last executing test programs: 18.347752174s ago: executing program 2 (id=327): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580002000000ffff27bd65b300c2df2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04002800128009000100766c616e000000001800028006000100000000000c000200110000001300000008000500", @ANYRES32=r1, @ANYBLOB="0500110002000000"], 0x58}}, 0x40080) 18.347598369s ago: executing program 2 (id=328): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r1) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @cond=[{0x283, 0xfff, 0x1, 0x5, 0x3ff, 0x401}, {0x400, 0x2, 0x5, 0x6, 0x4, 0x200}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0xff0f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000010000"], 0x48) socket$netlink(0x10, 0x3, 0x4) close(r0) 17.82032677s ago: executing program 2 (id=339): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x111000, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)='e', 0x1}], 0x2, 0x3) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x1, [0xff]}, 0x6) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) 17.820062054s ago: executing program 2 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="588c0c14fbe9b886db2f0cd4e620696056b416c0691f764e0b5bdcac6b106ddb9f47c91bef3fe944bfd2a756b402778488a09b3ac43c6936eeb0d437bbca24dcdbbba52d40b5f70b325b8aada7c9bd0591c029fb02e3697fe636ff280d88e48e7d18872ce42ba54639aa8df1d97f201af8d527d52efde40f27ea294c5ecba41e7ceaceeea650302887e09a65b1dd0e", @ANYRES16=r1, @ANYBLOB="010000000080000000003e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500820000000000"], 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lseek(r2, 0x31a, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r5 = fsopen(&(0x7f0000000100)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='gid', &(0x7f0000000740)='0\x00M\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbd\t\x00\x00\x00\x00\x00\x00\x00\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xffNh\x19\xee#\xcc\x0f\xee\xfea\xdc\x88\xcb%bW\xd35\xda=\xc6\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x90\xf4\xb7\xdf\xae\xf3\x02\x19_\xe1.f>>\xa5\xc7@\xfb\"\xab\xdb\x06\x12e\x14\x11~\xa8\xdfRL \xf0\xee>(\xb1\xa2\xe8\a\xb8-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\'\x13', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f00000001c0), 0x218006, &(0x7f0000000240)={[{@subsystem='cpuset'}]}) syz_clone(0x80020000, &(0x7f00000023c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2007) close_range(r6, 0xffffffffffffffff, 0x0) 17.740298035s ago: executing program 2 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005500010d2bbd70000200000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="01020000"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) 17.619622049s ago: executing program 2 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0x200, 0x3, 0x452ce188, 0x3, 0x6]}, &(0x7f00000000c0)=0x54) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x112, 0xe, 0x0, &(0x7f0000000080)) (async) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x112, 0xe, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6695000) 17.607817028s ago: executing program 32 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0x200, 0x3, 0x452ce188, 0x3, 0x6]}, &(0x7f00000000c0)=0x54) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x112, 0xe, 0x0, &(0x7f0000000080)) (async) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x112, 0xe, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6695000) 2.948552066s ago: executing program 0 (id=583): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file0', [{0x20, '/dev/sr0\x00'}]}, 0x15) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xeb000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0xfffffffb, 0x24d457e6, 0x100c, 0x8, 0x7, 0xe, 0x3, 0x4}}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000340)={0x4, 0x6, 0x2}) 2.947989104s ago: executing program 0 (id=584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x38, r2, 0x1, 0x70bd27, 0x25dfdc01, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000280)={0x2, 0x3, 0x95, &(0x7f00000001c0)=""/149}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x41, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="c4d63fbcfb08"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8008) 2.877133864s ago: executing program 0 (id=585): mkdir(&(0x7f0000000000)='./file0\x00', 0x9) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xbb) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000500000000000000fbffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf9800000000000057080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)=0x1ea) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mkdir(&(0x7f0000000000)='./file0\x00', 0x9) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) (async) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xbb) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000500000000000000fbffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf9800000000000057080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) (async) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)=0x1ea) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) (async) 2.876947179s ago: executing program 0 (id=586): syz_emit_ethernet(0x13, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x892f, @tcp={{0x5, 0x4, 0x2, 0x3e, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000023000004"], 0x0, 0x26}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0xf, 0x4) 2.819698459s ago: executing program 0 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000300)={&(0x7f0000000280)=""/93, 0x5d}) ptrace$pokeuser(0x6, r1, 0x388, 0x2) ptrace$pokeuser(0x6, r1, 0x358, 0xff) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_delroute={0xcc, 0x19, 0x100, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x10, 0x7, 0xff, 0x6, 0xfe, 0x6, 0x1400}, [@RTA_UID={0x8, 0x19, r3}, @RTA_DST={0x8, 0x1, @broadcast}, @RTA_METRICS={0x9e, 0x8, 0x0, 0x1, "f92abf2ed8e6327e91fab7d64924b32818e281568c668a858c6180739c844ebdd1a9a73fb7dae452b35c5e5fd22aa9f9ef1fa8af6e900ea5fb993de612e0bf55c7e9c9fab8a8a4bc0cb9c77686a2d76a1b3fb8b60ca954fff8d507c017d9d86c839f34b2c2739dfbfb7d34f5692f805ffa9f3c155c2be0a80b4d6c44b8a4241b7c5ff09a76be5bb703bfecc36d20fa6591ab0dfac8099eeeaa64"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040000) 2.767964792s ago: executing program 0 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xf2}}, './file0\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000002a00)=[{{&(0x7f0000000700)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000780)="ec36", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=ANY=[], 0x1a0}}], 0x2, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344], 0x0) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.659991568s ago: executing program 4 (id=601): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x101040) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x1, 0x1, 0xfa6, 0x10000, 0x1000, 0x8000000000000001, 0xfffffffffffffffa, 0x7, 0x2, 0x40, 0x1}) 1.659775232s ago: executing program 4 (id=602): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100289e88e9858f42d28c00000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f0000002280)={0x18, 0x0, r1, {0x7}}, 0x18) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f00000022c0)='rootfs\x00', 0x4000002, &(0x7f0000002300)='\x00') write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) (async) close(r0) (async) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000045}, 0x10) 1.39790855s ago: executing program 4 (id=605): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff000038000100fdff81000808030000000400000000000000000000e70a00000000000000010100000000000006"], 0x78) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x803}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4, 0x40f57}]}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r6}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x3010c0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f0000000180)={0x8001, 0x4, 0x2, {0x6, 0x2}, 0x15e, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r9) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r8, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r10, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0xc000) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0) 1.396898189s ago: executing program 4 (id=608): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/17, 0x11}], 0x1}}], 0x1, 0x40, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, r4, 0x2000) madvise(&(0x7f0000416000/0x2000)=nil, 0x2000, 0x64) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.396578224s ago: executing program 3 (id=609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r3, 0x0) futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfe, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x48}}, 0x0) 1.395464688s ago: executing program 1 (id=610): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="08f64fd5252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r2}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.393066632s ago: executing program 4 (id=611): mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) (async) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='exfat\x00', 0x400080, &(0x7f00000001c0)='discard') (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x28, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x93}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40400}, 0x48044) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x2, &(0x7f0000000280)) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000010c0)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="462a5851d0f76fd21212d46b52973de5777221249dfe4f6e7ff653c93e2395720af44c73fec6fa834e1d6b177c9ca26e2a7bde9923147ac61f1ce876f11cb8584b2fa30d598c1c299b56ab56e8003ce32a1ea4f8129b96c1a4c8740c5e10932a9d362e3b5ed2e6794ab22eaeb7688346093fd7c53d14a891f624e196dd307a193bbddecae870c813567243b46a634dcc7315d55f33c8a0a80bfeda3254530c1c1dd40f353326d9ddccc2df4c141618e47f1cad5a9f5bc3982f41", 0xba}, {&(0x7f00000002c0)="2ff387d77abd79f6df47dc50d5e884bd6d806a14250e63158f20f9d151df94286a0d5be11f9437e11311f60fbc1c55e95a5b9428f4b18e63dba0b3f11b760d74c301e4a451178fb2e451a33daebfe4bd0b23101bd5d58987b310de1a0467b044b287385c012904e59976a47bb28f1a4392564e6a5b574d04155d1153df9e671afeaea700", 0x84}, {&(0x7f0000000380)="ee31295188735775fc7dedf6b99ec84dca2723ecfff790e4f0ec970e6cfa83e8910fc31bd35c8c24e46a968ccc5f25bf6cc2c0e930a915d42caeef6357dafcaabc23990bada41be0bd3a055ecc2ef97678c4fa997fcd7dc8ff75bf71003a5f0d44bce8b7ab0c8cd2ab76c0ca796e6120baf4a75c48f1bf7cd40bb48817c28481322222b59256b11dc019fb2a8a8c9480a6fcff26f505819323576ab8b087ec1887cbb8b86887eb7b91d19bf6091c2de3602d99576781ba3279276c99ac53a127aa1e314e2e732f5d32f293231758a27445af8b36f1c35cf7059c3f6d774f8d221868543d0fb21505470e45", 0xeb}, {&(0x7f0000000480)="d65a2ef6f0644738bda375b0d2c14883e57500e29bf94b0bbe2bc63ce5479aaff199b8d62b790fbfa294c59137342012f099443afa36ffd363e37b2ed10e818e1f21e6e07e43122725ca477adda08019d2248566460f069bc19171cf1c19df36741fbe36e9b928961b0dfc7592518e6f3b520294ee96f02b2366c83b58e98fa43372a9db7d8c802019ebe33ea15e01a7a9c0f2a16df10f779f77e55752bdc8ee87c296dab318", 0xa6}, {&(0x7f0000000540)="8f4d3a3237e868577df16e0f559938b9ecf67023decd86e720e12773c3b743b93fce9dedb9ca1951610a390a661a47cdcf48910bebb55aae40836eb7618faae1b38c25796b9ed5d199548d8cdb0bda471a648507539386b2a2b23861258eef473d70556a277857ddb76e3fedff20638ea6fdd145fbb5f9124950a0968d14c11833eec7208a98b13fa47d0a796828cea45fa0e9a15309f69b774c5518143a6684a79502672e10aa9204ba5d84f9f5a242695d9ec848fbd867d639e37899efa502dc8f20771dda62216351e888722c7f0c178aea6b4cef56bd067a2681ed8d800f14536049c5e4138cc4826df6", 0xec}, {&(0x7f0000000640)="44fd5579ca6dbd27671683b3", 0xc}, {&(0x7f0000000680)="244ccc25d4bba998c49943e530e661bcf554a9c95398ff65e1decf42eb088f231701b962b6e223182d942cdcc9de1fcf431565b58e6866272c390c56b2965357dac3a1dafc1a23ad3adce062a52349b741c7a1cc885004f73355789554b482e18d6d6a71cf3db8db7f9e3a6e6af1caad7a6ad80e0b4c7444a63b3ee507975580da9507ce6a6bf24f5721bd6782eec501441e4b2582eb38e23a2685", 0x9b}], 0x7, &(0x7f0000001180)=[@assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xc7, "4f6cccb6db5c2ad4e604c0fbaac1cc31b345b71a2f5f11cce14d67b9d5dcc4a5aed0c919746711cdccfcda397c619732cf14d1a9c11e8c5ee0ef0141745c80c1f1648b42246eca53033573a400b109780fd78b78331a4b878f4bec7dc9c391395db5bd9b42ed9adf0de4577acfea0ef7d702501f5ba4266fa134e1643081f9bb467ecaf4bb9f72c74ba03e075a565e3fe82ff9a356ed690ed1ec2cadc3a3a6caf651a9f92cbae21235fd73bb16bdfdbda4d015dcffbf386c4fb046e7a5aa4dba9a7a64db94ae0b"}, @iv={0xa8, 0x117, 0x2, 0x90, "1830ecf316965d560196b4568972ade8e808cdec25ffe4c9f008a3279aa8a3746defbb03799349b49c9368d9cdf5f60345d35e93c26c43b56bf508bfb66373df99c55ae2a461ed1478a315abb0fe60434e821126dee979a8d6107a9e7ad6ffc434f4b8843949de61f40a68d77d8fa6f28da9d7945d890191c6dc37c20745287ea766ea0a60a1cc8715074846adf8d0e5"}, @op={0x18}], 0x1e8, 0x1}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000940)="de98d955214cfd98a52b1ee37e6fe2f7ab709fed8a0db4d47b12e1e54c44739f2b2e0433e99f5539caed42c722170e8ddc212002d582b29e7200e9aae130bf5a42895f2b150bde2a9e084f62f185bde1be913aff00c20c7179e5b3e48a66d62fb4ba4b142882f9583c575a8997e74599f98ea9537e74e508efd029faa7abba78352a417b1523ef6685d0f563b2363c3944de125fc8fd0170353f0242168d03ef8c3b8aa7947d2ca8ae08", 0xaa}, {&(0x7f0000000a00)="7aca5ad12a3d818486540f23abfeab", 0xf}, {&(0x7f0000000a40)="e685736ec4aa9075e76fe038613eca16c2767db4d653a7ab78e3a3a1777af3114d9a6875fe251a4a1ff232ef35cd64bb53dc1abdb7c638d3ef7c493f01feec23cb6fc7de63ed43c7a25ef80f43c58c60ef84dbb2fd035c29ddfb4a4f689bbf3684c434c1a3e5bd622c69cfc663c6dab2de10fb6cbc0f693e8fa835de0c749c82e79be8", 0x83}], 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x138, 0x20000800}, {0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c80)="8423dc84046973e94adb7866a4600202169e7704d2c6b0047484462d5079a62e067f960f64a3a768726283ae58ae30c7fb040df9669b7aa40d9a6073303370d7c056d903eca6ed447426ebb432fbf1909f5e2621105f70bd9e3fc641c6968db946e6380673c15c962cff4a15568fe5638299ffcdaa8644adfc4e249ad8e44649177cba8faa99dd1e04b2dec7783a9f34a3dd3ba062325a9d5600d7d5c5b27018344cb7d1c142f5f5a43d724282", 0xad}, {&(0x7f0000000d40)="a2199a70fd346941c463bb87b4b086193eb5d422fbbdf582df0ac4cda190dd8a5ed9e7a79fd48784da7f247e54879c88e93cbbb13d403a888240368d2ab5d6c31a145a5361db03444778dab53132775d70b0cec18607308a62733ea6c5823cfc9bc7eb7ee2fc78b6aed63b67eb8013ff0672c754001c1518a034bacbf2843a4914c4e2c27933690a2f4d1562bf531becd764429da19b798718a91c480f", 0x9d}, {&(0x7f0000000e00)="1d3c14ca86", 0x5}, {&(0x7f0000000e40)="6f30ecb3dcdff0430a0b8bc1b231568522d4e3cf480713ff9b81d0cacbf6e77aa73b2cca41eaa14a1b4234ad", 0x2c}, {&(0x7f0000000e80)="c7fee2a235eaaccf1b717cf56193452bd24a5ea3505addc4f27c9a4e92c1bddf14a6b608dc287ef89544c945937b73e48f698adf47dbd1f60ea31786c95b2099d020c542110baa488eedc6719dd61f1afda52e4dd42c591e97d698b54a0cd877521f76fff9dc0cf3eb3e4ac7bea4f0cde9", 0x71}, {&(0x7f0000000f00)="98fa20c27231e26287d78490ec345b5b60fdc9eca7dd8289dfb95da7cfcb4a8f5b158b37846e5af7dfce05982dc36ab4454f9c16a80e", 0x36}, {&(0x7f0000000f40)="ed1125633de0c5062cb679345948328cd688ad7d2990a12c1b65fc93e7a96e008e2b0000a1f3ffd7a5a8c62529fac01833f9508907e7979113dee206e181105d886235cb0968023449ef351a7f3191346d735f59dd2bea847971b29c4e293b9b48802c", 0x63}, {&(0x7f0000000fc0)="56d2685a8390724a80e1078189a0f83513d64c4b6d6350a2bb5ef2327a7e546df8ce73b6383e7c7dcfb855d80a108fb49f36d7c03479a8a2e4304f9fce951f44601af652f3600ba8561b36b33e1eb084f6c50ecc8ec2751239177d6675cd52", 0x5f}], 0x8, 0x0, 0x0, 0x880}], 0x3, 0x80) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 1.353165058s ago: executing program 3 (id=612): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="06841ffa", 0x4}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c801}, 0x21) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000500)={0x3, 0x611, &(0x7f0000000280)="a661ed402040e15ae0dfa930abc694b9fe2c430dec04be97381a21be5072caf722cddb1f91cfb53ec88bc4e33b7de17e0e27369d19a061e1cd2e772792d952ffc135289ef4bf627bc2945ab1f407bf4b79bc3f145a612962f19374477e28304b868b840d8962e0fbae5ac0a456f6f6512a4786485402f9c4ae80a7ff4b0c954008e28aa06c", &(0x7f0000000400)="a1e7f8e33aabf4ce6baaed11d9aa16b78d667f81e2e88cae5a9bfd29145dd6a58cc23da571a89ac04706a2f4411bbb2ebdc95100ae5ef6b5194a1926bcb386bb938a1085b56f10c9cbed8992a5ae23fa18f27cf884fb37c5d8d5fac3ddfd25aacfadccfbaf9afac4d32fe0fb4a3cc2dacb35411539368480553929cc75a946580ed211cf60b5f36c6a2d5165fea4e765ae61918ddc1c960fe1c2fc52f804cc2363c4ab3ac13353e813cd0dab4220e61ac57c83752c1f01391ee880ceb4f5169608fb01d8955932", 0x85, 0xc7}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000683000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e30000000500000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r4}, &(0x7f0000000100), &(0x7f0000000b00)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f00000007c0), &(0x7f0000000340)=""/178, 0x2}, 0x20) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xd5dd0000, 0x1c6017}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a0000000500040000000000090002"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.352490147s ago: executing program 4 (id=613): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r1) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @cond=[{0x283, 0xfff, 0x1, 0x5, 0x3ff, 0x401}, {0x400, 0x2, 0x5, 0x6, 0x4, 0x200}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0xff0f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000010000"], 0x48) socket$netlink(0x10, 0x3, 0x4) close(r0) 1.298498811s ago: executing program 1 (id=614): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0xc, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x4, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) 1.298147919s ago: executing program 1 (id=615): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000340)={0xb, 0x0, r0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a002f"], 0xb8}}, 0x4000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x102) 1.239781417s ago: executing program 1 (id=616): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0)='vfat\x00', 0x4000c0, &(0x7f00000001c0)='discard') (async) clock_adjtime(0x0, &(0x7f0000000000)={0x8000000000000000, 0x0, 0x0, 0x40000c, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x400000000, 0x2, 0xc, 0x4, 0x400000000000000, 0x2, 0xfffffffffffffffd, 0x0, 0x1000, 0x40000000c, 0x2, 