speed is unknown, defaulting to 1000 [ 786.486978][T22109] lo speed is unknown, defaulting to 1000 [ 786.531937][T22101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 786.550126][ T1147] Bluetooth: Error in BCSP hdr checksum [ 786.816937][ T1183] Bluetooth: Error in BCSP hdr checksum [ 786.929835][ T40] audit: type=1400 audit(1768935409.335:2349): avc: denied { ioctl } for pid=22114 comm="syz.1.5276" path="socket:[83963]" dev="sockfs" ino=83963 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 787.086455][ T1147] Bluetooth: Error in BCSP hdr checksum [ 787.142970][T22130] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 787.149191][T22130] team0: Port device batadv2 added [ 787.201639][ T5950] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 787.345721][ T13] Bluetooth: Error in BCSP hdr checksum [ 787.492596][T22143] autofs4:pid:22143:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 787.499059][T22143] autofs4:pid:22143:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 787.590938][T22152] overlayfs: failed to resolve './file1': -2 [ 787.605408][ T1147] Bluetooth: Error in BCSP hdr checksum [ 787.865814][ T75] Bluetooth: Error in BCSP hdr checksum [ 787.929766][T22159] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.5290'. [ 787.939410][T22159] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 788.125868][ T75] Bluetooth: Error in BCSP hdr checksum [ 788.386530][ T75] Bluetooth: Error in BCSP hdr checksum [ 788.394929][ T985] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 788.555408][ T985] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 788.560975][ T985] usb 7-1: config 0 interface 0 has no altsetting 0 [ 788.575351][ T985] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 788.580276][ T985] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 788.584123][ T985] usb 7-1: Product: syz [ 788.587208][ T985] usb 7-1: Manufacturer: syz [ 788.589767][ T985] usb 7-1: SerialNumber: syz [ 788.594281][ T985] usb 7-1: config 0 descriptor?? [ 788.602231][T22170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 788.610331][ T985] usb 7-1: selecting invalid altsetting 0 [ 788.646848][ T75] Bluetooth: Error in BCSP hdr checksum [ 788.728686][T22180] syzkaller0: entered promiscuous mode [ 788.730988][T22180] syzkaller0: entered allmulticast mode [ 788.814156][ T985] usb 7-1: USB disconnect, device number 61 [ 788.905756][ T1183] Bluetooth: Error in BCSP hdr checksum [ 789.095884][T22182] syz_tun: entered allmulticast mode [ 789.104270][T22181] syz_tun: left allmulticast mode [ 789.175603][ T99] Bluetooth: Error in BCSP hdr checksum [ 789.372635][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.377182][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.433871][ T40] audit: type=1400 audit(1768935411.835:2350): avc: denied { setopt } for pid=22195 comm="syz.0.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 789.435465][ T99] Bluetooth: Error in BCSP hdr checksum [ 789.549426][T22205] tmpfs: Bad value for 'mpol' [ 789.558588][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 789.563511][ T5950] CPU: 3 UID: 0 PID: 5950 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.563542][ T5950] Tainted: [L]=SOFTLOCKUP [ 789.563550][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 789.563563][ T5950] Workqueue: hci5 hci_rx_work [ 789.563588][ T5950] Call Trace: [ 789.563595][ T5950] [ 789.563603][ T5950] dump_stack_lvl+0x16c/0x1f0 [ 789.563632][ T5950] sysfs_warn_dup+0x7f/0xa0 [ 789.563655][ T5950] sysfs_create_dir_ns+0x24b/0x2b0 [ 789.563679][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 789.563700][ T5950] ? find_held_lock+0x2b/0x80 [ 789.563728][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 789.563751][ T5950] kobject_add_internal+0x2c4/0x9d0 [ 789.563781][ T5950] kobject_add+0x16e/0x240 [ 789.563803][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 789.563831][ T5950] ? kobject_put+0xaf/0x6f0 [ 789.563853][ T5950] ? _raw_spin_unlock+0x28/0x50 [ 789.563882][ T5950] device_add+0x288/0x1980 [ 789.563905][ T5950] ? __pfx_dev_set_name+0x10/0x10 [ 789.563929][ T5950] ? __pfx_device_add+0x10/0x10 [ 789.563950][ T5950] ? mgmt_send_event_skb+0x2fb/0x460 [ 789.563979][ T5950] hci_conn_add_sysfs+0x1a8/0x260 [ 789.564004][ T5950] le_conn_complete_evt+0x11ed/0x1fa0 [ 789.564033][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 789.564063][ T5950] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 789.564085][ T5950] ? skb_pull_data+0x166/0x210 [ 789.564106][ T5950] hci_le_meta_evt+0x357/0x610 [ 789.564130][ T5950] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 789.564155][ T5950] hci_event_packet+0x685/0x1210 [ 789.564176][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 789.564200][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 789.564224][ T5950] ? kcov_remote_start+0x399/0x680 [ 789.564244][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 789.564276][ T5950] hci_rx_work+0x2c9/0x1020 [ 789.564301][ T5950] process_one_work+0x9ba/0x1b20 [ 789.564330][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 789.564362][ T5950] ? assign_work+0x1a0/0x250 [ 789.564400][ T5950] worker_thread+0x6c8/0xf10 [ 789.564437][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 789.564460][ T5950] kthread+0x3c5/0x780 [ 789.564481][ T5950] ? __pfx_kthread+0x10/0x10 [ 789.564505][ T5950] ? rcu_is_watching+0x12/0xc0 [ 789.564523][ T5950] ? __pfx_kthread+0x10/0x10 [ 789.564546][ T5950] ret_from_fork+0x983/0xb10 [ 789.564568][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 789.564590][ T5950] ? __switch_to+0x7af/0x10d0 [ 789.564615][ T5950] ? __pfx_kthread+0x10/0x10 [ 789.564638][ T5950] ret_from_fork_asm+0x1a/0x30 [ 789.564712][ T5950] [ 789.683595][ T5950] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 789.689741][ T5950] Bluetooth: hci5: failed to register connection device [ 789.705369][ T46] Bluetooth: Error in BCSP hdr checksum [ 789.819036][ T40] audit: type=1400 audit(1768935412.225:2351): avc: denied { listen } for pid=22218 comm="syz.0.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 789.828070][ T40] audit: type=1400 audit(1768935412.225:2352): avc: denied { accept } for pid=22218 comm="syz.0.