last executing test programs: 6.859813925s ago: executing program 1 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80100, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket(0x2b, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x0, 0xff, 0x18, 0x4, 0x96}, 0x20) (async, rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x1a0, 0x10, 0x1, 0xfffffffd, 0x0, {{@in6=@remote, @in=@remote, 0x4e21, 0x7, 0xfffe}, {@in=@private=0xa010101, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x300, 0x0, 0x0, 0x70bd2d, 0x70bf27}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000940) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000800)={"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"}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 6.768278901s ago: executing program 1 (id=165): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x24b, 0x9b99}, 0x25, [0x8, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000002, 0x3ff, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x800, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x7, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x7, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x6, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x7, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00063, 0x2, 0x9, 0xffffffff, 0x3, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cf, 0x9, 0x80000004, 0x6, 0x438, 0x1, 0x9, 0x4, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x1], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x10001, 0x491, 0x9, 0x1, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x6, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0x4, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af6, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x200008, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x8, 0x100009, 0xc, 0x2, 0x3, 0x180000, 0x1, 0x10000, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0xe5a0, 0x2b3a, 0x4, 0x463f, 0x4040004, 0x1, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x21, 0x0) write$vhost_msg_v2(r8, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.529893049s ago: executing program 1 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf253600000808000300", @ANYRES32=r3, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 3.469571059s ago: executing program 1 (id=217): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000005007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.403989615s ago: executing program 1 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x1, 0x0) write$cgroup_pid(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x800000000000000, 0x1fffffffe, 0x8, 0x6, 0x8, 0xf, {0xfffffffffffffffe, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0x800ed1, 0x2, 0x5, 0x6000, 0x7ff, r2, r3, 0xa, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000340), 0x10000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e21,afid=0x0000000000000007,posixacl,aname=\\*##}.,dfltgid=', @ANYBLOB="4dde93c2c3717b777bcab59829ad3b935e9c31b752c26d0ee2457f5ac4b9f652d20fa0c198986918e2b6330eb6503c27baa27a5fe5614042abaf6fb573e219b32dfedb2b99dacd60f445253c6a75641ca6d499d4026c7359978d910afca92bde1b341abe0745d03a82a35c9b0b059c2a6dd0f73f3154d96661914cc87414f9c5338dda64fe96256bf12de6c096", @ANYBLOB="2c6c617a7974696d552c7b6f6f040000003400"/28]) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x6, 0x800) (async) ptrace$setregs(0xd, r4, 0x3, &(0x7f0000000380)="e742a933f37ff726a51f1fb1010f93e96a837b8e11d417e6e3310bf49eea1fce838e98f50839bb743e63989194db03e84f2142edad4ac17451f607214b1f357bba9e2928cad039eb1deebd41e71d789bc1bac9e1f17d276ddd7fc1c9685ecee004c924c7df313107c7a2143cb413c0ecbbfe35daa22587eabc97d6548ba84ac5332650ca66edf4453b227ca7ff03de968b419779071b9f") (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000000080)) (async) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000100)=0x20000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x2, 0xc5fb, @value=0x3}) (async) r10 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071", 0x4, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r10, r11, r10}, &(0x7f0000000540)=""/92, 0x5c, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010025bd7000bcdbdf2544000000480031f5f00300", @ANYRES32=r14, @ANYBLOB="0803030000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) (async) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000420001000000000000000000030100000f0000003c00010000112233445566778899aabb86dd2c00001c0000060001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c32506006704000280040003"], 0x5c}}, 0x0) 3.277960527s ago: executing program 1 (id=220): mlockall(0x7) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) brk(0x75555ede6000) (async) io_setup(0x7d46, &(0x7f00000005c0)) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) io_setup(0x3ff, &(0x7f0000000040)) (async) io_setup(0xccee, &(0x7f0000001700)=0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) (async) io_destroy(r2) (async) r4 = semget(0x2, 0x2, 0x440) semop(r4, &(0x7f0000000000)=[{0x3, 0xc, 0x1800}, {0x3, 0x7, 0x800}, {0x1, 0x4, 0x800}, {0x4, 0x16, 0x800}, {0x1, 0x6fc, 0x800}], 0x5) (async, rerun: 64) semget(0x1, 0x0, 0x0) (rerun: 64) 1.94771092s ago: executing program 3 (id=237): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000006a07040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.859957541s ago: executing program 3 (id=238): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000200)='pstore\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) setresuid(0x0, 0xee00, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b12, 0x0) 1.509896883s ago: executing program 0 (id=244): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) socket(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x200000) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x403) socket(0x2, 0x80805, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101901, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfd94, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea4, 0x9, @mcast1, 0x8}, r4, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.247500303s ago: executing program 0 (id=246): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r2}, 0x20) socket$nl_audit(0x10, 0x3, 