0x3, 0x101, 0x20, 0x200}) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0x58, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x9, 0x1, 0x1, 0x1, 0x5, 0x9f}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0x3, 0x2, 0x1, 0x1, 0x1, 0x4}, 0x2, {0x1, 0x8, 0x2, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 1.23856595s ago: executing program 1 (id=617): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000200)={&(0x7f0000000000)=0x3, 0x6, &(0x7f0000000040)=[{}, {}], &(0x7f00000001c0)}) write$bt_hci(r0, &(0x7f0000000240)={0x1, @pin_code_neg_reply={{0x40e, 0x6}}}, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r3 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) r4 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x200, 0x200c1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x9ec0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0xd83d, @mcast2, 0x3ff}, @in6={0xa, 0x4e22, 0x8, @local, 0x8fd1}, @in6={0xa, 0x4e23, 0x1000, @mcast1, 0xfffffff2}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @remote}], 0xb0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000480)) r6 = accept4$unix(r1, &(0x7f0000000580), &(0x7f0000000600)=0x6e, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000640)={'hsr0\x00', {0x2, 0x0, @empty}}) ioctl$KIOCSOUND(r1, 0x4b2f, 0xeb) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x8}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000700)={r7, 0x1, 0x8, 0x80000001, 0xc, 0xfffffffa}, &(0x7f0000000740)=0x14) ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000780)={r4, 0x0, 0x0, 0xa2, 0x0, 0xf}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000007c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000800)=0x18) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x30, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000940)={r8, 0xb}, &(0x7f0000000980)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) recvfrom$unix(r9, &(0x7f0000000a00)=""/212, 0xd4, 0x100, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000000b00)=""/138, 0x8a, 0x40010042, &(0x7f0000000bc0)=@file={0x1, './file1\x00'}, 0x6e) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000c80)=@add_del={0x2, &(0x7f0000000c40)='wg1\x00'}) ioctl$FIONCLEX(r3, 0x5450) write$sndseq(r1, &(0x7f0000000cc0)=[{0x5, 0x1, 0xb, 0xc, @tick=0xffffffff, {0x0, 0x7}, {0x4, 0x8}, @addr={0x1}}], 0x1c) sendto$inet_nvme_pdu(r1, &(0x7f0000000d00)=@cmd={{0x4, 0x6, 0x48, 0x5}, {@identify={0x6, 0x8, 0xffff, 0x1, '\x00', @anon_struct={0xedd8, 0x2}, 0x8, 0x0, 0x2, '\x00', 0x7}}}, 0x80, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x84, 0xb, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @local}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0xc800}, 0x20004810) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000014c0)={0x401, 0x2, &(0x7f0000000f80)=[0x0, 0x0], &(0x7f0000000fc0)=[0x9, 0x100], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x80, 0x0, 0x9, 0x6], 0x0, 0x3}) 1.238066789s ago: executing program 3 (id=618): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002020100"], 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @random="f070a23f0d69", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, 0x0, 0x601, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600655800000c000280080011"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x104}, 0x20000084) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x345, 0x0, 0x800}]}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x21c1c3, 0x0) ioctl$TIOCSCTTY(r7, 0x540e, 0xdc0b) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 319.94325ms ago: executing program 1 (id=619): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) (async) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x234000, 0x0) r1 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x281}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000001040)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}], 0x2) 319.569814ms ago: executing program 3 (id=620): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2400}, {0x0}], 0x5) openat(r1, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x21) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x20c41a, 0x0) 228.762471ms ago: executing program 3 (id=621): io_destroy(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3c1803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x5, @remote, 'syzkaller0\x00'}}, 0x1e) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000440)=""/207, 0xcf, 0x0, &(0x7f0000000540)=""/168, 0xa8}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pS \x00'}, 0x20) pipe(&(0x7f0000000740)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0x6, 0x401, 0x600, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x4}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x8, 0x8}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000f40)={{r2, &(0x7f0000000840)='/dev/net/tun\x00', 0x400001, &(0x7f0000000880)={@_ha_fsid={[0x6, 0x9]}, {0x2, 0x60d, 0x6, 0x1}}, 0x1, &(0x7f00000008c0), &(0x7f0000000900)=0x8000}, 0x7, &(0x7f0000000e40)=[{0x3, 0x589, &(0x7f0000000940)='![{\x00', &(0x7f0000000980)="94e3b0223a71376e62a47c7e89a7d0ead170bf68f30bc0d6b653bb93d84201ddf228fe863d612e3f2ae5d2f2a43d729a4ded6a79d04409ea13314d84c67c17f96b335ccd8570abf334e3777d", 0x4c, 0x2a}, {0x0, 0x4, &(0x7f0000000a00)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000a40)="f80130e2239c4e48c4a657d3ba496ebe77441cb2329bf780c255c79bed66f23df603c89311820f81f9e70703e3c2f0afd11d5fa43303ea3b78", 0x39, 0x20}, {0x5d1c0c67e2931291, 0xfffffcf2, &(0x7f0000000a80)='/,%-(^}\'\x00', &(0x7f0000000ac0)="187b2f60f803b9935e711848209b9b7228fff0295a25a1f430a2e3b0f29bf9b541e16cfc16dff20f518cb5cf34b41458192decc4180acf4c76c550c6b34cccc2c20d8fbc408b351e5a1f2e8f633969eeb8c4483948385937fbc5", 0x5a, 0x20}, {0x3, 0x7, &(0x7f0000000b40)='!\x00', &(0x7f0000000b80)="bbdbd51f762a1769e5fdd328540ea924e994ce74f223f27a8adc2c827d72115b83dada18c2762bcbfbef", 0x2a, 0x18}, {0x3, 0x8, &(0x7f0000000bc0)='\'(&[&(\x00', &(0x7f0000000c00)="f57be2e3bf61786a6893f66c27e0de624fe95cbe21a0f91adc14501cb77ca153add7ed8e94efe0cebfeca2f2a28e3bf40570f63d632af592b132677869915b456b6dd5732be48a31e47535ece466eea26084bbdea7cdb912f2429d044bcad9e0d8336eb623f615c05932f3c402a12431f35e0c0745764b37308f58febac99d9f26023deec5559dee2ab83fda7475b44424b4d2f006de6d7bb2204b19ccffb1b6f3876426e0364d04c22a2a45dd30846add26575436f45362823e61f32cc076af62e75b3d089ab709e52a92541f065bb6294e5ce2cb4243ce24834ce21fb783ffc11d401b0320b025", 0xe8, 0x2}, {0x1, 0x9, &(0x7f0000000d00)='/{.%.^', &(0x7f0000000d40)="1c5b6504d065c2e24d8e74cc322ede9df6d1", 0x12, 0x28}, {0x3, 0x6, &(0x7f0000000d80)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000dc0)="ed7c566c13eb8e15a766e5be01c693d5646ff656c57ce06e03730a6cae4723a633ccbc5fd99eed5e618ef1bf61bcc77e4104997b79dc12021651d378c1ca15f4875d5569f4b696f1e34c9d4c8dbed4dfc026faf0f608c8", 0x57, 0x1}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6046fa40}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x5a}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x50, '\x00', r1, 0x1b, r6, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x14, 0x8}, 0x10, r7, 0x0, 0x9, &(0x7f0000000fc0)=[r8, r9, r10, r11, r12], &(0x7f0000001000)=[{0x4, 0x1, 0xf}, {0x1, 0x4, 0x4, 0xb}, {0x0, 0x1, 0x8, 0xa}, {0x0, 0x2, 0x3, 0x1}, {0x2, 0x4, 0xa, 0x4}, {0x4, 0x3, 0xf, 0xb}, {0x5, 0x5, 0x9, 0x2}, {0x2, 0x1, 0xe, 0xc}, {0x4, 0x3, 0xf, 0x8}], 0x10, 0x1}, 0x94) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000001180)={0x0, 0x4, 0x2c083c2e, 0x1, 0x7}) io_setup(0x2, &(0x7f00000011c0)=0x0) io_cancel(r13, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f0000001200)="ac529787475940edcc0b9ffa127393f4c468aac574b2dcef11c747cc6fd641c122f3c22bfac1d7da0d7888e40160dd", 0x2f, 0x9d3, 0x0, 0x3}, &(0x7f0000001280)) syz_open_dev$evdev(&(0x7f00000012c0), 0xfffffffffffffffd, 0x8000) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f00000013c0)={'syztnl2\x00', &(0x7f0000001340)={'ip_vti0\x00', r1, 0x700, 0x8000, 0x2, 0x4, {{0x11, 0x4, 0x3, 0x1, 0x44, 0x65, 0x0, 0x7, 0x29, 0x0, @loopback, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x37, 0x1, 0x3, [{@local, 0xffffffff}, {@remote, 0xfffffff7}, {@multicast2, 0xfffffffb}, {@broadcast, 0x1640000}]}, @ssrr={0x89, 0xb, 0xca, [@private=0xa010100, @remote]}]}}}}}) sendmsg$nl_route(r14, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)=@bridge_getneigh={0x4c, 0x1e, 0x400, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r15, 0x20000, 0x8228}, [@IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_TXQLEN={0x8, 0xd, 0xb}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044010}, 0x8080) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r12, 0x24, &(0x7f0000001500)={0x8000, 0x1, '\x00', @zc_export={r9}}, 0x0) sendmsg(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001580)="2c98f53ad84c1a7aa4485501d12b", 0xe}, {&(0x7f00000015c0)="38a7582944739d80351faad0d11282b4cc7e042844e198e56d42564731f49cf5b7b28288e34b5024c68f08fd9d0fa2eed93013c97c8ac48c9f352d767c7940560d1968851d42f5e86fdc", 0x4a}, {&(0x7f0000001640)="c980d4537e684dc355d26d4c213d01721c678226d9561f9648103d7463f46cd2c42f180b272609bd02da0a45283fee31b3ef13c2d028300b7b85735eb78d2274777cd068cd1ac40ade073085ed3d7d52360402f48f7354d290fb9dd9f894a31c81fcb3557fc255ec27cd2efcba3fee00f518e09e70dfea8869c0cd8ee95379550dae7f3b5c69bb1b8eb86926ae45ec9d8aa1eaa3c413f68d54b12f8103153c8e30d079462e49ec972f9ced641b93f3f0f32e0da9ee22db9401fd91a9a2f70563fb27d564619cf0ce72cf4f087e548f04628cc0d59695a01a3813fe1ad0006e721a70fe94a330a23ee4", 0xe9}, {&(0x7f0000001740)="d58e30bc5f6ec6edfa97b0efffc605ffabc45f404a7ec41f9f0efbc9a8b9f466b8a133a4a2003c78d082a288cec1c0921459dbdc305e9c9eeb4c95e276a5108b0d2cfcd83ed564a39aae89323d793f07b76a880f2e256aad7f44622be8ac09352d0ac51a710a56d91974620ae254b02f6a6995f1be32e5932c59617c143e0e4ba5743d250854056aeb533eae4598ff", 0x8f}], 0x4, &(0x7f0000001840)=[{0x78, 0x0, 0x0, "ca404e75e0d369058a085a6add9fedf4b3ce87abfbe12f4ea0018eb8ea9188c0622f083ae7982b5ebf5e330ec8589bbb93a38b8bc258b53a795129684e16bb3c86fa17fd73368d394ffddd6111823eac4bcaa9d20cadf11521dcde9bd764d08c96ebe04a0791ac"}, {0x110, 0x0, 0x9, "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"}, {0x1010, 0x112, 0x200, "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"}, {0x70, 0x10c, 0x80, "6c1907d60e9ccd3657e32cd127001b048e2786cfa16b05d1fcd0bf37e1fed884a012c7a2af3ee25b7f2144f4d5ba8efbe93a3c5f5ee1be98bc1af62cd42a022000aeca1b4744bddf89f2cbf11857dad2148dff3e24ac19918387174366fbfd"}], 0x1208}, 0x8004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002c40)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002cc0)=@bpf_tracing={0x1a, 0x14, &(0x7f0000002ac0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x2, 0xa, 0x20}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x86e6}, @jmp={0x5, 0x1, 0x2, 0x4, 0x0, 0xc, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @exit], &(0x7f0000002b80)='GPL\x00', 0xc3, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x19, r3, 0x8, &(0x7f0000002bc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002c00)={0x3, 0x7, 0x3, 0x3}, 0x10, 0x2a487, r6, 0x0, &(0x7f0000002c80)=[r3, r10, r5, r10, r16, r11], 0x0, 0x10, 0x1c0}, 0x94) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000002dc0)={0x2, 0x4, @status={[0x3, 0x8, 0x5, 0x7, 0xedb, 0x150fb81e]}, [0x0, 0x3, 0x9, 0xe15, 0x8001, 0x8, 0x10001, 0x6, 0x49, 0x1, 0x6aca, 0x8, 0x0, 0x0, 0x600000000000, 0x5cd, 0x6, 0xffffffffffffff81, 0x9, 0x6, 0x7, 0xffff, 0x4, 0x74d, 0x4, 0xf27, 0x4, 0xfa03, 0x1000, 0x1, 0x200, 0x4, 0x5a5, 0x6, 0x5c8, 0x4, 0xff, 0x4, 0x8, 0x6, 0x2800000000000, 0x262, 0xbfc, 0x8, 0xd, 0x9, 0x1, 0x5, 0x6, 0x8, 0x0, 0x80, 0x7, 0x8000000000000001, 0xb26, 0x3, 0x2, 0xf680, 0x2, 0x8, 0x6, 0x0, 0x8001]}) 0s ago: executing program 3 (id=622): r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) pipe2(&(0x7f0000000040), 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) kernel console output (not intermixed with test programs): 1782256132.663:163): avc: denied { read } for pid=5729 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.790365][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.790464][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.790679][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.791608][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.791667][ T41] audit: type=1400 audit(1782256132.663:164): avc: denied { open } for pid=5729 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.791686][ T41] audit: type=1400 audit(1782256132.663:165): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.795463][ T41] audit: type=1400 audit(1782256132.683:166): avc: denied { module_request } for pid=5729 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.796917][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.798904][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.801900][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.804929][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.806507][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.809596][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.810710][ T41] audit: type=1400 audit(1782256132.683:167): avc: denied { sys_module } for pid=5729 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.092139][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.094413][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.096669][ T5735] bridge_slave_0: entered allmulticast mode [ 45.098881][ T5735] bridge_slave_0: entered promiscuous mode [ 45.101436][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.103652][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.105868][ T5729] bridge_slave_0: entered allmulticast mode [ 45.108154][ T5729] bridge_slave_0: entered promiscuous mode [ 45.116815][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.119149][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.121814][ T5735] bridge_slave_1: entered allmulticast mode [ 45.124066][ T5735] bridge_slave_1: entered promiscuous mode [ 45.126334][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.128751][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.131295][ T5729] bridge_slave_1: entered allmulticast mode [ 45.133570][ T5729] bridge_slave_1: entered promiscuous mode [ 45.156630][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.160412][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.164290][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.167187][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.169432][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.171787][ T5731] bridge_slave_0: entered allmulticast mode [ 45.174141][ T5731] bridge_slave_0: entered promiscuous mode [ 45.176862][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.179054][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.181522][ T5731] bridge_slave_1: entered allmulticast mode [ 45.183747][ T5731] bridge_slave_1: entered promiscuous mode [ 45.186846][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.206916][ T5735] team0: Port device team_slave_0 added [ 45.213462][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.217259][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.220948][ T5729] team0: Port device team_slave_0 added [ 45.223470][ T5729] team0: Port device team_slave_1 added [ 45.225840][ T5735] team0: Port device team_slave_1 added [ 45.254689][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.257963][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.266949][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.270804][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.273018][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.280923][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.285352][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.287541][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.295400][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.301625][ T5731] team0: Port device team_slave_0 added [ 45.304756][ T5731] team0: Port device team_slave_1 added [ 45.309047][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.311335][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.318981][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.340704][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.342910][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.350714][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.363760][ T5735] hsr_slave_0: entered promiscuous mode [ 45.366004][ T5735] hsr_slave_1: entered promiscuous mode [ 45.368313][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.371269][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.379486][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.386257][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.388627][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.391304][ T5739] bridge_slave_0: entered allmulticast mode [ 45.393697][ T5739] bridge_slave_0: entered promiscuous mode [ 45.396523][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.398777][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.401537][ T5739] bridge_slave_1: entered allmulticast mode [ 45.404005][ T5739] bridge_slave_1: entered promiscuous mode [ 45.431071][ T5731] hsr_slave_0: entered promiscuous mode [ 45.433304][ T5731] hsr_slave_1: entered promiscuous mode [ 45.435191][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 45.436976][ T5731] Cannot create hsr debugfs directory [ 45.440326][ T5729] hsr_slave_0: entered promiscuous mode [ 45.442509][ T5729] hsr_slave_1: entered promiscuous mode [ 45.444658][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 45.446537][ T5729] Cannot create hsr debugfs directory [ 45.457478][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.461391][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.481247][ T5739] team0: Port device team_slave_0 added [ 45.485351][ T5739] team0: Port device team_slave_1 added [ 45.499813][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.502785][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.512961][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.521457][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.524225][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.534607][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.587342][ T5739] hsr_slave_0: entered promiscuous mode [ 45.589375][ T5739] hsr_slave_1: entered promiscuous mode [ 45.591748][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 