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 789.887840][ T40] audit: type=1400 audit(1768935412.295:2353): avc: denied { setopt } for pid=22218 comm="syz.0.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 789.942113][T22223] 9pnet_fd: Insufficient options for proto=fd [ 789.965061][ T8676] Bluetooth: Error in BCSP hdr checksum [ 790.048078][T22227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 790.056891][T22227] No source specified [ 790.226620][ T1183] Bluetooth: Error in BCSP hdr checksum [ 790.276200][ T40] audit: type=1400 audit(1768935412.685:2354): avc: denied { map } for pid=22235 comm="syz.4.5317" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 790.289760][T22236] Cannot find add_set index 65532 as target [ 790.293723][ T5949] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 790.326058][ T40] audit: type=1400 audit(1768935412.735:2355): avc: denied { ioctl } for pid=22237 comm="syz.4.5318" path="socket:[85662]" dev="sockfs" ino=85662 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 790.487129][ T1147] Bluetooth: Error in BCSP hdr checksum [ 790.493321][ T40] audit: type=1400 audit(1768935412.895:2356): avc: denied { read } for pid=22246 comm="syz.2.5320" path="socket:[87341]" dev="sockfs" ino=87341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 790.502854][ T40] audit: type=1400 audit(1768935412.905:2357): avc: denied { setopt } for pid=22246 comm="syz.2.5320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 790.604936][T22252] team0 (unregistering): Port device batadv1 removed [ 790.613817][T22252] team0 (unregistering): Port device batadv2 removed [ 790.621616][T22252] team0 (unregistering): Port device batadv3 removed [ 790.632470][T22252] team0 (unregistering): Port device batadv4 removed [ 790.747890][ T60] Bluetooth: Error in BCSP hdr checksum [ 790.782298][T22258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5323'. [ 790.885672][T22262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.009209][ T1147] Bluetooth: Error in BCSP hdr checksum [ 791.059089][T22267] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5325'. [ 791.063959][T22267] block nbd0: not configured, cannot reconfigure [ 791.266228][ T1147] Bluetooth: Error in BCSP hdr checksum [ 791.274513][T22271] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 791.280141][T22271] team0: Port device batadv3 added [ 791.333071][ T5950] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 791.525149][ T46] Bluetooth: Error in BCSP hdr checksum [ 791.796757][ T1147] Bluetooth: Error in BCSP hdr checksum [ 792.055256][ T46] Bluetooth: Error in BCSP hdr checksum [ 792.325456][ T1147] Bluetooth: Error in BCSP hdr checksum [ 792.489825][T22307] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5341'. [ 792.515405][ T40] audit: type=1400 audit(1768935414.925:2358): avc: denied { bind } for pid=22306 comm="syz.4.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 792.516620][T22307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5341'. [ 792.585809][ T1183] Bluetooth: Error in BCSP hdr checksum [ 792.590917][T22310] overlayfs: upper fs does not support file handles, falling back to index=off. [ 792.643398][T22303] ip6gre3: entered promiscuous mode [ 792.646319][T22303] ip6gre3: entered allmulticast mode [ 792.824898][ T5949] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 792.825274][ T5950] Bluetooth: hci1: command 0x1003 tx timeout [ 792.832740][T22326] comedi: valid board names for 8255 driver are: [ 792.840307][T22326] 8255 [ 792.859095][ T1147] Bluetooth: Error in BCSP hdr checksum [ 792.862286][T22326] comedi: valid board names for vmk80xx driver are: [ 792.865930][T22326] vmk80xx [ 792.867741][T22326] comedi: valid board names for usbduxsigma driver are: [ 792.871418][T22326] usbduxsigma [ 792.872988][T22326] comedi: valid board names for usbduxfast driver are: [ 792.876604][T22326] usbduxfast [ 792.878061][T22326] comedi: valid board names for usbdux driver are: [ 792.881538][T22326] usbdux [ 792.884826][T22326] comedi: valid board names for ni6501 driver are: [ 792.888690][T22326] ni6501 [ 792.894644][T22326] comedi: valid board names for dt9812 driver are: [ 792.898425][T22326] dt9812 [ 792.900260][T22326] comedi: valid board names for ni_labpc_cs driver are: [ 792.904593][T22326] ni_labpc_cs [ 792.907575][T22326] comedi: valid board names for ni_daq_700 driver are: [ 792.911720][T22326] ni_daq_700 [ 792.913256][T22326] comedi: valid board names for labpc_pci driver are: [ 792.916343][T22326] labpc_pci [ 792.918145][T22326] comedi: valid board names for adl_pci9118 driver are: [ 792.921549][T22326] pci9118dg [ 792.923214][T22326] pci9118hg [ 792.925458][T22326] pci9118hr [ 792.928072][T22326] comedi: valid board names for 8255_pci driver are: [ 792.930357][T22326] 8255_pci [ 792.931482][T22326] comedi: valid board names for s526 driver are: [ 792.933720][T22326] s526 [ 792.934792][T22326] comedi: valid board names for multiq3 driver are: [ 792.937357][T22326] multiq3 [ 792.939052][T22326] comedi: valid board names for pcmuio driver are: [ 792.942224][T22326] pcmuio48 [ 792.943774][T22326] pcmuio96 [ 792.945361][T22326] comedi: valid board names for pcmmio driver are: [ 792.948240][T22326] pcmmio [ 792.949533][T22326] comedi: valid board names for pcmda12 driver are: [ 792.952393][T22326] pcmda12 [ 792.953812][T22326] comedi: valid board names for pcmad driver are: [ 792.956806][T22326] pcmad12 [ 792.958345][T22326] pcmad16 [ 792.959931][T22326] comedi: valid board names for ni_labpc driver are: [ 792.963522][T22326] lab-pc-1200 [ 792.965534][T22326] lab-pc-1200ai [ 792.967155][T22326] lab-pc+ [ 792.968489][T22326] comedi: valid board names for atmio16 driver are: [ 792.971376][T22326] atmio16 [ 792.972756][T22326] atmio16d [ 792.974392][T22326] comedi: valid board names for ni_at_ao driver are: [ 792.977567][T22326] at-ao-6 [ 792.979073][T22326] at-ao-10 [ 792.980571][T22326] comedi: valid board names for ni_at_a2150 driver are: [ 792.983932][T22326] ni_at_a2150 [ 792.986620][T22326] comedi: valid board names for adq12b driver are: [ 792.989707][T22326] adq12b [ 792.991046][T22326] comedi: valid board names for mpc624 driver are: [ 792.993877][T22326] mpc624 [ 792.995470][T22326] comedi: valid board names for c6xdigio driver are: [ 792.998610][T22326] c6xdigio [ 793.000230][T22326] comedi: valid board names for aio_iiro_16 driver are: [ 793.003419][T22326] aio_iiro_16 [ 793.005060][T22326] comedi: valid board names for aio_aio12_8 driver are: [ 793.007997][T22326] aio_aio12_8 [ 793.009464][T22326] aio_ai12_8 [ 793.010568][T22338] netlink: 'syz.4.5349': attribute type 10 has an invalid length. [ 793.010609][T22326] aio_ao12_4 [ 793.018682][T22326] comedi: valid board names for fl512 driver are: [ 793.019158][T22338] team0: Device veth1_vlan failed to register rx_handler [ 793.021766][T22326] fl512 [ 793.021785][T22326] comedi: valid board names for dmm32at driver are: [ 793.021797][T22326] dmm32at [ 793.021806][T22326] comedi: valid board names for dt282x driver are: [ 793.021816][T22326] dt2821 [ 793.021823][T22326] dt2821-f [ 793.021830][T22326] dt2821-g [ 793.021837][T22326] dt2823 [ 793.021845][T22326] dt2824-pgh [ 793.021852][T22326] dt2824-pgl [ 793.021860][T22326] dt2825 [ 793.021867][T22326] dt2827 [ 793.021874][T22326] dt2828 [ 793.021880][T22326] dt2829 [ 793.021887][T22326] dt21-ez [ 793.021893][T22326] dt23-ez [ 793.021901][T22326] dt24-ez [ 793.021908][T22326] dt24-ez-pgl [ 793.052182][T22326] comedi: valid board names for dt2817 driver are: [ 793.055492][T22326] dt2817 [ 793.056971][T22326] comedi: valid board names for dt2815 driver are: [ 793.059912][T22326] dt2815 [ 793.061178][T22326] comedi: valid board names for dt2814 driver are: [ 793.063883][T22326] dt2814 [ 793.065346][T22326] comedi: valid board names for dt2811 driver are: [ 793.068264][T22326] dt2811-pgh [ 793.069736][T22326] dt2811-pgl [ 793.071167][T22326] comedi: valid board names for dt2801 driver are: [ 793.073952][T22326] dt2801 [ 793.075496][T22326] comedi: valid board names for das6402 driver are: [ 793.078828][T22326] das6402-12 [ 793.080349][T22326] das6402-16 [ 793.081791][T22326] comedi: valid board names for das1800 driver are: [ 793.083873][T22326] das-1701st [ 793.085011][T22326] das-1701st-da [ 793.086177][T22326] das-1702st [ 793.087471][T22326] das-1702st-da [ 793.089046][T22326] das-1702hr [ 793.090543][T22326] das-1702hr-da [ 793.091748][T22326] das-1701ao [ 793.092949][T22326] das-1702ao [ 793.094495][T22326] das-1801st [ 793.096155][T22326] das-1801st-da [ 793.097575][T22326] das-1802st [ 793.098826][T22326] das-1802st-da [ 793.100362][T22326] das-1802hr [ 793.101630][T22326] das-1802hr-da [ 793.102854][T22326] das-1801hc [ 793.104124][T22326] das-1802hc [ 793.105467][ T1147] Bluetooth: Error in BCSP hdr checksum [ 793.107627][T22326] das-1801ao [ 793.108803][T22326] das-1802ao [ 793.110195][T22326] comedi: valid board names for das800 driver are: [ 793.112641][T22326] das-800 [ 793.113659][T22326] cio-das800 [ 793.114822][T22326] das-801 [ 793.115867][T22326] cio-das801 [ 793.117241][T22326] das-802 [ 793.118382][T22326] cio-das802 [ 793.119814][T22326] cio-das802/16 [ 793.121134][T22326] comedi: valid board names for isa-das08 driver are: [ 793.123833][T22326] isa-das08 [ 793.125374][T22326] das08-pgm [ 793.126613][T22326] das08-pgh [ 793.127739][T22326] das08-pgl [ 793.128996][T22326] das08-aoh [ 793.130127][T22326] das08-aol [ 793.131174][T22326] das08-aom [ 793.132515][T22326] das08/jr-ao [ 793.133820][T22326] das08jr-16-ao [ 793.135296][T22326] pc104-das08 [ 793.136639][T22326] das08jr/16 [ 793.138316][T22326] comedi: valid board names for das16m1 driver are: [ 793.140839][T22326] das16m1 [ 793.142202][T22326] comedi: valid board names for dac02 driver are: [ 793.144865][T22326] dac02 [ 793.146032][T22326] comedi: valid board names for rti802 driver are: [ 793.148260][T22326] rti802 [ 793.149255][T22326] comedi: valid board names for rti800 driver are: [ 793.151410][T22326] rti800 [ 793.152492][T22326] rti815 [ 793.153902][T22326] comedi: valid board names for pcm3724 driver are: [ 793.157862][T22326] pcm3724 [ 793.159487][T22326] comedi: valid board names for pcl818 driver are: [ 793.162232][T22326] pcl818l [ 793.163475][T22326] pcl818h [ 793.164529][T22326] pcl818hd [ 793.166010][T22326] pcl818hg [ 793.167469][T22326] pcl818 [ 793.168710][T22326] pcl718 [ 793.170126][T22326] pcm3718 [ 793.171542][T22326] comedi: valid board names for pcl816 driver are: [ 793.174237][T22326] pcl816 [ 793.175675][T22326] pcl814b [ 793.177006][T22326] comedi: valid board names for pcl812 driver are: [ 793.179944][T22326] pcl812 [ 793.181770][T22326] pcl812pg [ 793.183782][T22326] acl8112pg [ 793.185611][T22326] acl8112dg [ 793.187120][T22326] acl8112hg [ 793.188535][T22326] a821pgl [ 793.190029][T22326] a821pglnda [ 793.191516][T22326] a821pgh [ 793.192852][T22326] a822pgl [ 793.194226][T22326] a822pgh [ 793.195688][T22326] a823pgl [ 793.196980][T22326] a823pgh [ 793.198317][T22326] pcl813 [ 793.201076][T22326] pcl813b [ 793.202413][T22326] acl8113 [ 793.203590][T22326] iso813 [ 793.205128][T22326] acl8216 [ 793.206881][T22326] a826pg [ 793.208491][T22326] comedi: valid board names for pcl730 driver are: [ 793.212372][T22326] pcl730 [ 793.213726][T22326] iso730 [ 793.215052][T22326] acl7130 [ 793.216451][T22326] pcm3730 [ 793.217852][T22326] pcl725 [ 793.219317][T22326] p8r8dio [ 793.220712][T22326] acl7225b [ 793.222024][T22326] p16r16dio [ 793.223545][T22326] pcl733 [ 793.225104][T22326] pcl734 [ 793.226463][T22326] opmm-1616-xt [ 793.228016][T22326] pearl-mm-p [ 793.229518][T22326] ir104-pbf [ 793.230987][T22326] comedi: valid board names for pcl726 driver are: [ 793.233859][T22326] pcl726 [ 793.235419][T22326] pcl727 [ 793.236675][T22326] pcl728 [ 793.238070][T22326] acl6126 [ 793.239822][T22326] acl6128 [ 793.241670][T22326] comedi: valid board names for pcl724 driver are: [ 793.245676][T22326] pcl724 [ 793.247168][T22326] pcl722 [ 793.248481][T22326] pcl731 [ 793.249825][T22326] acl7122 [ 793.251219][T22326] acl7124 [ 793.252449][T22326] pet48dio [ 793.253723][T22326] pcmio48 [ 793.255220][T22326] onyx-mm-dio [ 793.256469][T22326] comedi: valid board names for pcl711 driver are: [ 793.258909][T22326] pcl711 [ 793.260188][T22326] pcl711b [ 793.261388][T22326] acl8112hg [ 793.263295][T22326] acl8112dg [ 793.264889][T22326] comedi: valid board names for amplc_pc263 driver are: [ 793.267632][T22326] pc263 [ 793.268948][T22326] comedi: valid board names for amplc_pc236 driver are: [ 793.272088][T22326] pc36at [ 793.273492][T22326] comedi: valid board names for amplc_dio200 driver are: [ 793.277056][T22326] pc212e [ 793.278540][T22326] pc214e [ 793.280148][T22326] pc215e [ 793.281831][T22326] pc218e [ 793.283200][T22326] pc272e [ 793.284935][T22326] comedi: valid board names for comedi_parport driver are: [ 793.288397][T22326] comedi_parport [ 793.290055][T22326] comedi: valid board names for comedi_test driver are: [ 793.292249][T22341] input: syz1 as /devices/virtual/input/input75 [ 793.293171][T22326] comedi_test [ 793.297624][T22326] comedi: valid board names for comedi_bond driver are: [ 793.300484][T22326] comedi_bond [ 793.365214][ T60] Bluetooth: Error in BCSP hdr checksum [ 793.370409][T22343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.380234][T22343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.470895][T22351] 9p: Unknown Cache mode or invalid value fscYche [ 793.532540][T22355] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5357'. [ 793.594120][T22359] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 793.599881][T22359] team0: Port device batadv1 added [ 793.625685][ T60] Bluetooth: Error in BCSP hdr checksum [ 793.885624][ T46] Bluetooth: Error in BCSP hdr checksum [ 793.994912][T22372] IPVS: persistence engine module ip_vs_pe_s not found [ 794.145176][ T46] Bluetooth: Error in BCSP hdr checksum [ 794.380164][T22389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=22389 comm=syz.2.5368 [ 794.415231][ T8676] Bluetooth: Error in BCSP hdr checksum [ 794.438372][T22388] netlink: 'syz.2.5368': attribute type 1 has an invalid length. [ 794.675207][ T46] Bluetooth: Error in BCSP hdr checksum [ 794.755361][ T40] audit: type=1400 audit(1768935417.165:2359): avc: denied { ioctl } for pid=22402 comm="syz.4.5373" path="socket:[86741]" dev="sockfs" ino=86741 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 794.803602][ T40] audit: type=1400 audit(1768935417.205:2360): avc: denied { setattr } for pid=19703 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 794.808829][T22403] tipc: Can't bind to reserved service type 2 [ 794.821319][T22403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5373'. [ 794.858859][T22403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5373'. [ 794.935914][ T8676] Bluetooth: Error in BCSP hdr checksum [ 794.983054][T22406] netlink: 'syz.0.5375': attribute type 5 has an invalid length. [ 794.986526][T22402] block nbd4: shutting down sockets [ 795.198053][ T8676] Bluetooth: Error in BCSP hdr checksum [ 795.208120][T22414] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 795.235371][ T1147] Bluetooth: Error in BCSP hdr checksum [ 795.417677][T22425] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 795.419405][T22425] team0: Port device batadv4 added [ 795.461173][ T46] Bluetooth: Error in BCSP hdr checksum [ 795.467708][ T40] audit: type=1400 audit(1768935417.875:2361): avc: denied { read } for pid=22428 comm="syz.1.5383" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 795.467961][ T40] audit: type=1400 audit(1768935417.875:2362): avc: denied { open } for pid=22428 comm="syz.1.5383" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 795.488287][ T40] audit: type=1400 audit(1768935417.885:2363): avc: denied { ioctl } for pid=22428 comm="syz.1.5383" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 795.514002][ T40] audit: type=1400 audit(1768935417.885:2364): avc: denied { map } for pid=22428 comm="syz.1.5383" path="/proc/994/net/ptype" dev="proc" ino=4026533833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 795.514048][ T40] audit: type=1400 audit(1768935417.885:2365): avc: denied { map } for pid=22428 comm="syz.1.5383" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 795.642184][ T40] audit: type=1326 audit(1768935418.045:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22430 comm="syz.1.5384" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f134958f7c9 code=0x0 [ 795.715023][ T8676] Bluetooth: Error in BCSP hdr checksum [ 795.975513][ T8676] Bluetooth: Error in BCSP hdr checksum [ 796.235243][ T60] Bluetooth: Error in BCSP hdr checksum [ 796.434915][ T6022] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 796.505428][ T60] Bluetooth: Error in BCSP hdr checksum [ 796.594772][ T6022] usb 5-1: Using ep0 maxpacket: 16 [ 796.599565][ T6022] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 796.603711][ T6022] usb 5-1: config 0 has no interface number 0 [ 796.608685][ T6022] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 796.612716][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.616561][ T6022] usb 5-1: Product: syz [ 796.618365][ T6022] usb 5-1: Manufacturer: syz [ 796.620275][ T6022] usb 5-1: SerialNumber: syz [ 796.623579][ T6022] usb 5-1: config 0 descriptor?? [ 796.631085][ T6022] hub 5-1:0.132: bad descriptor, ignoring hub [ 796.633607][ T6022] hub 5-1:0.132: probe with driver hub failed with error -5 [ 796.641231][ T6022] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input76 [ 796.706197][T22444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5388'. [ 796.710028][T22444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5388'. [ 796.727889][ T40] audit: type=1400 audit(1768935419.135:2367): avc: denied { connect } for pid=22443 comm="syz.1.5388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 796.775125][ T1183] Bluetooth: Error in BCSP hdr checksum [ 796.985711][ T5949] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 797.036733][ T6847] Bluetooth: Error in BCSP hdr checksum [ 797.057569][ T6420] usb 5-1: USB disconnect, device number 56 [ 797.115764][T22450] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 797.119396][T22450] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 797.133300][T22450] loop6: detected capacity change from 0 to 2640 [ 