45.593617][ T5739] Cannot create hsr debugfs directory [ 45.649892][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.653166][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.659088][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.662854][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.670417][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.673695][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.677697][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.681137][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.690862][ T5729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.694668][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.697191][ T5729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.700295][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.706473][ T5729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.710651][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.714070][ T5729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.717796][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.727921][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.730206][ T5731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.732525][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.734643][ T5731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.744910][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.748736][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.753426][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.756437][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.758885][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.762567][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.767307][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.771062][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.774249][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.776462][ T5729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.778782][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.781082][ T5729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.799177][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.802756][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.807923][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.811809][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.814576][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.817509][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.820837][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.824138][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.841819][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.844912][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.847086][ T5735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.849339][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.851733][ T5735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.866793][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.869123][ T5739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.871594][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.873773][ T5739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.878457][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.881473][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.883906][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.886283][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.889082][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.891995][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.895911][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.898391][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.908812][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.917170][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.919444][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.926615][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.928842][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.937679][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.945019][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.953965][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.966602][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.968727][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.972911][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.978482][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.980980][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.987510][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.989836][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.993186][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.995524][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.002902][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.020033][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.025769][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.027995][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.034323][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.036735][ T798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.049675][ T5735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.152723][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.172238][ T5731] veth0_vlan: entered promiscuous mode [ 46.177994][ T5731] veth1_vlan: entered promiscuous mode [ 46.191292][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.195466][ T5731] veth0_macvtap: entered promiscuous mode [ 46.199110][ T5731] veth1_macvtap: entered promiscuous mode [ 46.212567][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.220141][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.222522][ T5729] veth0_vlan: entered promiscuous mode [ 46.227752][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.230561][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.234251][ T5729] veth1_vlan: entered promiscuous mode [ 46.236855][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.239532][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.244717][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.250064][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.266255][ T5729] veth0_macvtap: entered promiscuous mode [ 46.275623][ T5729] veth1_macvtap: entered promiscuous mode [ 46.288099][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.291271][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.292289][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.304315][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.308450][ T5739] veth0_vlan: entered promiscuous mode [ 46.315035][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.317869][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.320452][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.321716][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.326390][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.329472][ T5739] veth1_vlan: entered promiscuous mode [ 46.334702][ T5735] veth0_vlan: entered promiscuous mode [ 46.336704][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.349518][ T5735] veth1_vlan: entered promiscuous mode [ 46.366340][ T5731] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.371529][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.372173][ T5739] veth0_macvtap: entered promiscuous mode [ 46.376026][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.381995][ T5739] veth1_macvtap: entered promiscuous mode [ 46.395148][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.398528][ T5735] veth0_macvtap: entered promiscuous mode [ 46.403155][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.403229][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.405624][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.411368][ T5735] veth1_macvtap: entered promiscuous mode [ 46.420219][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.424183][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.430504][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.435293][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.443169][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.447369][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.456410][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.459218][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.463981][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.466643][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.478977][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.484201][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.495147][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.498172][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.501364][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.504962][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.513573][ T798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.516039][ T798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.569589][ T5890] xt_HMARK: spi-set and port-set can't be combined [ 46.576708][ T5890] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 46.660123][ T5817] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 46.690042][ T2317] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.769961][ T5886] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 46.820213][ T5817] usb 6-1: Using ep0 maxpacket: 8 [ 46.823692][ T5817] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16 [ 46.827715][ T5817] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64 [ 46.831757][ T5817] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.836985][ T5817] usb 6-1: config 1 interface 0 has no altsetting 0 [ 46.841220][ T2317] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 46.841704][ T5817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.844719][ T2317] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 46.848306][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.848324][ T5817] usb 6-1: Product: syz [ 46.851669][ T2317] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 46.854771][ T5817] usb 6-1: Manufacturer: 購擲⌓꽳襕쪜࿜ֻ㵜⨛喇æ¦à£©á¤å¦™ê¸Šã ˜ç¾ä·’鈇욅é­é“…㬰ዦﭢ䃰íˆã“಴꙽蹠è»ã³‚媄樳é„릞é‘靖崬載í榼츃ç‹î¾€á§ç©‹ãŸŽé§˜è‘· [ 46.854792][ T5817] usb 6-1: SerialNumber: syz [ 46.856373][ T5882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 46.858815][ T2317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.864585][ T5746] Bluetooth: hci2: command tx timeout [ 46.864628][ T5882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 46.867151][ T5884] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 46.870019][ T5746] Bluetooth: hci0: command tx timeout [ 46.871458][ T5743] Bluetooth: hci1: command tx timeout [ 46.872563][ T2317] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 46.921433][ T5886] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 46.924847][ T5886] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 46.927859][ T5886] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 46.931210][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.934736][ T5888] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 46.937977][ T5886] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 46.950171][ T5743] Bluetooth: hci3: command tx timeout [ 47.110985][ T5839] usb 7-1: USB disconnect, device number 2 [ 47.154856][ T5888] dns_resolver: Unsupported content type (234) [ 47.506725][ T5838] usb 8-1: USB disconnect, device number 2 [ 47.700149][ T5886] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.849955][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 47.853636][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 47.857036][ T5886] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 47.861563][ T5886] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 47.864382][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.866886][ T5886] usb 5-1: Product: syz [ 47.868185][ T5886] usb 5-1: Manufacturer: syz [ 47.869808][ T5886] usb 5-1: SerialNumber: syz [ 48.065897][ T5909] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 48.085567][ T5886] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 48.087748][ T5886] usb 5-1: MIDIStreaming interface descriptor not found [ 48.099231][ T5886] usb 5-1: USB disconnect, device number 2 [ 48.110651][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 48.291944][ T5914] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 48.295095][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 48.298188][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 48.302162][ T5914] 8021q: VLANs not supported on ip6tnl0 [ 48.585063][ T5919] program syz.3.12 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.610335][ T5922] xt_HMARK: spi-set and port-set can't be combined [ 48.940026][ T5746] Bluetooth: hci2: command tx timeout [ 48.940161][ T5743] Bluetooth: hci0: command tx timeout [ 48.950076][ T5743] Bluetooth: hci1: command tx timeout [ 49.030085][ T5743] Bluetooth: hci3: command tx timeout [ 49.418417][ T5817] usb 6-1: No union descriptors [ 49.424018][ T5817] usb 6-1: USB disconnect, device number 2 [ 49.442515][ T5931] Bluetooth: MGMT ver 1.23 [ 49.528329][ T5943] netlink: 'syz.3.19': attribute type 2 has an invalid length. [ 49.679557][ T41] kauditd_printk_skb: 76 callbacks suppressed [ 49.679569][ T41] audit: type=1400 audit(1782256137.553:244): avc: denied { append } for pid=5955 comm="syz.2.24" name="cec2" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.688901][ T41] audit: type=1400 audit(1782256137.563:245): avc: denied { ioctl } for pid=5955 comm="syz.2.24" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x2202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.699449][ T41] audit: type=1400 audit(1782256137.573:246): avc: denied { connect } for pid=5952 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.759275][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 49.763597][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 49.780118][ T5817] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.793062][ T5966] xt_HMARK: spi-set and port-set can't be combined [ 49.832149][ T41] audit: type=1400 audit(1782256137.713:247): avc: denied { map_read map_write } for pid=5967 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.840880][ T41] audit: type=1400 audit(1782256137.713:248): avc: denied { write } for pid=5967 comm="syz.3.27" name="001" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.861232][ T41] audit: type=1400 audit(1782256137.743:249): avc: denied { ioctl } for pid=5970 comm="syz.3.28" path="socket:[11566]" dev="sockfs" ino=11566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.892854][ T41] audit: type=1400 audit(1782256137.773:250): avc: denied { write } for pid=5972 comm="syz.3.29" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.918488][ T41] audit: type=1400 audit(1782256137.793:251): avc: denied { read } for pid=5974 comm="syz.3.30" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 49.928288][ T41] audit: type=1400 audit(1782256137.793:252): avc: denied { open } for pid=5974 comm="syz.3.30" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 49.931611][ T5817] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 49.940985][ T5817] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 49.944150][ T5817] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 49.947321][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.951911][ T5933] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.956787][ T5817] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 50.056301][ T41] audit: type=1400 audit(1782256137.933:253): avc: denied { write } for pid=5985 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.135701][ T5994] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 50.177608][ T5817] usb 6-1: USB disconnect, device number 3 [ 50.290036][ T5994] block nbd3: server does not support multiple connections per device. [ 50.293404][ T5994] block nbd3: shutting down sockets [ 50.413822][ T6002] FAULT_INJECTION: forcing a failure. [ 50.413822][ T6002] name failslab, interval 1, probability 0, space 0, times 1 [ 50.418871][ T6002] CPU: 3 UID: 0 PID: 6002 Comm: syz.0.39 Not tainted syzkaller #0 PREEMPT(full) [ 50.418892][ T6002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.418901][ T6002] Call Trace: [ 50.418907][ T6002] [ 50.418914][ T6002] dump_stack_lvl+0x100/0x190 [ 50.418939][ T6002] should_fail_ex.cold+0x5/0xa [ 50.418958][ T6002] ? fs_reclaim_acquire+0x70/0x100 [ 50.418980][ T6002] should_failslab+0xc2/0x120 [ 50.419001][ T6002] __kmalloc_noprof+0xfc/0x820 [ 50.419019][ T6002] ? rcu_is_watching+0x12/0xc0 [ 50.419043][ T6002] ? tomoyo_realpath_from_path+0xb6/0x690 [ 50.419065][ T6002] tomoyo_realpath_from_path+0xb6/0x690 [ 50.419085][ T6002] tomoyo_path_number_perm+0x23c/0x580 [ 50.419110][ T6002] ? tomoyo_path_number_perm+0x22e/0x580 [ 50.419136][ T6002] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 50.419166][ T6002] ? preempt_count_add+0x76/0x150 [ 50.419191][ T6002] ? rcu_is_watching+0x12/0xc0 [ 50.419214][ T6002] ? __fget_files+0x215/0x3d0 [ 50.419230][ T6002] ? hook_file_ioctl_common+0x140/0x440 [ 50.419251][ T6002] ? lock_release+0x24d/0x310 [ 50.419272][ T6002] ? __fget_files+0x21f/0x3d0 [ 50.419287][ T6002] security_file_ioctl+0xd3/0x230 [ 50.419303][ T6002] __x64_sys_ioctl+0xb7/0x210 [ 50.419325][ T6002] do_syscall_64+0x115/0x870 [ 50.419349][ T6002] ? clear_bhb_loop+0x40/0x90 [ 50.419368][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.419383][ T6002] RIP: 0033:0x7f4aebb9ce59 [ 50.419396][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.419411][ T6002] RSP: 002b:00007f4aec9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.419428][ T6002] RAX: ffffffffffffffda RBX: 00007f4aebe15fa0 RCX: 00007f4aebb9ce59 [ 50.419440][ T6002] RDX: 0000200000000940 RSI: 0000000000004b72 RDI: 0000000000000003 [ 50.419449][ T6002] RBP: 00007f4aec9ec090 R08: 0000000000000000 R09: 0000000000000000 [ 50.419458][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.419467][ T6002] R13: 00007f4aebe16038 R14: 00007f4aebe15fa0 R15: 00007ffe85622c88 [ 50.419481][ T6002] [ 50.419488][ T6002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 50.550016][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 50.587736][ T6006] netlink: 92 bytes leftover after parsing attributes in process `syz.0.41'. [ 50.592023][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 50.702362][ T10] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 50.714340][ T10] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 50.718544][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 50.723554][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.731232][ T6027] overlay: ./file1 is not a directory [ 50.735482][ T6027] netlink: 'syz.1.48': attribute type 1 has an invalid length. [ 50.738746][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.48'. [ 50.762047][ T5886] hid-generic 0362:07FF:7FFFFFFF.0002: item fetching failed at offset 0/2 [ 50.770041][ T5886] hid-generic 0362:07FF:7FFFFFFF.0002: probe with driver hid-generic failed with error -22 [ 50.828803][ T6036] netlink: 44 bytes leftover after parsing attributes in process `syz.2.53'. [ 50.933364][ T6000] dns_resolver: Unsupported content type (234) [ 50.938033][ T29] usb 8-1: USB disconnect, device number 3 [ 51.020289][ T5743] Bluetooth: hci2: command tx timeout [ 51.020655][ T5746] Bluetooth: hci1: command tx timeout [ 51.100118][ T5746] Bluetooth: hci3: command tx timeout [ 51.436835][ T6079] FAULT_INJECTION: forcing a failure. [ 51.436835][ T6079] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.441103][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(full) [ 51.441117][ T6079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.441123][ T6079] Call Trace: [ 51.441127][ T6079] [ 51.441131][ T6079] dump_stack_lvl+0x100/0x190 [ 51.441148][ T6079] should_fail_ex.cold+0x5/0xa [ 51.441161][ T6079] _copy_from_user+0x2e/0xd0 [ 51.441177][ T6079] vt_ioctl+0xd6d/0x3110 [ 51.441187][ T6079] ? __pfx_vt_ioctl+0x10/0x10 [ 51.441196][ T6079] ? tomoyo_path_number_perm+0x28f/0x580 [ 51.441214][ T6079] ? lock_release+0x24d/0x310 [ 51.441229][ T6079] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.441241][ T6079] ? __pfx_vt_ioctl+0x10/0x10 [ 51.441250][ T6079] tty_ioctl+0x26a/0x1640 [ 51.441264][ T6079] ? __pfx_tty_ioctl+0x10/0x10 [ 51.441276][ T6079] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 51.441289][ T6079] ? rcu_is_watching+0x12/0xc0 [ 51.441305][ T6079] ? hook_file_ioctl_common+0x140/0x440 [ 51.441320][ T6079] ? selinux_file_ioctl+0x13b/0x290 [ 51.441330][ T6079] ? selinux_file_ioctl+0xb6/0x290 [ 51.441341][ T6079] ? __pfx_tty_ioctl+0x10/0x10 [ 51.441353][ T6079] __x64_sys_ioctl+0x18e/0x210 [ 51.441368][ T6079] do_syscall_64+0x115/0x870 [ 51.441384][ T6079] ? clear_bhb_loop+0x40/0x90 [ 51.441395][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.441410][ T6079] RIP: 0033:0x7f4aebb9ce59 [ 51.441418][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.441428][ T6079] RSP: 002b:00007f4aec9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.441439][ T6079] RAX: ffffffffffffffda RBX: 00007f4aebe15fa0 RCX: 00007f4aebb9ce59 [ 51.441445][ T6079] RDX: 0000200000000940 RSI: 0000000000004b72 RDI: 0000000000000003 [ 51.441451][ T6079] RBP: 00007f4aec9ec090 R08: 0000000000000000 R09: 0000000000000000 [ 51.441457][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.441463][ T6079] R13: 00007f4aebe16038 R14: 00007f4aebe15fa0 R15: 00007ffe85622c88 [ 51.441472][ T6079] [ 51.456401][ T6081] input: syz1 as /devices/virtual/input/input5 [ 51.508142][ T6082] overlayfs: failed to resolve './file0': -2 [ 51.522641][ T6082] openvswitch: netlink: IP tunnel dst address not specified [ 51.587393][ T6103] Zero length message leads to an empty skb [ 51.658238][ T6110] overlayfs: failed to verify upper (21/file1, ino=127, err=-116) [ 51.661052][ T6110] overlayfs: failed to verify index dir 'upper' xattr [ 51.663084][ T6110] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 51.701115][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.3.83'. [ 51.719246][ T6116] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 51.776196][ T6123] overlay: ./file0 is not a directory [ 51.779413][ T6123] overlay: ./file0 is not a directory [ 51.782501][ T6123] netlink: 72 bytes leftover after parsing attributes in process `syz.3.87'. [ 51.789569][ T6125] tipc: Invalid UDP bearer configuration [ 51.789583][ T6125] tipc: Enabling of bearer rejected, failed to enable media [ 51.827127][ T6129] FAULT_INJECTION: forcing a failure. [ 51.827127][ T6129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.831957][ T6129] CPU: 2 UID: 0 PID: 6129 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT(full) [ 51.831972][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.831978][ T6129] Call Trace: [ 51.831981][ T6129] [ 51.831989][ T6129] dump_stack_lvl+0x100/0x190 [ 51.832006][ T6129] should_fail_ex.cold+0x5/0xa [ 51.832020][ T6129] _copy_to_user+0x32/0xd0 [ 51.832036][ T6129] con_font_op+0xd7d/0x1040 [ 51.832051][ T6129] ? rcu_is_watching+0x12/0xc0 [ 51.832067][ T6129] ? __pfx_con_font_op+0x10/0x10 [ 51.832081][ T6129] ? rcu_is_watching+0x12/0xc0 [ 51.832095][ T6129] ? __might_fault+0xc5/0x140 [ 51.832104][ T6129] ? lock_release+0x24d/0x310 [ 51.832118][ T6129] vt_ioctl+0xdd1/0x3110 [ 51.832128][ T6129] ? __pfx_vt_ioctl+0x10/0x10 [ 51.832136][ T6129] ? tomoyo_path_number_perm+0x28f/0x580 [ 51.832154][ T6129] ? lock_release+0x24d/0x310 [ 51.832167][ T6129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.832194][ T6129] ? __pfx_vt_ioctl+0x10/0x10 [ 51.832204][ T6129] tty_ioctl+0x26a/0x1640 [ 51.832217][ T6129] ? __pfx_tty_ioctl+0x10/0x10 [ 51.832230][ T6129] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 51.832243][ T6129] ? rcu_is_watching+0x12/0xc0 [ 51.832258][ T6129] ? hook_file_ioctl_common+0x140/0x440 [ 51.832273][ T6129] ? selinux_file_ioctl+0x13b/0x290 [ 51.832284][ T6129] ? selinux_file_ioctl+0xb6/0x290 [ 51.832294][ T6129] ? __pfx_tty_ioctl+0x10/0x10 [ 51.832307][ T6129] __x64_sys_ioctl+0x18e/0x210 [ 51.832321][ T6129] do_syscall_64+0x115/0x870 [ 51.832342][ T6129] ? clear_bhb_loop+0x40/0x90 [ 51.832354][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.832364][ T6129] RIP: 0033:0x7fb6f0b9ce59 [ 51.832372][ T6129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.832381][ T6129] RSP: 002b:00007fb6f1a84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.832392][ T6129] RAX: ffffffffffffffda RBX: 00007fb6f0e15fa0 RCX: 00007fb6f0b9ce59 [ 51.832398][ T6129] RDX: 0000200000000940 RSI: 0000000000004b72 RDI: 0000000000000003 [ 51.832404][ T6129] RBP: 00007fb6f1a84090 R08: 0000000000000000 R09: 0000000000000000 [ 51.832410][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.832416][ T6129] R13: 00007fb6f0e16038 R14: 00007fb6f0e15fa0 R15: 00007ffe87e8c128 [ 51.832425][ T6129] [ 51.839989][ T5885] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 51.996717][ T6136] fuse: Bad value for 'fd' [ 52.071158][ T5885] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 52.074417][ T5885] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 52.077258][ T5885] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 52.080066][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.287377][ T6101] dns_resolver: Unsupported content type (234) [ 52.293200][ T29] usb 7-1: USB disconnect, device number 3 [ 52.691479][ T6131] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.693431][ T6131] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.695999][ T6131] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.698449][ T6131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 52.700764][ T6131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.703422][ T6131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.706261][ T6131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.708230][ T6131] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.710637][ T6131] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.713077][ T6131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.714951][ T6131] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.717183][ T6131] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.722589][ T6144] overlay: Unknown parameter 'volatile\' [ 52.759707][ T6158] FAULT_INJECTION: forcing a failure. [ 52.759707][ T6158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.765190][ T6158] CPU: 1 UID: 0 PID: 6158 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT(full) [ 52.765211][ T6158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.765221][ T6158] Call Trace: [ 52.765226][ T6158] [ 52.765233][ T6158] dump_stack_lvl+0x100/0x190 [ 52.765258][ T6158] should_fail_ex.cold+0x5/0xa [ 52.765280][ T6158] should_fail_alloc_page+0xeb/0x140 [ 52.765302][ T6158] prepare_alloc_pages+0x1f0/0x5f0 [ 52.765325][ T6158] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 52.765350][ T6158] ? unwind_next_frame+0x3be/0x2090 [ 52.765367][ T6158] ? rcu_is_watching+0x12/0xc0 [ 52.765393][ T6158] ? rcu_is_watching+0x12/0xc0 [ 52.765417][ T6158] ? __update_page_owner_handle+0x3c2/0x550 [ 52.765437][ T6158] ? rcu_is_watching+0x12/0xc0 [ 52.765460][ T6158] ? __update_page_owner_handle+0x3c2/0x550 [ 52.765479][ T6158] ? lock_release+0x24d/0x310 [ 52.765499][ T6158] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 52.765519][ T6158] ? rcu_is_watching+0x12/0xc0 [ 52.765543][ T6158] ? __page_table_check_zero+0x333/0x410 [ 52.765562][ T6158] ? rcu_is_watching+0x12/0xc0 [ 52.765587][ T6158] ? desc_read+0x2e2/0x380 [ 52.765605][ T6158] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.765623][ T6158] ? policy_nodemask+0xed/0x4f0 [ 52.765642][ T6158] alloc_pages_mpol+0x1fb/0x540 [ 52.765663][ T6158] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 52.765685][ T6158] folio_alloc_mpol_noprof+0x36/0x260 [ 52.765707][ T6158] vma_alloc_folio_noprof+0xed/0x1d0 [ 52.765730][ T6158] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 52.765748][ T6158] ? rcu_is_watching+0x12/0xc0 [ 52.765764][ T6158] do_anonymous_page+0xb2b/0x2080 [ 52.765781][ T6158] ? rcu_read_unlock+0x2d/0xb0 [ 52.765791][ T6158] __handle_mm_fault+0x1d2c/0x2a00 [ 52.765811][ T6158] ? mt_find+0x45e/0x8e0 [ 52.765826][ T6158] ? __pfx___handle_mm_fault+0x10/0x10 [ 52.765846][ T6158] ? __pfx_mt_find+0x10/0x10 [ 52.765863][ T6158] ? find_vma+0xbf/0x140 [ 52.765880][ T6158] ? __pfx_find_vma+0x10/0x10 [ 52.765898][ T6158] handle_mm_fault+0x37b/0xa30 [ 52.765922][ T6158] do_user_addr_fault+0x74c/0x12f0 [ 52.765940][ T6158] exc_page_fault+0x6f/0xd0 [ 52.765955][ T6158] asm_exc_page_fault+0x26/0x30 [ 52.765965][ T6158] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 52.765982][ T6158] Code: 89 ee 48 89 ef e8 c1 43 09 fd 4d 85 ff 75 26 e8 d7 49 09 fd 89 de 4c 89 e7 e8 5d c8 79 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 b1 49 09 fd 48 89 d8 5b 5d 41 [ 52.765991][ T6158] RSP: 0018:ffffc900016bfa08 EFLAGS: 00050246 [ 52.766001][ T6158] RAX: 0000000000000001 RBX: 0000000000002000 RCX: 0000000000001540 [ 52.766007][ T6158] RDX: 0000000000000001 RSI: ffff88805f400ac0 RDI: 0000200000001000 [ 52.766013][ T6158] RBP: 0000200000000540 R08: 0000000000000000 R09: ffffed100be803ff [ 52.766020][ T6158] R10: ffff88805f401fff R11: 0000000000000000 R12: ffff88805f400000 [ 52.766026][ T6158] R13: 0000200000002540 R14: 00007ffffffff000 R15: 0000000000000000 [ 52.766034][ T6158] ? _copy_to_user+0x93/0xd0 [ 52.766049][ T6158] con_font_op+0xd7d/0x1040 [ 52.766064][ T6158] ? rcu_is_watching+0x12/0xc0 [ 52.766079][ T6158] ? __pfx_con_font_op+0x10/0x10 [ 52.766093][ T6158] ? rcu_is_watching+0x12/0xc0 [ 52.766107][ T6158] ? __might_fault+0xc5/0x140 [ 52.766116][ T6158] ? lock_release+0x24d/0x310 [ 52.766129][ T6158] vt_ioctl+0xdd1/0x3110 [ 52.766139][ T6158] ? __pfx_vt_ioctl+0x10/0x10 [ 52.766147][ T6158] ? tomoyo_path_number_perm+0x28f/0x580 [ 52.766164][ T6158] ? lock_release+0x24d/0x310 [ 52.766178][ T6158] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.766190][ T6158] ? __pfx_vt_ioctl+0x10/0x10 [ 52.766199][ T6158] tty_ioctl+0x26a/0x1640 [ 52.766212][ T6158] ? __pfx_tty_ioctl+0x10/0x10 [ 52.766225][ T6158] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 52.766237][ T6158] ? rcu_is_watching+0x12/0xc0 [ 52.766253][ T6158] ? hook_file_ioctl_common+0x140/0x440 [ 52.766268][ T6158] ? selinux_file_ioctl+0x13b/0x290 [ 52.766278][ T6158] ? selinux_file_ioctl+0xb6/0x290 [ 52.766289][ T6158] ? __pfx_tty_ioctl+0x10/0x10 [ 52.766301][ T6158] __x64_sys_ioctl+0x18e/0x210 [ 52.766316][ T6158] do_syscall_64+0x115/0x870 [ 52.766336][ T6158] ? clear_bhb_loop+0x40/0x90 [ 52.766348][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.766358][ T6158] RIP: 0033:0x7f4aebb9ce59 [ 52.766366][ T6158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.766375][ T6158] RSP: 002b:00007f4aec9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.766384][ T6158] RAX: ffffffffffffffda RBX: 00007f4aebe15fa0 RCX: 00007f4aebb9ce59 [ 52.766391][ T6158] RDX: 0000200000000940 RSI: 0000000000004b72 RDI: 0000000000000003 [ 52.766396][ T6158] RBP: 00007f4aec9ec090 R08: 0000000000000000 R09: 0000000000000000 [ 52.766402][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.766408][ T6158] R13: 00007f4aebe16038 R14: 00007f4aebe15fa0 R15: 00007ffe85622c88 [ 52.766417][ T6158] [ 52.776516][ T6159] syz.1.100 uses obsolete (PF_INET,SOCK_PACKET) [ 52.901066][ T6172] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 52.951095][ T6176] Unknown options in mask b7f2 [ 53.878918][ T6185] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.881117][ T6185] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.883036][ T6185] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.885000][ T6185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.917970][ T6205] syzkaller0: entered promiscuous mode [ 53.919838][ T6205] syzkaller0: entered allmulticast mode [ 53.926799][ T6205] simple: basic_1 [ 53.928454][ T6205] simple: basic_2 [ 53.930052][ T6205] simple: basic_3 [ 53.931619][ T6205] simple: basic_4 [ 53.932941][ T6205] simple: basic_5 [ 53.934117][ T6205] simple: basic_6 [ 53.935264][ T6205] simple: basic_7 [ 53.936394][ T6205] simple: basic_8 [ 53.937779][ T6205] simple: basic_9 [ 53.939184][ T6205] simple: basic_10 [ 53.940794][ T6205] simple: basic_11 [ 53.942235][ T6205] simple: basic_12 [ 53.943665][ T6205] simple: basic_13 [ 53.944837][ T6205] simple: basic_14 [ 53.945957][ T6205] simple: basic_15 [ 53.946677][ T6207] syz.1.116 (6207): attempted to duplicate a private mapping with mremap. This is not supported. [ 53.947096][ T6205] simple: basic_16 [ 53.951563][ T6205] simple: basic_17 [ 53.952729][ T6205] 0: reclassify loop, rule prio 0, protocol 800 [ 53.972188][ T6209] tmpfs: Bad value for 'mpol' [ 53.996350][ T6209] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 54.106144][ T6213] kvm: kvm [6212]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 54.109612][ T6213] kvm: kvm [6212]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 54.139953][ T1354] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 54.192275][ T6213] __nla_validate_parse: 4 callbacks suppressed [ 54.192287][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.119'. [ 54.292066][ T1354] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 54.295799][ T1354] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 54.298650][ T1354] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 54.301758][ T1354] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.312568][ T6240] binder: 6239:6240 unknown command 0 [ 54.314337][ T6240] binder: 6239:6240 ioctl c0306201 2000000001c0 returned -22 [ 54.323356][ T6245] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 54.325479][ T6245] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.328050][ T6245] vhci_hcd vhci_hcd.0: Device attached [ 54.332553][ T6247] vhci_hcd: unknown pdu 2 [ 54.334668][ T13] vhci_hcd vhci_hcd.0: stop threads [ 54.338093][ T13] vhci_hcd vhci_hcd.0: release socket [ 54.340616][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 54.448081][ T6260] program syz.1.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.454551][ T6260] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.510489][ T6187] dns_resolver: Unsupported content type (234) [ 54.524951][ T5886] usb 7-1: USB disconnect, device number 4 [ 54.574752][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 54.585254][ T6264] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 54.588218][ T6264] netlink: 228 bytes leftover after parsing attributes in process `syz.1.133'. [ 54.698359][ T41] kauditd_printk_skb: 93 callbacks suppressed [ 54.698375][ T41] audit: type=1400 audit(1782256142.573:347): avc: denied { bind } for pid=6270 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.709113][ T41] audit: type=1326 audit(1782256142.573:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.3.