797.141280][T22450] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.144915][T22450] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.150044][T22450] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.152872][T22450] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.156028][T22450] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.158962][T22450] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.162111][T22450] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.165582][T22450] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.168756][T22450] ldm_validate_partition_table(): Disk read failed. [ 797.171519][T22450] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.175491][T22450] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.178957][T22450] Dev loop6: unable to read RDB block 0 [ 797.181759][T22450] loop6: unable to read partition table [ 797.184967][T22450] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 797.240135][ T5347] ldm_validate_partition_table(): Disk read failed. [ 797.243261][ T5347] Dev loop6: unable to read RDB block 0 [ 797.247132][ T5347] loop6: unable to read partition table [ 797.306412][ T8676] Bluetooth: Error in BCSP hdr checksum [ 797.314375][T22453] fuse: Unknown parameter '000000000000000000060x0000000000000006' [ 797.483960][T22455] netlink: 'syz.4.5393': attribute type 39 has an invalid length. [ 797.530904][T22458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.536596][T22458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.542403][T22458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5394'. [ 797.565569][ T1183] Bluetooth: Error in BCSP hdr checksum [ 797.592877][T22458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5394'. [ 797.703918][T22465] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5397'. [ 797.707553][T22465] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 797.710765][T22465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5397'. [ 797.759562][T22470] tmpfs: Unknown parameter '00000000000000000000' [ 797.825013][ T8676] Bluetooth: Error in BCSP hdr checksum [ 797.884562][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 797.884582][ T40] audit: type=1400 audit(1768935420.285:2371): avc: denied { create } for pid=22472 comm="syz.4.5400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 797.937975][ T40] audit: type=1400 audit(1768935420.345:2372): avc: denied { ioctl } for pid=22476 comm="syz.4.5401" path="socket:[86869]" dev="sockfs" ino=86869 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 797.998670][T22479] netlink: 'syz.4.5403': attribute type 3 has an invalid length. [ 798.086444][ T8676] Bluetooth: Error in BCSP hdr checksum [ 798.289884][T22490] geneve2: entered promiscuous mode [ 798.292741][T22490] geneve2: entered allmulticast mode [ 798.345215][ T8676] Bluetooth: Error in BCSP hdr checksum [ 798.558455][T22496] SELinux: failed to load policy [ 798.615287][ T8676] Bluetooth: Error in BCSP hdr checksum [ 798.747105][T22498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.750279][T22498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.764328][ T40] audit: type=1400 audit(1768935421.165:2373): avc: denied { view } for pid=22497 comm="syz.1.5408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 798.778604][T22498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.783442][T22498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.885029][ T75] Bluetooth: Error in BCSP hdr checksum [ 798.903984][T22500] exFAT-fs (nullb0): invalid boot record signature [ 798.909435][T22500] exFAT-fs (nullb0): failed to read boot sector [ 798.912115][T22500] exFAT-fs (nullb0): failed to recognize exfat type [ 799.159286][ T1147] Bluetooth: Error in BCSP hdr checksum [ 799.325186][ T985] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 799.520830][ T985] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 799.526244][ T985] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 799.530897][ T60] Bluetooth: Error in BCSP hdr checksum [ 799.533537][ T985] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 799.540622][ T985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.555952][T22508] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 799.561724][ T985] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 799.785228][ T6847] Bluetooth: Error in BCSP hdr checksum [ 799.848464][ T985] usb 9-1: USB disconnect, device number 72 [ 800.007002][T22517] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5415'. [ 800.045414][ T6847] Bluetooth: Error in BCSP hdr checksum [ 800.317797][ T6847] Bluetooth: Error in BCSP hdr checksum [ 800.479173][T22530] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 800.575724][ T60] Bluetooth: Error in BCSP hdr checksum [ 800.825331][ T985] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 800.837064][ T1183] Bluetooth: Error in BCSP hdr checksum [ 800.838169][T22535] syzkaller0: entered promiscuous mode [ 800.842181][T22535] syzkaller0: entered allmulticast mode [ 800.987932][ T985] usb 9-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 800.992684][ T985] usb 9-1: config 0 interface 0 has no altsetting 0 [ 800.999158][ T985] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 801.003475][ T985] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 801.007991][ T985] usb 9-1: Product: syz [ 801.010323][ T985] usb 9-1: Manufacturer: syz [ 801.012760][ T985] usb 9-1: SerialNumber: syz [ 801.027169][ T985] usb 9-1: config 0 descriptor?? [ 801.035660][T22533] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 801.042775][ T985] usb 9-1: selecting invalid altsetting 0 [ 801.095074][ T1147] Bluetooth: Error in BCSP hdr checksum [ 801.250401][T22533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.253691][T22533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.258624][ T7357] usb 9-1: USB disconnect, device number 73 [ 801.355553][ T1183] Bluetooth: Error in BCSP hdr checksum [ 801.393551][T22537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22537 comm=syz.1.5422 [ 801.625183][ T1183] Bluetooth: Error in BCSP hdr checksum [ 801.885754][ T1183] Bluetooth: Error in BCSP hdr checksum [ 802.141550][ T60] Bluetooth: Error in BCSP hdr checksum [ 802.395516][ T75] Bluetooth: Error in BCSP hdr checksum [ 802.657938][ T60] Bluetooth: Error in BCSP hdr checksum [ 802.925819][ T46] Bluetooth: Error in BCSP hdr checksum [ 803.196112][ T75] Bluetooth: Error in BCSP hdr checksum [ 803.465282][ T75] Bluetooth: Error in BCSP hdr checksum [ 803.479294][ T5950] Bluetooth: hci1: command 0x1003 tx timeout [ 803.479330][ T5949] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 803.728480][ T1183] Bluetooth: Error in BCSP hdr checksum [ 803.910720][T22539] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 803.916507][T22539] team0: Port device batadv4 added [ 803.985735][ T8676] Bluetooth: Error in BCSP hdr checksum [ 804.258420][ T1183] Bluetooth: Error in BCSP hdr checksum [ 804.515612][ T1183] Bluetooth: Error in BCSP hdr checksum [ 804.775220][ T6847] Bluetooth: Error in BCSP hdr checksum [ 804.900259][T22568] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 804.905262][T22568] team0: Port device batadv5 added [ 805.035121][ T1183] Bluetooth: Error in BCSP hdr checksum [ 805.258475][T22584] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 805.280059][T22589] input: syz1 as /devices/virtual/input/input78 [ 805.305502][ T6847] Bluetooth: Error in BCSP hdr checksum [ 805.572892][ T6847] Bluetooth: Error in BCSP hdr checksum [ 805.797730][ T40] audit: type=1400 audit(1768935428.195:2374): avc: denied { write } for pid=22605 comm="syz.4.5447" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 805.826956][ T1183] Bluetooth: Error in BCSP hdr checksum [ 806.086418][ T1183] Bluetooth: Error in BCSP hdr checksum [ 806.282157][ T40] audit: type=1400 audit(1768935428.685:2375): avc: denied { connect } for pid=22612 comm="syz.4.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 806.347681][ T1183] Bluetooth: Error in BCSP hdr checksum [ 806.391078][T22618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 806.399303][ T40] audit: type=1400 audit(1768935428.805:2376): avc: denied { connect } for pid=22619 comm="syz.4.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 806.410330][T22620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5452'. [ 806.410354][T22620] openvswitch: netlink: Flow actions attr not present in new flow. [ 806.429940][T22618] team0: No ports can be present during mode change [ 806.615046][ T1183] Bluetooth: Error in BCSP hdr checksum [ 806.619763][ T5949] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 806.742577][ T5949] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 806.875219][ T1147] Bluetooth: Error in BCSP hdr checksum [ 806.899278][T22644] netlink: 'syz.4.5458': attribute type 21 has an invalid length. [ 806.916409][T22644] netlink: 'syz.4.5458': attribute type 6 has an invalid length. [ 806.925618][T22644] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5458'. [ 807.137468][ T1183] Bluetooth: Error in BCSP hdr checksum [ 807.395592][ T8676] Bluetooth: Error in BCSP hdr checksum [ 807.655336][ T6847] Bluetooth: Error in BCSP hdr checksum [ 807.909915][T22676] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 807.916231][ T6847] Bluetooth: Error in BCSP hdr checksum [ 807.936630][T22676] FAULT_INJECTION: forcing a failure. [ 807.936630][T22676] name failslab, interval 1, probability 0, space 0, times 0 [ 807.942484][T22676] CPU: 1 UID: 0 PID: 22676 Comm: syz.4.5465 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.942504][T22676] Tainted: [L]=SOFTLOCKUP [ 807.942508][T22676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 807.942515][T22676] Call Trace: [ 807.942520][T22676] [ 807.942525][T22676] dump_stack_lvl+0x16c/0x1f0 [ 807.942563][T22676] should_fail_ex+0x512/0x640 [ 807.942578][T22676] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 807.942591][T22676] should_failslab+0xc2/0x120 [ 807.942607][T22676] kmem_cache_alloc_noprof+0x83/0x770 [ 807.942620][T22676] ? skb_clone+0x190/0x3f0 [ 807.942635][T22676] ? skb_clone+0x190/0x3f0 [ 807.942646][T22676] skb_clone+0x190/0x3f0 [ 807.942659][T22676] netlink_deliver_tap+0xabd/0xd30 [ 807.942676][T22676] netlink_unicast+0x64c/0x870 [ 807.942694][T22676] ? __pfx_netlink_unicast+0x10/0x10 [ 807.942714][T22676] netlink_sendmsg+0x8c8/0xdd0 [ 807.942730][T22676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.942749][T22676] ____sys_sendmsg+0xa5d/0xc30 [ 807.942766][T22676] ? copy_msghdr_from_user+0x10a/0x160 [ 807.942779][T22676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.942800][T22676] ___sys_sendmsg+0x134/0x1d0 [ 807.942813][T22676] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.942842][T22676] __sys_sendmsg+0x16d/0x220 [ 807.942854][T22676] ? __pfx___sys_sendmsg+0x10/0x10 [ 807.942875][T22676] do_syscall_64+0xcd/0xf80 [ 807.942892][T22676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.942905][T22676] RIP: 0033:0x7fb7e7b8f7c9 [ 807.942915][T22676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.942925][T22676] RSP: 002b:00007fb7e89fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.942935][T22676] RAX: ffffffffffffffda RBX: 00007fb7e7de6090 RCX: 00007fb7e7b8f7c9 [ 807.942942][T22676] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000007 [ 807.942949][T22676] RBP: 00007fb7e89fc090 R08: 0000000000000000 R09: 0000000000000000 [ 807.942955][T22676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.942961][T22676] R13: 00007fb7e7de6128 R14: 00007fb7e7de6090 R15: 00007ffc50986c38 [ 807.942975][T22676] [ 807.943029][T22676] team0: No ports can be present during mode change [ 807.944575][ T40] audit: type=1400 audit(1768935430.345:2377): avc: denied { unmount } for pid=18314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 808.176150][ T8676] Bluetooth: Error in BCSP hdr checksum [ 808.214071][ T5949] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 808.249170][T22686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 808.274570][T22686] team0: No ports can be present during mode change [ 808.339047][ T5949] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 808.435862][ T1147] Bluetooth: Error in BCSP hdr checksum [ 808.491808][T22692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5472'. [ 808.669644][T22697] netlink: 