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b27d9ce59 code=0x7fc00000 [ 54.724113][ T6278] FAULT_INJECTION: forcing a failure. [ 54.724113][ T6278] name failslab, interval 1, probability 0, space 0, times 0 [ 54.728706][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: syz.3.137 Not tainted syzkaller #0 PREEMPT(full) [ 54.728726][ T6278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.728735][ T6278] Call Trace: [ 54.728740][ T6278] [ 54.728745][ T6278] dump_stack_lvl+0x100/0x190 [ 54.728771][ T6278] should_fail_ex.cold+0x5/0xa [ 54.728789][ T6278] ? fs_reclaim_acquire+0x70/0x100 [ 54.728810][ T6278] should_failslab+0xc2/0x120 [ 54.728830][ T6278] __kmalloc_noprof+0xfc/0x820 [ 54.728848][ T6278] ? rcu_is_watching+0x12/0xc0 [ 54.728872][ T6278] ? tomoyo_realpath_from_path+0xb6/0x690 [ 54.728893][ T6278] tomoyo_realpath_from_path+0xb6/0x690 [ 54.728912][ T6278] tomoyo_path_number_perm+0x23c/0x580 [ 54.728938][ T6278] ? tomoyo_path_number_perm+0x22e/0x580 [ 54.728965][ T6278] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 54.728993][ T6278] ? preempt_count_add+0x76/0x150 [ 54.729015][ T6278] ? rcu_is_watching+0x12/0xc0 [ 54.729038][ T6278] ? __fget_files+0x215/0x3d0 [ 54.729051][ T6278] ? hook_file_ioctl_common+0x140/0x440 [ 54.729072][ T6278] ? lock_release+0x24d/0x310 [ 54.729092][ T6278] ? __fget_files+0x21f/0x3d0 [ 54.729105][ T6278] security_file_ioctl+0xd3/0x230 [ 54.729117][ T6278] __x64_sys_ioctl+0xb7/0x210 [ 54.729132][ T6278] do_syscall_64+0x115/0x870 [ 54.729148][ T6278] ? clear_bhb_loop+0x40/0x90 [ 54.729159][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.729170][ T6278] RIP: 0033:0x7f9b27d9ce59 [ 54.729178][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.729188][ T6278] RSP: 002b:00007f9b28d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.729198][ T6278] RAX: ffffffffffffffda RBX: 00007f9b28015fa0 RCX: 00007f9b27d9ce59 [ 54.729205][ T6278] RDX: 0000000000000000 RSI: 00000000401845e0 RDI: 0000000000000003 [ 54.729211][ T6278] RBP: 00007f9b28d43090 R08: 0000000000000000 R09: 0000000000000000 [ 54.729217][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.729222][ T6278] R13: 00007f9b28016038 R14: 00007f9b28015fa0 R15: 00007ffd05379108 [ 54.729231][ T6278] [ 54.729236][ T6278] ERROR: Out of memory at tomoyo_realpath_from_path. [ 54.835932][ T41] audit: type=1400 audit(1782256142.713:349): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.891075][ T41] audit: type=1400 audit(1782256142.773:350): avc: denied { mounton } for pid=6286 comm="syz.0.141" path="/31/file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.950697][ T6288] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 54.957773][ T6288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.970195][ T6288] bond1: (slave veth3): Enslaving as an active interface with a down link [ 54.978136][ T6288] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 54.980851][ T6288] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 55.016780][ T41] audit: type=1400 audit(1782256142.893:351): avc: denied { create } for pid=6290 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.022848][ T41] audit: type=1400 audit(1782256142.893:352): avc: denied { setopt } for pid=6290 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.029028][ T41] audit: type=1400 audit(1782256142.893:353): avc: denied { connect } for pid=6290 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.036454][ T6292] orangefs_devreq_open: device cannot be opened in blocking mode [ 55.038396][ T41] audit: type=1400 audit(1782256142.913:354): avc: denied { read } for pid=6286 comm="syz.0.141" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 55.053851][ T6294] kvm: kvm [6293]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000074) [ 55.070372][ T41] audit: type=1400 audit(1782256142.953:355): avc: denied { write } for pid=6296 comm="syz.3.140" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.081299][ T6300] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 55.085379][ T41] audit: type=1400 audit(1782256142.963:356): avc: denied { ioctl } for pid=6290 comm="syz.1.142" path="socket:[12303]" dev="sockfs" ino=12303 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.128355][ T6304] binder: BINDER_SET_CONTEXT_MGR already set [ 55.130533][ T6304] binder: 6303:6304 ioctl 4018620d 200000000040 returned -16 [ 55.174557][ T6312] FAULT_INJECTION: forcing a failure. [ 55.174557][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 55.180087][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 55.181158][ T6312] CPU: 2 UID: 0 PID: 6312 Comm: syz.0.147 Not tainted syzkaller #0 PREEMPT(full) [ 55.181194][ T6312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.181205][ T6312] Call Trace: [ 55.181211][ T6312] [ 55.181217][ T6312] dump_stack_lvl+0x100/0x190 [ 55.181243][ T6312] should_fail_ex.cold+0x5/0xa [ 55.181263][ T6312] ? fs_reclaim_acquire+0x70/0x100 [ 55.181286][ T6312] should_failslab+0xc2/0x120 [ 55.181308][ T6312] __kmalloc_noprof+0xfc/0x820 [ 55.181325][ T6312] ? tomoyo_encode2+0xfb/0x3c0 [ 55.181346][ T6312] tomoyo_encode2+0xfb/0x3c0 [ 55.181366][ T6312] tomoyo_encode+0x29/0x50 [ 55.181383][ T6312] tomoyo_realpath_from_path+0x18c/0x690 [ 55.181404][ T6312] tomoyo_path_number_perm+0x23c/0x580 [ 55.181430][ T6312] ? tomoyo_path_number_perm+0x22e/0x580 [ 55.181458][ T6312] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 55.181489][ T6312] ? preempt_count_add+0x76/0x150 [ 55.181513][ T6312] ? rcu_is_watching+0x12/0xc0 [ 55.181538][ T6312] ? __fget_files+0x215/0x3d0 [ 55.181553][ T6312] ? hook_file_ioctl_common+0x140/0x440 [ 55.181574][ T6312] ? lock_release+0x24d/0x310 [ 55.181596][ T6312] ? __fget_files+0x21f/0x3d0 [ 55.181613][ T6312] security_file_ioctl+0xd3/0x230 [ 55.181632][ T6312] __x64_sys_ioctl+0xb7/0x210 [ 55.181654][ T6312] do_syscall_64+0x115/0x870 [ 55.181685][ T6312] ? clear_bhb_loop+0x40/0x90 [ 55.181703][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.181723][ T6312] RIP: 0033:0x7f4aebb9ce59 [ 55.181737][ T6312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.181751][ T6312] RSP: 002b:00007f4aec9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.181769][ T6312] RAX: ffffffffffffffda RBX: 00007f4aebe15fa0 RCX: 00007f4aebb9ce59 [ 55.181779][ T6312] RDX: 0000000000000000 RSI: 00000000401845e0 RDI: 0000000000000003 [ 55.181789][ T6312] RBP: 00007f4aec9ec090 R08: 0000000000000000 R09: 0000000000000000 [ 55.181799][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.181807][ T6312] R13: 00007f4aebe16038 R14: 00007f4aebe15fa0 R15: 00007ffe85622c88 [ 55.181822][ T6312] [ 55.181878][ T6312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.898561][ T6351] xt_hashlimit: invalid rate [ 55.898562][ T6352] xt_hashlimit: invalid rate [ 55.900005][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout [ 55.900051][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 55.900068][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.961853][ T6365] netlink: 44 bytes leftover after parsing attributes in process `syz.2.162'. [ 55.978160][ T6365] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 56.018741][ T6372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6372 comm=syz.2.165 [ 56.052731][ T6374] input: syz1 as /devices/virtual/input/input6 [ 56.156925][ T6379] qnx6: unable to read the first superblock [ 56.158865][ T6379] qnx6: unable to read the first superblock [ 56.160989][ T6379] qnx6: unable to read the first superblock [ 56.164891][ T6379] macsec1: entered promiscuous mode [ 56.166518][ T6379] macsec1: entered allmulticast mode [ 56.170567][ T6379] qnx6: unable to read the first superblock [ 56.171997][ T6381] macsec2: entered promiscuous mode [ 56.172692][ T6379] qnx6: unable to read the first superblock [ 56.174372][ T6381] macsec2: entered allmulticast mode [ 56.176160][ T6379] qnx6: unable to read the first superblock [ 56.290419][ T5885] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.314303][ T6401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.316573][ T6401] IPv6: NLM_F_CREATE should be set when creating new route [ 56.344144][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.346518][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.389140][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.396144][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.445730][ T5885] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.450798][ T5885] usb 8-1: config 0 has no interfaces? [ 56.452927][ T5885] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 56.455878][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.459455][ T5885] usb 8-1: config 0 descriptor?? [ 56.472749][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.475807][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.479085][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.484248][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.532605][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.179'. [ 57.042484][ T6489] netlink: 27 bytes leftover after parsing attributes in process `syz.0.191'. [ 57.046524][ T6489] gfs2: path_lookup on c::: returned error -2 [ 57.115841][ T6496] could not allocate digest TFM handle sha384-generic [ 57.149149][ T6506] process 'syz.0.193' launched './file0' with NULL argv: empty string added [ 57.201326][ T6515] syzkaller0: entered promiscuous mode [ 57.203092][ T6515] syzkaller0: entered allmulticast mode [ 57.205333][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 57.259980][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.438220][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 57.659956][ T6413] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.812949][ T6413] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 57.816603][ T6413] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 57.820192][ T6413] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 57.823778][ T6413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.828501][ T6541] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 57.832351][ T6413] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 57.980397][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.980440][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 57.980484][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.053688][ T6413] usb 5-1: USB disconnect, device number 3 [ 58.484439][ T6567] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 58.741578][ T6585] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 58.752576][ T6585] bond2: entered promiscuous mode [ 58.754897][ T6585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.760996][ T6585] netlink: 52 bytes leftover after parsing attributes in process `syz.1.214'. [ 58.798924][ T5746] Bluetooth: hci0: unexpected event for opcode 0x080f [ 58.859031][ T6595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.218'. [ 58.870874][ T6597] netlink: 'syz.1.219': attribute type 29 has an invalid length. [ 58.957341][ T6610] netlink: 'syz.2.225': attribute type 10 has an invalid length. [ 58.962075][ T6610] team0: entered promiscuous mode [ 58.964161][ T6610] team_slave_0: entered promiscuous mode [ 58.966104][ T6610] team_slave_1: entered promiscuous mode [ 58.968428][ T6610] team0: entered allmulticast mode [ 58.971756][ T6610] team_slave_0: entered allmulticast mode [ 58.974075][ T6610] team_slave_1: entered allmulticast mode [ 58.976957][ T6610] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.980023][ T6610] bridge0: port 3(team0) entered blocking state [ 58.982638][ T6610] bridge0: port 3(team0) entered disabled state [ 59.010350][ T5885] usb 8-1: string descriptor 0 read error: -71 [ 59.012933][ T5885] usb 8-1: USB disconnect, device number 4 [ 59.126065][ T6636] xt_socket: unknown flags 0xc [ 59.151538][ T6641] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 59.153114][ T6639] lo: entered allmulticast mode [ 59.157956][ T6639] tunl0: entered allmulticast mode [ 59.161342][ T6639] gre0: entered allmulticast mode [ 59.164693][ T6639] gretap0: entered allmulticast mode [ 59.167943][ T6639] erspan0: entered allmulticast mode [ 59.171317][ T6639] ip_vti0: entered allmulticast mode [ 59.174093][ T6639] ip6_vti0: entered allmulticast mode [ 59.176807][ T6639] sit0: entered allmulticast mode [ 59.179445][ T6639] ip6tnl0: entered allmulticast mode [ 59.182296][ T6639] ip6gre0: entered allmulticast mode [ 59.185053][ T6639] syz_tun: entered allmulticast mode [ 59.187721][ T6639] ip6gretap0: entered allmulticast mode [ 59.190906][ T6639] bridge0: entered allmulticast mode [ 59.195236][ T6642] bond0: entered promiscuous mode [ 59.197093][ T6642] bond_slave_0: entered promiscuous mode [ 59.198974][ T6642] bond_slave_1: entered promiscuous mode [ 59.201757][ T6642] gretap0: entered promiscuous mode [ 59.204663][ T6642] hsr1: entered promiscuous mode [ 59.245707][ T60] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 59.269270][ T6651] __nla_validate_parse: 3 callbacks suppressed [ 59.269285][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.240'. [ 59.292855][ T6653] netlink: 'syz.3.240': attribute type 10 has an invalid length. [ 59.295183][ T6653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.240'. [ 59.298243][ T6653] team0: entered promiscuous mode [ 59.300090][ T6653] team_slave_0: entered promiscuous mode [ 59.301927][ T6653] team_slave_1: entered promiscuous mode [ 59.303914][ T6653] team0: entered allmulticast mode [ 59.305722][ T6653] team_slave_0: entered allmulticast mode [ 59.307490][ T6653] team_slave_1: entered allmulticast mode [ 59.311105][ T6653] bridge0: port 3(team0) entered blocking state [ 59.313234][ T6653] bridge0: port 3(team0) entered disabled state [ 59.316028][ T6653] bridge0: port 3(team0) entered blocking state [ 59.317950][ T6653] bridge0: port 3(team0) entered forwarding state [ 59.352348][ T6659] binfmt_misc: register: failed to install interpreter file ./file1 [ 59.612447][ T6662] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 59.615697][ T6662] netlink: 'syz.3.244': attribute type 2 has an invalid length. [ 59.647622][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 59.679968][ T10] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 59.755987][ T5746] Bluetooth: hci0: ACL packet for unknown connection handle 958 [ 59.760744][ T41] kauditd_printk_skb: 70 callbacks suppressed [ 59.760757][ T41] audit: type=1400 audit(1782256147.643:427): avc: denied { prog_run } for pid=6687 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.799581][ T41] audit: type=1400 audit(1782256147.673:428): avc: denied { map } for pid=6693 comm="syz.1.255" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 59.808909][ T41] audit: type=1400 audit(1782256147.673:429): avc: denied { execute } for pid=6693 comm="syz.1.255" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 59.812872][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 59.816237][ T41] audit: type=1400 audit(1782256147.693:430): avc: denied { setopt } for pid=6688 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.830938][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.834090][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.836896][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.840389][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.843404][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 59.846182][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.851437][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 59.853327][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 59.855734][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 59.857395][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 59.859477][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 59.861951][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 59.963695][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 60.051686][ T41] audit: type=1400 audit(1782256147.933:431): avc: denied { read write } for pid=6668 comm="syz.0.247" name="cdc-wdm0" dev="devtmpfs" ino=2942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 60.058931][ T41] audit: type=1400 audit(1782256147.933:432): avc: denied { open } for pid=6668 comm="syz.0.247" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 60.060059][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.060089][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.069983][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.120466][ T6669] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 60.280438][ T29] usb 5-1: USB disconnect, device number 4 [ 60.386491][ T41] audit: type=1400 audit(1782256148.263:433): avc: denied { getopt } for pid=6713 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.676876][ T41] audit: type=1400 audit(1782256148.553:434): avc: denied { remount } for pid=6724 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.677652][ T6725] capability: warning: `syz.3.263' uses 32-bit capabilities (legacy support in use) [ 60.709399][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 60.714078][ T41] audit: type=1400 audit(1782256148.593:435): avc: denied { bind } for pid=6728 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.833305][ T41] audit: type=1400 audit(1782256148.713:436): avc: denied { read } for pid=6741 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.343322][ T6756] syzkaller0: entered promiscuous mode [ 61.344983][ T6756] syzkaller0: entered allmulticast mode [ 61.610337][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 61.610572][ T6743] overlayfs: statfs failed on './file0' [ 61.645697][ T6761] ======================================================= [ 61.645697][ T6761] WARNING: The mand mount option has been deprecated and [ 61.645697][ T6761] and is ignored by this kernel. Remove the mand [ 61.645697][ T6761] option from the mount to silence this warning. [ 61.645697][ T6761] ======================================================= [ 61.657802][ T6761] gfs2: not a GFS2 filesystem [ 61.693778][ T6764] dns_resolver: Unsupported content type (234) [ 61.739685][ T6768] sctp: [Deprecated]: syz.2.277 (pid 6768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.739685][ T6768] Use struct sctp_sack_info instead [ 61.960096][ T5886] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 62.010196][ T34] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 62.069997][ T6402] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.099952][ T5886] usb 5-1: device descriptor read/64, error -71 [ 62.140059][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.142151][ T34] usb 7-1: device descriptor read/64, error -71 [ 62.221152][ T6402] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.225453][ T6402] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.228765][ T6402] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.232547][ T6402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.236939][ T6785] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 62.243137][ T6402] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.340063][ T5886] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 62.379952][ T34] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 62.442836][ T6785] dns_resolver: Unsupported content type (234) [ 62.447472][ T29] usb 6-1: USB disconnect, device number 4 [ 62.469967][ T5886] usb 5-1: device descriptor read/64, error -71 [ 62.509974][ T34] usb 7-1: device descriptor read/64, error -71 [ 62.580188][ T5886] usb usb5-port1: attempt power cycle [ 62.620270][ T34] usb usb7-port1: attempt power cycle [ 62.775785][ T6795] warning: `syz.3.285' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.860114][ T5746] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 62.863489][ T5746] Bluetooth: hci0: Injecting HCI hardware error event [ 62.866355][ T5743] Bluetooth: hci0: hardware error 0x00 [ 62.931212][ T5886] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 62.950454][ T5886] usb 5-1: device descriptor read/8, error -71 [ 62.979984][ T34] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 63.004466][ T34] usb 7-1: device descriptor read/8, error -71 [ 63.174269][ T6817] x_tables: duplicate underflow at hook 2 [ 63.199964][ T5886] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 63.230706][ T5886] usb 5-1: device descriptor read/8, error -71 [ 63.240116][ T34] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 63.260794][ T34] usb 7-1: device descriptor read/8, error -71 [ 63.340117][ T5886] usb usb5-port1: unable to enumerate USB device [ 63.370236][ T34] usb usb7-port1: unable to enumerate USB device [ 63.469994][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 63.631084][ T29] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.634906][ T29] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 63.637899][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.640803][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.644651][ T6824] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 63.648818][ T29] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.850889][ T6824] dns_resolver: Unsupported content type (234) [ 63.853818][ T34] usb 8-1: USB disconnect, device number 5 [ 64.727473][ T6848] xt_cgroup: path and classid specified [ 64.730511][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 64.747734][ T6848] bond1: entered promiscuous mode [ 64.750190][ T6848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.757681][ T6849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.760475][ T6849] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 64.764474][ T6849] bond1: (slave sit1): Error -95 calling set_mac_address [ 64.775386][ T41] kauditd_printk_skb: 21 callbacks suppressed [ 64.775396][ T41] audit: type=1400 audit(1782256152.653:458): avc: denied { setopt } for pid=6855 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.950036][ T5743] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 67.869602][ T6898] syzkaller0: entered promiscuous mode [ 67.871500][ T6898] syzkaller0: entered allmulticast mode [ 67.874194][ T6898] tipc: Started in network mode [ 67.875840][ T6898] tipc: Node identity 069dd14b3949, cluster identity 4711 [ 67.878113][ T6898] tipc: Enabled bearer , priority 0 [ 67.885626][ T41] audit: type=1400 audit(1782256155.763:459): avc: denied { map } for pid=6897 comm="syz.1.310" path="socket:[15890]" dev="sockfs" ino=15890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 67.895736][ T6889] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 67.929127][ T6913] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.930855][ T41] audit: type=1804 audit(1782256155.813:460): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.305" name="/newroot/82/file0" dev="tmpfs" ino=462 res=1 errno=0 [ 67.935803][ T6913] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 67.939786][ T41] audit: type=1400 audit(1782256155.813:461): avc: denied { read } for pid=6900 comm="syz.0.311" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 67.941573][ T6902] sd 0:0:0:0: PR command failed: 1026 [ 67.950830][ T6902] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 67.951849][ T41] audit: type=1400 audit(1782256155.813:462): avc: denied { open } for pid=6900 comm="syz.0.311" path="/61/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 67.952921][ T6902] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 67.959728][ T41] audit: type=1400 audit(1782256155.813:463): avc: denied { ioctl } for pid=6900 comm="syz.0.311" path="/61/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70cf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 67.978566][ T41] audit: type=1400 audit(1782256155.853:464): avc: denied { execheap } for pid=6916 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 67.978774][ T6917] CIFS: VFS: UNC: path must begin with // or \\ [ 67.986776][ T6917] Malformed UNC in devname [ 67.986776][ T6917] [ 67.988840][ T6917] CIFS: VFS: Malformed UNC in devname [ 67.992228][ T41] audit: type=1400 audit(1782256155.873:465): avc: denied { listen } for pid=6900 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.037854][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 68.049678][ T6923] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 68.057312][ T6923] bond2 (unregistering): Released all slaves [ 68.060571][ T6926] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 68.065324][ T6926] program syz.2.318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.087075][ T6928] i2c i2c-1: dtv_property_pqemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. rocess_set: SET cmd 0x00000000 undefined [ 68.093360][ T41] audit: type=1400 audit(1782256155.973:466): avc: denied { write } for pid=6922 comm="syz.3.317" name="/" dev="9p" ino=72878995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.100250][ T41] audit: type=1400 audit(1782256155.973:467): avc: denied { write open } for pid=6922 comm="syz.3.317" path="/83/file0/bus" dev="9p" ino=72879089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.180011][ T6422] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 68.224731][ T6948] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 68.312127][ T6956] dns_resolver: Unsupported content type (234) [ 68.312376][ T6952] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 68.344878][ T6422] usb 6-1: Using ep0 maxpacket: 8 [ 68.349332][ T6422] usb 6-1: config 0 has no interfaces? [ 68.352317][ T6422] usb 6-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 68.356046][ T6422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.361622][ T6422] usb 6-1: config 0 descriptor?? [ 68.382465][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'. [ 68.408285][ T6966] openvswitch: netlink: Actions may not be safe on all matching packets [ 68.565097][ T6898] tipc: Resetting bearer [ 68.567263][ T6901] overlay: filesystem on ./file0 not supported as upperdir [ 68.574098][ T6898] tipc: Disabling bearer [ 68.622726][ T848] usb 6-1: USB disconnect, device number 5 [ 68.836914][ T6990] netlink: 3080 bytes leftover after parsing attributes in process `syz.2.339'. [ 68.837827][ T6991] overlay: filesystem on ./file0 not supported as upperdir [ 68.840505][ T6990] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.339'. [ 68.882550][ T6993] cgroup: Unknown subsys name 'cpuset' [ 69.121961][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.125227][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.128298][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.132150][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.134559][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.205351][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 69.209077][ T7011] hsr_slave_0: left promiscuous mode [ 69.212097][ T7011] hsr_slave_1: left promiscuous mode [ 69.356613][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.359483][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.362687][ T6996] bridge_slave_0: entered allmulticast mode [ 69.365703][ T6996] bridge_slave_0: entered promiscuous mode [ 69.368488][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.370803][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.373055][ T6996] bridge_slave_1: entered allmulticast mode [ 69.375482][ T6996] bridge_slave_1: entered promiscuous mode [ 69.385266][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.389012][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.401872][ T6996] team0: Port device team_slave_0 added [ 69.405458][ T6996] team0: Port device team_slave_1 added [ 69.418114][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.420731][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.423756][ T7027] dns_resolver: Unsupported content type (234) [ 69.428621][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.434486][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.436576][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.445252][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.475731][ T6996] hsr_slave_0: entered promiscuous mode [ 69.477833][ T6996] hsr_slave_1: entered promiscuous mode [ 69.479788][ T6996] debugfs: 'hsr0' already exists in 'hsr' [ 69.481819][ T6996] Cannot create hsr debugfs directory [ 69.498447][ T5809] bridge0: port 3(team0) entered disabled state [ 69.501621][ T5809] bridge_slave_1: left allmulticast mode [ 69.503936][ T5809] bridge_slave_1: left promiscuous mode [ 69.506275][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.510001][ T5809] bridge_slave_0: left allmulticast mode [ 69.512200][ T5809] bridge_slave_0: left promiscuous mode [ 69.514263][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.533322][ T5809] gretap0 (unregistering): left promiscuous mode [ 69.552995][ T5809] bond0 (unregistering): left promiscuous mode [ 69.555610][ T5809] bond_slave_0: left promiscuous mode [ 69.558040][ T5809] bond_slave_1: left promiscuous mode [ 69.563580][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.568685][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.573832][ T5809] bond0 (unregistering): Released all slaves [ 69.634026][ T6996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.638462][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.642084][ T6996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.646667][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.651394][ T6996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.656274][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.659708][ T6996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.664811][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.685129][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.687349][ T6996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.689681][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.691826][ T6996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.696577][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 69.723359][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.728782][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.732882][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.740716][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.748165][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.751360][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.758664][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.761674][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.785638][ T41] kauditd_printk_skb: 21 callbacks suppressed [ 69.785649][ T41] audit: type=1400 audit(1782256157.663:489): avc: denied { write } for pid=7052 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.808599][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 69.864730][ T41] audit: type=1400 audit(1782256157.743:490): avc: denied { write } for pid=7059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.874906][ T5809] hsr_slave_0: left promiscuous mode [ 69.877861][ T5809] hsr_slave_1: left promiscuous mode [ 69.880548][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.884897][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.890193][ T848] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 69.902115][ T41] audit: type=1400 audit(1782256157.783:491): avc: denied { write } for pid=7064 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.953391][ T5809] team_slave_1 (unregistering): left promiscuous mode [ 69.955700][ T5809] team_slave_1 (unregistering): left allmulticast mode [ 69.958726][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 69.965103][ T5809] team_slave_0 (unregistering): left promiscuous mode [ 69.967650][ T5809] team_slave_0 (unregistering): left allmulticast mode [ 69.970942][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 69.996521][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.041272][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.044886][ T41] audit: type=1400 audit(1782256157.923:492): avc: denied { write } for pid=7072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.045450][ T848] usb 5-1: config 0 has no interfaces? [ 70.062586][ T848] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 70.069540][ T848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.077376][ T848] usb 5-1: config 0 descriptor?? [ 70.085574][ T41] audit: type=1400 audit(1782256157.963:493): avc: denied { write } for pid=7079 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.088113][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.121041][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 70.128271][ T7085] netlink: 120 bytes leftover after parsing attributes in process `syz.3.352'. [ 70.132359][ T7085] openvswitch: netlink: Flow key attr not present in new flow. [ 70.137215][ T7085] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.140784][ T7087] netlink: 120 bytes leftover after parsing attributes in process `syz.3.352'. [ 70.144527][ T7087] openvswitch: netlink: Flow key attr not present in new flow. [ 70.173479][ T41] audit: type=1400 audit(1782256158.053:494): avc: denied { append } for pid=7093 comm="syz.3.353" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 70.174327][ T7095] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 70.184188][ T7097] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 70.187932][ T7095] netlink: 'syz.3.353': attribute type 13 has an invalid length. [ 70.202798][ T7095] gretap0: refused to change device tx_queue_len [ 70.204886][ T7095] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 70.226970][ T6996] veth0_vlan: entered promiscuous mode [ 70.230795][ T6996] veth1_vlan: entered promiscuous mode [ 70.238798][ T6996] veth0_macvtap: entered promiscuous mode [ 70.244815][ T6996] veth1_macvtap: entered promiscuous mode [ 70.254772][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.277750][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.292295][ T7102] syzkaller0: entered promiscuous mode [ 70.294036][ T7102] syzkaller0: entered allmulticast mode [ 70.299795][ T41] audit: type=1400 audit(1782256158.173:495): avc: denied { create } for pid=7101 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.302283][ T6425] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.302514][ T7102] netlink: 80 bytes leftover after parsing attributes in process `syz.3.354'. [ 70.312504][ T41] audit: type=1400 audit(1782256158.183:496): avc: denied { write } for pid=7101 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.312752][ T6425] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.323559][ T6425] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.327486][ T6425] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.373941][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.377315][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.392289][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.395389][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.407761][ T41] audit: type=1400 audit(1782256158.283:497): avc: denied { mounton } for pid=6996 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.441955][ T7106] netlink: 64 bytes leftover after parsing attributes in process `syz.4.343'. [ 70.448927][ T7106] syzkaller1: entered promiscuous mode [ 70.451535][ T7106] syzkaller1: entered allmulticast mode [ 70.543700][ T7110] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 70.547083][ T41] audit: type=1400 audit(1782256158.423:498): avc: denied { relabelto } for pid=7109 comm="syz.3.356" name="95" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 70.801349][ T7129] Invalid argument reading file caps for ./file0 [ 71.190050][ T5743] Bluetooth: hci0: command tx timeout [ 71.808046][ T65] block nbd3: Receive control failed (result -32) [ 71.808251][ T7139] block nbd3: shutting down sockets [ 71.856455][ T7144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.366'. [ 71.859417][ T7144] bond_slave_0: entered promiscuous mode [ 71.861613][ T7144] bond_slave_0: entered allmulticast mode [ 72.150855][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.378'. [ 72.279030][ T7206] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.434959][ T7213] overlay: ./file0 is not a directory [ 72.601900][ T7215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.389'. [ 72.645261][ T7219] tipc: Can't bind to reserved service type 1 [ 72.656730][ T6422] usb 5-1: USB disconnect, device number 9 [ 72.772787][ T7235] netlink: 'syz.3.394': attribute type 11 has an invalid length. [ 72.822816][ T7236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.860655][ T7239] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 72.867287][ T7239] bond2: entered promiscuous mode [ 72.869076][ T7239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.876989][ T7239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 72.880789][ T7239] bond2: (slave bond3): making interface the new active one [ 72.884435][ T7239] bond3: entered promiscuous mode [ 72.887254][ T7239] bond2: (slave bond3): Enslaving as an active interface with an up link [ 72.895586][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.395'. [ 72.971768][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.399'. [ 73.047502][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 73.067948][ T7262] input: syz1 as /devices/virtual/input/input8 [ 73.239965][ T848] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 73.270018][ T5743] Bluetooth: hci0: command tx timeout [ 73.348312][ T7273] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 73.350934][ T7273] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 73.353521][ T7273] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 73.391313][ T848] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.395362][ T848] usb 8-1: config 0 has no interfaces? [ 73.397684][ T848] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.401294][ T848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.407690][ T848] usb 8-1: config 0 descriptor?? [ 73.805095][ T7314] mmap: syz.4.420 (7314) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.074709][ T5886] bridge0: entered promiscuous mode [ 74.100948][ T7331] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 74.339983][ T5886] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 74.490057][ T5886] usb 9-1: Using ep0 maxpacket: 16 [ 74.493222][ T5886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.496328][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.499539][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 74.502648][ T5886] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 74.506284][ T5886] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.512811][ T5886] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 74.516765][ T5886] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 74.520014][ T5886] usb 9-1: Manufacturer: syz [ 74.522999][ T5886] usb 9-1: config 0 descriptor?? [ 74.761493][ T7354] misc userio: Can't change port type on an already running userio instance [ 74.769954][ T5886] rc_core: IR keymap rc-hauppauge not found [ 74.771782][ T5886] Registered IR