'syz.0.5474': attribute type 21 has an invalid length. [ 808.695622][ T1147] Bluetooth: Error in BCSP hdr checksum [ 808.955345][ T1147] Bluetooth: Error in BCSP hdr checksum [ 809.054350][T22715] team0: No ports can be present during mode change [ 809.318830][ T13] Bluetooth: Error in BCSP hdr checksum [ 809.475898][ T3962] Bluetooth: Error in BCSP hdr checksum [ 809.605238][T22728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5483'. [ 809.609199][T22728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5483'. [ 809.648664][T22733] netlink: 'syz.1.5484': attribute type 9 has an invalid length. [ 809.759934][ T46] Bluetooth: Error in BCSP hdr checksum [ 809.841658][T22735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 809.851749][T22735] FAULT_INJECTION: forcing a failure. [ 809.851749][T22735] name failslab, interval 1, probability 0, space 0, times 0 [ 809.858849][T22735] CPU: 1 UID: 0 PID: 22735 Comm: syz.1.5485 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.858875][T22735] Tainted: [L]=SOFTLOCKUP [ 809.858880][T22735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 809.858890][T22735] Call Trace: [ 809.858896][T22735] [ 809.858903][T22735] dump_stack_lvl+0x16c/0x1f0 [ 809.858930][T22735] should_fail_ex+0x512/0x640 [ 809.858946][T22735] ? __kmalloc_noprof+0xca/0x910 [ 809.858964][T22735] should_failslab+0xc2/0x120 [ 809.858987][T22735] __kmalloc_noprof+0xeb/0x910 [ 809.859002][T22735] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 809.859041][T22735] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 809.859083][T22735] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 809.859111][T22735] ? cred_has_capability.isra.0+0x18f/0x310 [ 809.859138][T22735] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 809.859165][T22735] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 809.859200][T22735] ? bpf_lsm_capable+0x9/0x10 [ 809.859220][T22735] ? security_capable+0x7e/0x260 [ 809.859245][T22735] genl_rcv_msg+0x55c/0x800 [ 809.859275][T22735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 809.859300][T22735] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 809.859330][T22735] netlink_rcv_skb+0x158/0x420 [ 809.859353][T22735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 809.859380][T22735] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 809.859414][T22735] ? netlink_deliver_tap+0x1ae/0xd30 [ 809.859453][T22735] genl_rcv+0x28/0x40 [ 809.859491][T22735] netlink_unicast+0x5aa/0x870 [ 809.859518][T22735] ? __pfx_netlink_unicast+0x10/0x10 [ 809.859551][T22735] netlink_sendmsg+0x8c8/0xdd0 [ 809.859578][T22735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.859611][T22735] ____sys_sendmsg+0xa5d/0xc30 [ 809.859637][T22735] ? copy_msghdr_from_user+0x10a/0x160 [ 809.859657][T22735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.859693][T22735] ___sys_sendmsg+0x134/0x1d0 [ 809.859714][T22735] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.859768][T22735] __sys_sendmsg+0x16d/0x220 [ 809.859787][T22735] ? __pfx___sys_sendmsg+0x10/0x10 [ 809.859818][T22735] ? fput+0x70/0xf0 [ 809.859839][T22735] do_syscall_64+0xcd/0xf80 [ 809.859864][T22735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.859881][T22735] RIP: 0033:0x7f134958f7c9 [ 809.859895][T22735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.859911][T22735] RSP: 002b:00007f134a4a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.859929][T22735] RAX: ffffffffffffffda RBX: 00007f13497e5fa0 RCX: 00007f134958f7c9 [ 809.859940][T22735] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000007 [ 809.859950][T22735] RBP: 00007f134a4a8090 R08: 0000000000000000 R09: 0000000000000000 [ 809.859959][T22735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.859968][T22735] R13: 00007f13497e6038 R14: 00007f13497e5fa0 R15: 00007ffd0a541b08 [ 809.859995][T22735] [ 809.979288][ C1] hpet: Lost 6 RTC interrupts [ 810.022315][T14069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 810.036480][T14069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 810.046428][T14069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 810.055799][T14069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 810.059418][T14069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 810.123005][T22743] hsr0 speed is unknown, defaulting to 1000 [ 810.127466][T22743] lo speed is unknown, defaulting to 1000 [ 810.220541][T22751] fuse: Bad value for 'user_id' [ 810.222446][T22749] binder_alloc: 22748: pid 22748 spamming oneway? 1 buffers allocated for a total size of 4096 [ 810.222961][T22751] fuse: Bad value for 'user_id' [ 810.226752][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5490'. [ 810.228364][T22749] binder_alloc: 22748: binder_alloc_buf size -200 failed, no address space [ 810.238429][T22749] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168) [ 810.244483][T22749] netlink: 'syz.4.5491': attribute type 10 has an invalid length. [ 810.262071][T22749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.269890][T22749] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 810.342181][T22756] binder: 22755:22756 ioctl f507 0 returned -22 [ 810.345966][ T5950] Bluetooth: hci3: command 0x2016 tx timeout [ 810.346628][T22756] netlink: 'syz.4.5493': attribute type 10 has an invalid length. [ 810.349439][ T5950] ------------[ cut here ]------------ [ 810.356744][ T5950] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x16f/0x230, CPU#2: kworker/u33:8/5950 [ 810.358574][T22756] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5493'. [ 810.365447][ T5950] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 810.368368][ T40] audit: type=1400 audit(1768935432.775:2378): avc: denied { write } for pid=5859 comm="syz-executor" path="pipe:[6308]" dev="pipefs" ino=6308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 810.369912][T22756] team0: entered promiscuous mode [ 810.370916][ T5950] [ 810.381471][T22756] batadv1: entered promiscuous mode [ 810.384122][ T5950] CPU: 2 UID: 0 PID: 5950 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.385416][T22756] batadv2: entered promiscuous mode [ 810.387233][ T5950] Tainted: [L]=SOFTLOCKUP [ 810.387244][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 810.391767][T22756] batadv3: entered promiscuous mode [ 810.393813][ T5950] Workqueue: hci3 hci_conn_timeout [ 810.393856][ T5950] RIP: 0010:hci_conn_timeout+0x16f/0x230 [ 810.393886][ T5950] Code: 41 83 e5 40 44 89 ee e8 ff 1b 4f f7 45 84 ed 0f 84 07 ff ff ff e8 b1 21 4f f7 e8 3c 7d fd 00 e9 f8 fe ff ff e8 a2 21 4f f7 90 <0f> 0b 90 e8 99 21 4f f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 810.393904][ T5950] RSP: 0018:ffffc9000352fbb0 EFLAGS: 00010293 [ 810.393922][ T5950] RAX: 0000000000000000 RBX: ffff88803fc6ca40 RCX: ffffffff8a6fdcef [ 810.393963][ T5950] RDX: ffff8880299bc980 RSI: ffffffff8a6fddee RDI: 0000000000000005 [ 810.393977][ T5950] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 810.393990][ T5950] R10: 00000000ffffffff R11: 0000000000002ba1 R12: ffff88803fc6c000 [ 810.394005][ T5950] R13: 0000000000000000 R14: ffffc9000352fc90 R15: ffff888103739400 [ 810.394020][ T5950] FS: 0000000000000000(0000) GS:ffff8880d6af1000(0000) knlGS:0000000000000000 [ 810.401860][T22756] batadv4: entered promiscuous mode [ 810.402851][ T5950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.405146][T22756] batadv5: entered promiscuous mode [ 810.408173][ T5950] CR2: 00007f134a4a7f98 CR3: 000000000e184000 CR4: 0000000000352ef0 [ 810.408197][ T5950] Call Trace: [ 810.408207][ T5950] [ 810.408218][ T5950] process_one_work+0x9ba/0x1b20 [ 810.408257][ T5950] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 810.411412][T22756] bridge0: port 1(team0) entered blocking state [ 810.419206][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 810.422206][T22756] bridge0: port 1(team0) entered disabled state [ 810.426086][ T5950] ? assign_work+0x1a0/0x250 [ 810.434965][T22756] team0: entered allmulticast mode [ 810.435821][ T5950] worker_thread+0x6c8/0xf10 [ 810.446178][T22756] batadv1: entered allmulticast mode [ 810.446209][T22756] batadv2: entered allmulticast mode [ 810.446225][T22756] batadv3: entered allmulticast mode [ 810.446243][T22756] batadv4: entered allmulticast mode [ 810.446260][T22756] batadv5: entered allmulticast mode [ 810.463252][T22743] chnl_net:caif_netlink_parms(): no params data found [ 810.465218][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 810.500094][ T5950] kthread+0x3c5/0x780 [ 810.501849][ T5950] ? __pfx_kthread+0x10/0x10 [ 810.504079][ T5950] ? rcu_is_watching+0x12/0xc0 [ 810.506781][ T5950] ? __pfx_kthread+0x10/0x10 [ 810.508459][ T6847] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 810.508934][ T5950] ret_from_fork+0x983/0xb10 [ 810.508967][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 810.513535][ T6847] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 810.515676][ T5950] ? __switch_to+0x7af/0x10d0 [ 810.515706][ T5950] ? __pfx_kthread+0x10/0x10 [ 810.515730][ T5950] ret_from_fork_asm+0x1a/0x30 [ 810.519631][ T6847] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 810.522044][ T5950] [ 810.524653][ T6847] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 810.526721][ T5950] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 810.526740][ T5950] CPU: 2 UID: 0 PID: 5950 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.526764][ T5950] Tainted: [L]=SOFTLOCKUP [ 810.526771][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 810.526784][ T5950] Workqueue: hci3 hci_conn_timeout [ 810.526813][ T5950] Call Trace: [ 810.526821][ T5950] [ 810.526830][ T5950] dump_stack_lvl+0x3d/0x1f0 [ 810.526859][ T5950] vpanic+0x640/0x6f0 [ 810.526881][ T5950] ? hci_conn_timeout+0x16f/0x230 [ 810.526904][ T5950] panic+0xca/0xd0 [ 810.526922][ T5950] ? __pfx_panic+0x10/0x10 [ 810.526948][ T5950] ? check_panic_on_warn+0x1f/0xb0 [ 810.526969][ T5950] check_panic_on_warn+0xab/0xb0 [ 810.526990][ T5950] __warn+0x108/0x3c0 [ 810.527013][ T5950] __report_bug+0x2a0/0x520 [ 810.527032][ T5950] ? hci_conn_timeout+0x16f/0x230 [ 810.527058][ T5950] ? __pfx___report_bug+0x10/0x10 [ 810.527082][ T5950] ? check_path.constprop.0+0x24/0x50 [ 810.527103][ T5950] ? save_trace+0x1ad/0x380 [ 810.527120][ T5950] ? add_lock_to_list+0x9d/0x130 [ 810.527139][ T5950] ? hci_conn_timeout+0x16f/0x230 [ 810.527164][ T5950] report_bug+0xb2/0x220 [ 810.527185][ T5950] ? hci_conn_timeout+0x16f/0x230 [ 810.527215][ T5950] handle_bug+0x127/0x260 [ 810.527232][ T5950] exc_invalid_op+0x17/0x50 [ 810.527249][ T5950] asm_exc_invalid_op+0x1a/0x20 [ 810.527266][ T5950] RIP: 0010:hci_conn_timeout+0x16f/0x230 [ 810.527292][ T5950] Code: 41 83 e5 40 44 89 ee e8 ff 1b 4f f7 45 84 ed 0f 84 07 ff ff ff e8 b1 21 4f f7 e8 3c 7d fd 00 e9 f8 fe ff ff e8 a2 21 4f f7 90 <0f> 0b 90 e8 99 21 4f f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 810.527309][ T5950] RSP: 0018:ffffc9000352fbb0 EFLAGS: 00010293 [ 810.527324][ T5950] RAX: 0000000000000000 RBX: ffff88803fc6ca40 RCX: ffffffff8a6fdcef [ 810.527335][ T5950] RDX: ffff8880299bc980 RSI: ffffffff8a6fddee RDI: 0000000000000005 [ 810.527346][ T5950] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 810.527356][ T5950] R10: 00000000ffffffff R11: 0000000000002ba1 R12: ffff88803fc6c000 [ 810.527367][ T5950] R13: 0000000000000000 R14: ffffc9000352fc90 R15: ffff888103739400 [ 810.527386][ T5950] ? hci_conn_timeout+0x6f/0x230 [ 810.527410][ T5950] ? hci_conn_timeout+0x16e/0x230 [ 810.527440][ T5950] process_one_work+0x9ba/0x1b20 [ 810.527470][ T5950] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 810.527492][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 810.527522][ T5950] ? assign_work+0x1a0/0x250 [ 810.527545][ T5950] worker_thread+0x6c8/0xf10 [ 810.527579][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 810.527601][ T5950] kthread+0x3c5/0x780 [ 810.527622][ T5950] ? __pfx_kthread+0x10/0x10 [ 810.527645][ T5950] ? rcu_is_watching+0x12/0xc0 [ 810.527661][ T5950] ? __pfx_kthread+0x10/0x10 [ 810.527683][ T5950] ret_from_fork+0x983/0xb10 [ 810.527705][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 810.527726][ T5950] ? __switch_to+0x7af/0x10d0 [ 810.527748][ T5950] ? __pfx_kthread+0x10/0x10 [ 810.527768][ T5950] ret_from_fork_asm+0x1a/0x30 [ 810.527806][ T5950] [ 810.529354][ T5950] Kernel Offset: disabled