keymap rc-empty [ 74.773337][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 74.790474][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 74.810245][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 74.815059][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input9 [ 74.819747][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 74.849959][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 74.879924][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 74.910032][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 74.939993][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 74.960008][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 74.979965][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 75.009928][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 75.014545][ T7357] Bluetooth: MGMT ver 1.23 [ 75.039940][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 75.059987][ T5886] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 75.081415][ T5886] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 75.085135][ T5886] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 75.090587][ T5886] usb 9-1: USB disconnect, device number 2 [ 75.340285][ T5743] Bluetooth: hci0: command tx timeout [ 75.485270][ T7378] random: crng reseeded on system resumption [ 75.487411][ T41] kauditd_printk_skb: 45 callbacks suppressed [ 75.487420][ T41] audit: type=1400 audit(1782256163.363:544): avc: denied { write } for pid=7377 comm="syz.4.441" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.503929][ T41] audit: type=1400 audit(1782256163.383:545): avc: denied { read } for pid=7377 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.576301][ T7379] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 75.581690][ T7379] bond2: option mode: invalid value (7) [ 75.582208][ T7379] bond2 (unregistering): Released all slaves [ 75.630281][ T7385] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 75.630303][ T7385] __nla_validate_parse: 4 callbacks suppressed [ 75.630313][ T7385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.440'. [ 75.630412][ T7385] dummy0: entered promiscuous mode [ 75.831732][ T41] audit: type=1400 audit(1782256163.713:546): avc: denied { name_bind } for pid=7405 comm="syz.4.448" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 76.011580][ T34] usb 8-1: USB disconnect, device number 6 [ 76.057080][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 76.059749][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 76.069982][ T5886] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 76.148665][ T7420] netlink: 'syz.3.453': attribute type 4 has an invalid length. [ 76.174738][ T41] audit: type=1400 audit(1782256164.053:547): avc: denied { mount } for pid=7421 comm="syz.3.454" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 76.175189][ T7422] devpts: Bad value for 'uid' [ 76.183114][ T41] audit: type=1400 audit(1782256164.053:548): avc: denied { remount } for pid=7421 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 76.184427][ T7422] devpts: Bad value for 'uid' [ 76.206888][ T41] audit: type=1400 audit(1782256164.083:549): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 76.223857][ T5886] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 76.227093][ T5886] usb 9-1: can't read configurations, error -61 [ 76.335939][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 76.340484][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.457'. [ 76.344187][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 76.349478][ T41] audit: type=1400 audit(1782256164.223:550): avc: denied { bind } for pid=7431 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.356908][ T41] audit: type=1400 audit(1782256164.223:551): avc: denied { name_bind } for pid=7431 comm="syz.0.458" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 76.365517][ T41] audit: type=1400 audit(1782256164.223:552): avc: denied { node_bind } for pid=7431 comm="syz.0.458" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 76.374503][ T5886] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 76.381495][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.384302][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.461227][ T7441] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 76.522751][ T5886] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 76.525896][ T5886] usb 9-1: can't read configurations, error -61 [ 76.528681][ T5886] usb usb9-port1: attempt power cycle [ 76.574347][ T41] audit: type=1400 audit(1782256164.453:553): avc: denied { read } for pid=7451 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.869937][ T5886] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 76.891790][ T5886] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 76.894192][ T5886] usb 9-1: can't read configurations, error -61 [ 77.039945][ T5886] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 77.061832][ T5886] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 77.064256][ T5886] usb 9-1: can't read configurations, error -61 [ 77.066282][ T5886] usb usb9-port1: unable to enumerate USB device [ 77.430005][ T5743] Bluetooth: hci0: command tx timeout [ 77.491455][ T7472] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 77.494808][ T7472] qnx6: wrong signature (magic) in superblock #1. [ 77.496790][ T7472] qnx6: unable to read the first superblock [ 77.543721][ T7475] netlink: 48 bytes leftover after parsing attributes in process `syz.3.474'. [ 77.810025][ T5885] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 77.812612][ T5825] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 77.960036][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 77.962682][ T5825] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.966032][ T5825] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 77.968963][ T5825] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 77.972218][ T5885] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 77.974746][ T5825] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.977681][ T5885] usb 5-1: config 0 has no interface number 0 [ 77.979596][ T5885] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.983228][ T5825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.986072][ T5885] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 77.991971][ T5825] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.995255][ T5885] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 77.998860][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 78.001982][ T5885] usb 5-1: Product: syz [ 78.003761][ T5885] usb 5-1: SerialNumber: syz [ 78.009299][ T5885] usb 5-1: config 0 descriptor?? [ 78.014655][ T5885] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 78.026748][ T5885] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input11 [ 78.041421][ T5825] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 78.163313][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 78.166687][ T7483] openvswitch: netlink: EtherType 0 is less than min 600 [ 78.192959][ T7477] dns_resolver: Unsupported content type (234) [ 78.197961][ T5825] usb 8-1: USB disconnect, device number 7 [ 78.214388][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 78.214502][ T6422] usb 5-1: USB disconnect, device number 10 [ 78.216605][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 78.226365][ T6422] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 78.736565][ T5743] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 78.753413][ T7504] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.485'. [ 78.753790][ T5743] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 78.788686][ T7510] fuse: Bad value for 'fd' [ 78.789214][ T7511] fuse: Bad value for 'fd' [ 78.856379][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 79.104353][ T7529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.198987][ T7542] devpts: Bad value for 'max' [ 79.319931][ T6413] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.342245][ T7550] netlink: 'syz.0.500': attribute type 1 has an invalid length. [ 79.353840][ T7550] bond2: (slave geneve2): making interface the new active one [ 79.357374][ T7550] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 79.361009][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 79.364009][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 79.366804][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 79.369587][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 79.491760][ T6413] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.495335][ T6413] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 79.499102][ T6413] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 79.502727][ T6413] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.506697][ T6413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.514215][ T6413] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.552895][ T7561] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.553933][ T7556] udevd[7556]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.556028][ T7561] Bluetooth: MGMT ver 1.23 [ 79.564050][ T6413] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 79.564399][ T7561] Bluetooth: hci1: expected 121 bytes, got 2 bytes [ 79.714868][ T7532] dns_resolver: Unsupported content type (234) [ 79.718548][ T5825] usb 6-1: USB disconnect, device number 6 [ 79.840156][ T6413] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 79.991767][ T6413] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 79.995164][ T6413] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.998348][ T6413] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.002320][ T6413] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.005133][ T6413] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.007607][ T6413] usb 5-1: Product: syz [ 80.008838][ T6413] usb 5-1: Manufacturer: syz [ 80.011026][ T6413] usb 5-1: SerialNumber: syz [ 80.012707][ T7582] geneve2: entered promiscuous mode [ 80.014484][ T7582] geneve2: entered allmulticast mode [ 80.016604][ T6413] usb 5-1: config 0 descriptor?? [ 80.020198][ T6413] hub 5-1:0.0: bad descriptor, ignoring hub [ 80.022719][ T6413] hub 5-1:0.0: probe with driver hub failed with error -5 [ 80.027186][ T6413] usb 5-1: selecting invalid altsetting 0 [ 80.030094][ T5885] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 80.212114][ T5885] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.215711][ T5885] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 80.219562][ T5885] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.223903][ T5885] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 80.228144][ T5885] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 80.234028][ T5885] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.237639][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.241041][ T5885] usb 8-1: Product: syz [ 80.242682][ T5885] usb 8-1: Manufacturer: syz [ 80.245811][ T5885] cdc_wdm 8-1:1.0: skipping garbage [ 80.247440][ T5885] cdc_wdm 8-1:1.0: skipping garbage [ 80.249694][ T5885] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 80.251653][ T5885] cdc_wdm 8-1:1.0: Unknown control protocol [ 80.473585][ T7611] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 80.646861][ T5825] usb 8-1: USB disconnect, device number 8 [ 80.830238][ T29] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 80.849283][ T41] kauditd_printk_skb: 20 callbacks suppressed [ 80.849294][ T41] audit: type=1400 audit(1782256168.723:574): avc: denied { getopt } for pid=7577 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.982066][ T29] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.985476][ T29] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 80.988937][ T29] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 80.992680][ T29] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.995626][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.002377][ T29] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.024028][ T29] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 81.080630][ T6402] usb 5-1: USB disconnect, device number 11 [ 81.202605][ T7637] dns_resolver: Unsupported content type (234) [ 81.205998][ T5886] usb 9-1: USB disconnect, device number 7 [ 81.375477][ T41] audit: type=1400 audit(1782256169.253:575): avc: denied { create } for pid=7642 comm="syz.3.529" name="#25" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.382409][ T41] audit: type=1400 audit(1782256169.253:576): avc: denied { link } for pid=7642 comm="syz.3.529" name="#25" dev="tmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.389058][ T41] audit: type=1400 audit(1782256169.253:577): avc: denied { rename } for pid=7642 comm="syz.3.529" name="#26" dev="tmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.411817][ T7646] (syz.3.530,7646,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 81.415448][ T7646] (syz.3.530,7646,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 81.424258][ T41] audit: type=1400 audit(1782256169.303:578): avc: denied { write } for pid=7645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.455013][ T41] audit: type=1400 audit(1782256169.333:579): avc: denied { execute } for pid=7650 comm="syz.3.531" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=20987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 81.465330][ T41] audit: type=1400 audit(1782256169.333:580): avc: denied { write } for pid=7649 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.500212][ T1046] cfg80211: failed to load regulatory.db [ 81.503269][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.617099][ T41] audit: type=1400 audit(1782256169.493:581): avc: denied { getopt } for pid=7680 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.669980][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 81.680842][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 81.683427][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.686414][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.689725][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.693848][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.698801][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.702856][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.723337][ T41] audit: type=1400 audit(1782256169.603:582): avc: denied { read append } for pid=7689 comm="syz.3.540" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 81.732685][ T41] audit: type=1400 audit(1782256169.603:583): avc: denied { open } for pid=7689 comm="syz.3.540" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 81.820561][ T7700] raw_sendmsg: syz.4.542 forgot to set AF_INET. Fix it! [ 81.847033][ T7707] __nla_validate_parse: 7 callbacks suppressed [ 81.847045][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 81.868250][ T7707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.873624][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 81.936350][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.548'. [ 81.939203][ T7722] netlink: 'syz.3.548': attribute type 7 has an invalid length. [ 81.942902][ T7722] netlink: 'syz.3.548': attribute type 8 has an invalid length. [ 81.946014][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 81.949433][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 81.957302][ T34] usbtmc 6-1:16.0: can't read capabilities [ 82.179949][ T1046] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 82.210624][ T7748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7748 comm=syz.0.556 [ 82.219802][ T7748] kvm: kvm [7747]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x4000001b) = 0x3f [ 82.289965][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 82.331146][ T1046] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.335403][ T1046] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.338514][ T1046] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.342692][ T1046] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.353336][ T7724] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 82.360769][ T1046] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.394505][ T7755] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7755 comm=syz.0.559 [ 82.419964][ T29] usb 8-1: device descriptor read/64, error -71 [ 82.502945][ T7758] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 82.561747][ T7724] dns_resolver: Unsupported content type (234) [ 82.564955][ T1046] usb 9-1: USB disconnect, device number 8 [ 82.669985][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 82.742469][ T1046] usb 6-1: USB disconnect, device number 7 [ 82.800052][ T29] usb 8-1: device descriptor read/64, error -71 [ 82.910241][ T29] usb usb8-port1: attempt power cycle [ 83.227162][ T7768] binder: 7767:7768 ioctl c0306201 200000000040 returned -14 [ 83.251523][ T29] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 83.270626][ T29] usb 8-1: device descriptor read/8, error -71 [ 83.282033][ T7780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 83.285591][ T7780] Cannot find set identified by id 65534 to match [ 83.358506][ T7790] netlink: 'syz.0.571': attribute type 2 has an invalid length. [ 83.365019][ T7790] : entered promiscuous mode [ 83.367897][ T7790] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 83.436588][ T7797] overlay: ./file0 is not a directory [ 83.509273][ T7806] evm: overlay not supported [ 83.511265][ T29] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 83.530378][ T29] usb 8-1: device descriptor read/8, error -71 [ 83.546610][ T7809] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 83.570536][ T7811] netlink: 80 bytes leftover after parsing attributes in process `syz.0.579'. [ 83.610333][ T7811] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 83.613119][ T7811] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 83.616060][ T7811] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 83.618724][ T7811] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 83.640556][ T29] usb usb8-port1: unable to enumerate USB device [ 84.023980][ T7854] ufs: You didn't specify the type of your ufs filesystem [ 84.023980][ T7854] [ 84.023980][ T7854] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 84.023980][ T7854] [ 84.023980][ T7854] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 84.036229][ T7854] ufs: failed to set blocksize [ 84.169989][ T6413] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 84.339991][ T6413] usb 5-1: Using ep0 maxpacket: 16 [ 84.342778][ T6413] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 84.345545][ T6413] usb 5-1: config 0 has no interface number 0 [ 84.347817][ T6413] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8207, setting to 1024 [ 84.352648][ T6413] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 84.355612][ T6413] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 84.358372][ T6413] usb 5-1: Product: syz [ 84.360289][ T6413] usb 5-1: SerialNumber: syz [ 84.363257][ T6413] usb 5-1: config 0 descriptor?? [ 84.366467][ T6413] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 84.369056][ T6413] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input13 [ 84.530898][ C0] vcan0: j1939_tp_rxtimer: 0xffff888049e96c00: rx timeout, send abort [ 84.667738][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.598'. [ 84.667803][ T7867] netlink: 'syz.4.598': attribute type 39 has an invalid length. [ 84.669201][ T7865] ptrace attach of "/syz-executor exec"[6996] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 84.678627][ T7867] hsr_slave_0 (unregistering): left promiscuous mode [ 85.033866][ C0] vcan0: j1939_tp_rxtimer: 0xffff888049e96c00: abort rx timeout. Force session deactivation [ 85.036821][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.602'. [ 85.178501][ T7892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.606'. [ 85.209520][ T7899] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 85.223914][ T7899] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 85.227068][ T7899] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 85.231255][ T7899] bond4: (slave vti0): making interface the new active one [ 85.238961][ T7903] loop4: detected capacity change from 0 to 2640 [ 85.242416][ T7903] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.244778][ T7903] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.247172][ T7903] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.249644][ T7903] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.252669][ T7903] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.255050][ T7903] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.257415][ T7903] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.259702][ T7903] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.262263][ T7903] ldm_validate_partition_table(): Disk read failed. [ 85.264645][ T7903] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.267612][ T7903] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.270204][ T7903] Dev loop4: unable to read RDB block 0 [ 85.272216][ T7903] loop4: unable to read partition table [ 85.274100][ T7903] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 85.293650][ T5140] ldm_validate_partition_table(): Disk read failed. [ 85.296050][ T5140] Dev loop4: unable to read RDB block 0 [ 85.298125][ T5140] loop4: unable to read partition table [ 85.362778][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 85.470641][ T7923] openvswitch: netlink: Actions may not be safe on all matching packets [ 85.593301][ T34] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 85.730751][ T34] usb 9-1: device descriptor read/64, error -71 [ 85.990803][ T34] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 86.140001][ T34] usb 9-1: device descriptor read/64, error -71 [ 86.261574][ T34] usb usb9-port1: attempt power cycle [ 86.381942][ T41] kauditd_printk_skb: 40 callbacks suppressed [ 86.381985][ T41] audit: type=1400 audit(1782256174.263:624): avc: denied { append } for pid=7931 comm="syz.3.620" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.391271][ T41] audit: type=1400 audit(1782256174.263:625): avc: denied { ioctl } for pid=7931 comm="syz.3.620" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.489716][ T41] audit: type=1400 audit(1782256174.363:626): avc: denied { write } for pid=7935 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.621051][ T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 86.641002][ T34] usb 9-1: device descriptor read/8, error -71 [ 86.880200][ T34] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 86.894523][ C2] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 86.896874][ C2] ------------[ cut here ]------------ [ 86.898983][ C2] URB ffff88802d56ce00 submitted while active [ 86.901352][ C2] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#2: syz.0.590/7841 [ 86.902793][ T34] usb 9-1: device descriptor read/8, error -71 [ 86.905213][ C2] Modules linked in: [ 86.905233][ C2] CPU: 2 UID: 0 PID: 7841 Comm: syz.0.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.905259][ C2] Tainted: [L]=SOFTLOCKUP [ 86.905267][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.905279][ C2] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 86.920686][ C2] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 ae f4 a6 fa 48 8d 3d 47 ea 85 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 86.928047][ C2] RSP: 0018:ffffc90000648b00 EFLAGS: 00010083 [ 86.930407][ C2] RAX: 00000000000009d0 RBX: ffff88802d56ce00 RCX: ffffc90001b33000 [ 86.933438][ C2] RDX: 0000000000040000 RSI: ffff88802d56ce00 RDI: ffffffff90e874c0 [ 86.936442][ C2] RBP: ffff888056726fa0 R08: 0000000000000001 R09: 0000000000000000 [ 86.939481][ C2] R10: 0000000000000000 R11: 2d35203930316d63 R12: 0000000000000087 [ 86.942501][ C2] R13: ffff88802bb22858 R14: 000000000000000f R15: 0000000000000000 [ 86.945463][ C2] FS: 0000000000000000(0000) GS:ffff8880d64ef000(0000) knlGS:0000000000000000 [ 86.948848][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.951423][ C2] CR2: 00007f9b27d86480 CR3: 000000004a0ce000 CR4: 0000000000352ef0 [ 86.954453][ C2] Call Trace: [ 86.955769][ C2] [ 86.956894][ C2] cm109_urb_irq_callback+0x473/0xa70 [ 86.958958][ C2] __usb_hcd_giveback_urb+0x38d/0x610 [ 86.960857][ C2] ? dummy_timer+0xd92/0x36c0 [ 86.962351][ C2] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 86.963966][ C2] dummy_timer+0xda1/0x36c0 [ 86.965352][ C2] ? put_pwq+0x90/0x130 [ 86.966642][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.968292][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 86.970090][ C2] ? rcu_is_watching+0x12/0xc0 [ 86.971647][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 86.973427][ C2] ? lock_release+0x24d/0x310 [ 86.974984][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.976954][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 86.978700][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 86.980668][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 86.982241][ C2] ? rcu_is_watching+0x12/0xc0 [ 86.983775][ C2] ? rcu_is_watching+0x12/0xc0 [ 86.985299][ C2] ? trace_irq_enable.constprop.0+0x122/0x160 [ 86.987204][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 86.988775][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 86.990481][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 86.992292][ C2] handle_softirqs+0x1ea/0x9b0 [ 86.993817][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 86.995478][ C2] ? _raw_spin_unlock+0x28/0x50 [ 86.997036][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 86.998776][ C2] __irq_exit_rcu+0x162/0x210 [ 87.000288][ C2] irq_exit_rcu+0x9/0x30 [ 87.001603][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 87.003365][ C2] [ 87.004278][ C2] [ 87.005222][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.007334][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 87.009351][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 4d 47 f6 48 89 df e8 de 9c 47 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 ae 36 f6 65 8b 05 ae 48 75 08 85 c0 74 16 5b [ 87.010608][ T34] usb usb9-port1: unable to enumerate USB device [ 87.015351][ C2] RSP: 0018:ffffc90004e2f7c8 EFLAGS: 00000246 [ 87.015368][ C2] RAX: 0000000000000046 RBX: ffffffff8fbf5c00 RCX: ffffffff8211cc5f [ 87.015377][ C2] RDX: 0000000000000000 RSI: ffffffff8c1e6000 RDI: ffffffff8b9dc792 [ 87.015386][ C2] RBP: 0000000000000293 R08: 0000000000000000 R09: fffffbfff21b6912 [ 87.015394][ C2] R10: 0000000000000000 R11: 00000000000002a6 R12: 1ffff920009c5f01 [ 87.015403][ C2] R13: ffff88802c604234 R14: ffff88802bed9e00 R15: ffff88802bed9e18 [ 87.015413][ C2] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 87.015432][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.015451][ C2] usb_hcd_poll_rh_status+0x5c4/0x7e0 [ 87.015471][ C2] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 87.015487][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.015504][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.015519][ C2] ? trace_irq_enable.constprop.0+0x122/0x160 [ 87.015535][ C2] dummy_pullup+0x10a/0x170 [ 87.015558][ C2] ? __pfx_dummy_pullup+0x10/0x10 [ 87.015585][ C2] usb_gadget_disconnect_locked+0x142/0x4e0 [ 87.051705][ C2] gadget_unbind_driver+0xd8/0x4f0 [ 87.053401][ C2] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 87.055192][ C2] device_remove+0xcb/0x180 [ 87.056722][ C2] device_release_driver_internal+0x44e/0x620 [ 87.058599][ C2] driver_detach+0xd8/0x1b0 [ 87.060075][ C2] bus_remove_driver+0x13b/0x2e0 [ 87.061649][ C2] driver_unregister+0x76/0xb0 [ 87.063125][ C2] usb_gadget_unregister_driver+0x49/0x70 [ 87.064876][ C2] raw_release+0x19b/0x260 [ 87.066250][ C2] ? __pfx_raw_release+0x10/0x10 [ 87.067800][ C2] __fput+0x3ff/0xb50 [ 87.069209][ C2] task_work_run+0x150/0x240 [ 87.070794][ C2] ? __pfx_task_work_run+0x10/0x10 [ 87.072401][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.074002][ C2] do_exit+0x951/0x2ae0 [ 87.075297][ C2] ? __pfx_do_exit+0x10/0x10 [ 87.076722][ C2] ? do_raw_spin_lock+0x128/0x260 [ 87.078293][ C2] ? get_signal+0x7e0/0x21e0 [ 87.079804][ C2] do_group_exit+0xd5/0x2a0 [ 87.081269][ C2] get_signal+0x1ec7/0x21e0 [ 87.082679][ C2] ? __pfx_get_signal+0x10/0x10 [ 87.084224][ C2] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 87.085948][ C2] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 87.088069][ C2] arch_do_signal_or_restart+0x91/0x7e0 [ 87.089782][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.091294][ C2] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.093193][ C2] ? selinux_file_ioctl+0x13b/0x290 [ 87.094795][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.096276][ C2] exit_to_user_mode_loop+0x139/0x6f0 [ 87.097913][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.099390][ C2] do_syscall_64+0x666/0x870 [ 87.101099][ C2] ? clear_bhb_loop+0x40/0x90 [ 87.102587][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.104487][ C2] RIP: 0033:0x7f4aebb9ce59 [ 87.105989][ C2] Code: Unable to access opcode bytes at 0x7f4aebb9ce2f. [ 87.108143][ C2] RSP: 002b:00007f4aec9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.110743][ C2] RAX: fffffffffffffffc RBX: 00007f4aebe15fa0 RCX: 00007f4aebb9ce59 [ 87.113218][ C2] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 87.115833][ C2] RBP: 00007f4aebc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 87.118380][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.120834][ C2] R13: 00007f4aebe16038 R14: 00007f4aebe15fa0 R15: 00007ffe85622c88 [ 87.123291][ C2] [ 87.124298][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.126569][ C2] CPU: 2 UID: 0 PID: 7841 Comm: syz.0.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.129839][ C2] Tainted: [L]=SOFTLOCKUP [ 87.131251][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.134498][ C2] Call Trace: [ 87.135579][ C2] [ 87.136503][ C2] dump_stack_lvl+0x100/0x190 [ 87.137985][ C2] vpanic+0x552/0x970 [ 87.139248][ C2] ? __pfx_vpanic+0x10/0x10 [ 87.140761][ C2] ? lock_release+0x24d/0x310 [ 87.142245][ C2] panic+0xd1/0xe0 [ 87.143461][ C2] ? __pfx_panic+0x10/0x10 [ 87.144865][ C2] check_panic_on_warn.cold+0x19/0x34 [ 87.146570][ C2] ? usb_submit_urb+0x1689/0x19b0 [ 87.148322][ C2] __warn.cold+0x191/0x318 [ 87.149693][ C2] __report_bug+0x30f/0x440 [ 87.151110][ C2] ? usb_submit_urb+0x1689/0x19b0 [ 87.152708][ C2] ? __pfx___report_bug+0x10/0x10 [ 87.154303][ C2] ? stack_trace_save+0x8e/0xc0 [ 87.155847][ C2] ? __pfx_dev_printk_emit+0x10/0x10 [ 87.157532][ C2] ? dummy_timer+0xd35/0x36c0 [ 87.159145][ C2] ? kasan_save_stack+0x30/0x50 [ 87.160767][ C2] report_bug_entry+0xe1/0x290 [ 87.162295][ C2] ? usb_submit_urb+0x168c/0x19b0 [ 87.164074][ C2] handle_bug+0x1cd/0x2a0 [ 87.165440][ C2] exc_invalid_op+0x17/0x50 [ 87.166867][ C2] asm_exc_invalid_op+0x1a/0x20 [ 87.168404][ C2] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 87.170183][ C2] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 ae f4 a6 fa 48 8d 3d 47 ea 85 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 87.176147][ C2] RSP: 0018:ffffc90000648b00 EFLAGS: 00010083 [ 87.178131][ C2] RAX: 00000000000009d0 RBX: ffff88802d56ce00 RCX: ffffc90001b33000 [ 87.180882][ C2] RDX: 0000000000040000 RSI: ffff88802d56ce00 RDI: ffffffff90e874c0 [ 87.183377][ C2] RBP: ffff888056726fa0 R08: 0000000000000001 R09: 0000000000000000 [ 87.185861][ C2] R10: 0000000000000000 R11: 2d35203930316d63 R12: 0000000000000087 [ 87.188330][ C2] R13: ffff88802bb22858 R14: 000000000000000f R15: 0000000000000000 [ 87.190877][ C2] cm109_urb_irq_callback+0x473/0xa70 [ 87.192563][ C2] __usb_hcd_giveback_urb+0x38d/0x610 [ 87.194439][ C2] ? dummy_timer+0xd92/0x36c0 [ 87.195925][ C2] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 87.197576][ C2] dummy_timer+0xda1/0x36c0 [ 87.199012][ C2] ? put_pwq+0x90/0x130 [ 87.200468][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.202168][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 87.203929][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.205461][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 87.207227][ C2] ? lock_release+0x24d/0x310 [ 87.208760][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.210763][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 87.212562][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 87.214446][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 87.216019][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.217525][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.219060][ C2] ? trace_irq_enable.constprop.0+0x122/0x160 [ 87.221028][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 87.222582][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 87.224238][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 87.226026][ C2] handle_softirqs+0x1ea/0x9b0 [ 87.227543][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 87.229212][ C2] ? _raw_spin_unlock+0x28/0x50 [ 87.230811][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 87.232545][ C2] __irq_exit_rcu+0x162/0x210 [ 87.234027][ C2] irq_exit_rcu+0x9/0x30 [ 87.235377][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 87.237159][ C2] [ 87.238109][ C2] [ 87.239090][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.241186][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 87.243166][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 4d 47 f6 48 89 df e8 de 9c 47 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 ae 36 f6 65 8b 05 ae 48 75 08 85 c0 74 16 5b [ 87.249113][ C2] RSP: 0018:ffffc90004e2f7c8 EFLAGS: 00000246 [ 87.251017][ C2] RAX: 0000000000000046 RBX: ffffffff8fbf5c00 RCX: ffffffff8211cc5f [ 87.253538][ C2] RDX: 0000000000000000 RSI: ffffffff8c1e6000 RDI: ffffffff8b9dc792 [ 87.255943][ C2] RBP: 0000000000000293 R08: 0000000000000000 R09: fffffbfff21b6912 [ 87.258565][ C2] R10: 0000000000000000 R11: 00000000000002a6 R12: 1ffff920009c5f01 [ 87.261133][ C2] R13: ffff88802c604234 R14: ffff88802bed9e00 R15: ffff88802bed9e18 [ 87.263556][ C2] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 87.265392][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.267181][ C2] usb_hcd_poll_rh_status+0x5c4/0x7e0 [ 87.268840][ C2] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 87.270648][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.272282][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.273764][ C2] ? trace_irq_enable.constprop.0+0x122/0x160 [ 87.275624][ C2] dummy_pullup+0x10a/0x170 [ 87.277027][ C2] ? __pfx_dummy_pullup+0x10/0x10 [ 87.278573][ C2] usb_gadget_disconnect_locked+0x142/0x4e0 [ 87.280458][ C2] gadget_unbind_driver+0xd8/0x4f0 [ 87.282028][ C2] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 87.283766][ C2] device_remove+0xcb/0x180 [ 87.285164][ C2] device_release_driver_internal+0x44e/0x620 [ 87.287010][ C2] driver_detach+0xd8/0x1b0 [ 87.288631][ C2] bus_remove_driver+0x13b/0x2e0 [ 87.290261][ C2] driver_unregister+0x76/0xb0 [ 87.291797][ C2] usb_gadget_unregister_driver+0x49/0x70 [ 87.293537][ C2] raw_release+0x19b/0x260 [ 87.294913][ C2] ? __pfx_raw_release+0x10/0x10 [ 87.296434][ C2] __fput+0x3ff/0xb50 [ 87.297663][ C2] task_work_run+0x150/0x240 [ 87.299107][ C2] ? __pfx_task_work_run+0x10/0x10 [ 87.300709][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.302309][ C2] do_exit+0x951/0x2ae0 [ 87.303801][ C2] ? __pfx_do_exit+0x10/0x10 [ 87.305271][ C2] ? do_raw_spin_lock+0x128/0x260 [ 87.306846][ C2] ? get_signal+0x7e0/0x21e0 [ 87.308272][ C2] do_group_exit+0xd5/0x2a0 [ 87.309659][ C2] get_signal+0x1ec7/0x21e0 [ 87.311208][ C2] ? __pfx_get_signal+0x10/0x10 [ 87.312710][ C2] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 87.314249][ C2] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 87.316315][ C2] arch_do_signal_or_restart+0x91/0x7e0 [ 87.318023][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.319715][ C2] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.321630][ C2] ? selinux_file_ioctl+0x13b/0x290 [ 87.323225][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.324690][ C2] exit_to_user_mode_loop+0x139/0x6f0 [ 87.326290][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.327769][ C2] do_syscall_64+0x666/0x870 [ 87.329204][ C2] ? clear_bhb_loop+0x40/0x90 [ 87.330687][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.332496][ C2] RIP: 0033:0x7f4aebb9ce59 [ 87.333877][ C2] Code: Unable to access opcode bytes at 0x7f4aebb9ce2f. [ 87.336302][ C2] RSP: 002b:00007f4aec9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.338886][ C2] RAX: fffffffffffffffc RBX: 00007f4aebe15fa0 RCX: 00007f4aebb9ce59 [ 87.341519][ C2] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 87.343941][ C2] RBP: 00007f4aebc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 87.346361][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.348785][ C2] R13: 00007f4aebe16038 R14: 00007f4aebe15fa0 R15: 00007ffe85622c88 [ 87.351445][ C2] [ 87.353112][ C2] Kernel Offset: disabled [ 87.354440][ C2] Rebooting in 86400 seconds..