0x9) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f00000005c0)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f00000005c0)}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x44) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x44) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000186dd6745208e00303aff00000000000000000000ffffac1414aaff020000000000000000000000000001030190780e0000006eea785a7fff2c00fe8000000000000000000000000000bbff0200000000000000000000000001"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r8, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) (async) r9 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="016f08000100270000002706003a4600fd5e00000000008490783effff20ac1414aa0000546928c77951004d9b2f87ad9f6744e0653536c4c360b27327c1b8ca1d7693cfd59509e50701a719d7e737a9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff070000ffc10002d588380003c1000000"], 0xfd6c) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="54b713407e09", 0x6, 0x40000080, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x63, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f00000001c0)=0x1e) 970.056481ms ago: executing program 0 (id=247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000007007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 969.590797ms ago: executing program 0 (id=248): mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat(r0, &(0x7f0000000600)='test2\x00', 0x42, 0x1ff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x34}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48002}, 0x20000054) write(r1, &(0x7f0000000500)='B', 0x1000) 909.568256ms ago: executing program 0 (id=249): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x1f, &(0x7f0000000200)}) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000000)) 909.320289ms ago: executing program 0 (id=250): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum={0x2, 0x3, 0x0, 0xf, 0x4, [{0x9, 0xfffffffe}, {0xb, 0x800}, {0x2, 0x3ff}]}]}}, 0x0, 0x3e}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f00001bf000/0x4000)=nil, 0x4000, 0x19) 467.747814ms ago: executing program 2 (id=252): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_crash_loaded', 0x80, 0x3) read$msr(r4, &(0x7f0000000280)=""/210, 0xd2) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r5 = socket(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044010) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000000c0)=0x4) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000012c0)={0xffffffffffffffff}, 0x0) tee(r11, r10, 0xe, 0x4) close_range(r9, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 367.553138ms ago: executing program 2 (id=253): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) (async) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={r5, &(0x7f0000001a80), 0x0}, 0x20) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0xa}) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000001c0)=@x86={0x0, 0x40, 0x9, 0x0, 0xfffffffd, 0xa, 0x3, 0x3, 0xff, 0x4, 0xc, 0x4, 0x0, 0x4003c, 0x8, 0x9, 0x3, 0x1, 0x5, '\x00', 0xfc, 0x80000000}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 363.046572ms ago: executing program 3 (id=254): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x30, r0, 0x0) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a440000010000000000000000000000000200000009000200737278e5420a3df6895dc4af1807d1c68d2cf8fcffff7a3000000000006f72646572000000140000001100010000000000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r4, 0x0, 0x0, 0x20040f69, &(0x7f00000005c0)={0x2, 0x4e23, @multicast1}, 0x10) lseek(r2, 0xfffffffffffffffb, 0x0) r6 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'ip6tnl0\x00', 0x800}) mmap(&(0x7f000063e000/0x2000)=nil, 0x2000, 0x1000000, 0x774498750b1019b0, 0xffffffffffffffff, 0xbf63000) r8 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x2000c015}, 0x4000040) shmctl$SHM_STAT(r6, 0xd, &(0x7f0000000340)=""/187) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 248.336304ms ago: executing program 3 (id=255): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1}, 0x40000000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x20000, 0x2) mkdirat(r2, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)='en', 0x2) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) (async) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) (async) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1}, 0x40000000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x20000, 0x2) (async) mkdirat(r2, &(0x7f0000000040)='./proc\x00', 0x1ff) (async) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000a00)='en', 0x2) (async) 247.870579ms ago: executing program 2 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@fwd={0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x44}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, r2, 0x464026fb272610cf, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x180000}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3cb5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb0}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffe}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20}, 0x800) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='0', 0x1) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xffff}, {}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xf6b}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x200000d4) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYRES16=r6], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000) 199.729426ms ago: executing program 3 (id=257): mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat(r0, &(0x7f0000000600)='test2\x00', 0x42, 0x1ff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x34}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48002}, 0x20000054) write(r1, &(0x7f0000000500)='B', 0x1000) 139.703829ms ago: executing program 3 (id=258): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3a0, 0x0, 0xe8, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfff6}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@arp={@broadcast, @local, 0xff, 0xff000000, 0xa, 0x0, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3c, 0x0, 0x3a1, 0xc, 0x542, 0x5, 'team0\x00', 'team0\x00', {}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) socket(0x80000000000000a, 0x2, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x11, 0x66, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind(r2, &(0x7f0000000080)=@ll={0x11, 0x10, r3, 0x1, 0xd, 0x6, @broadcast}, 0x80) (async) bind(r2, &(0x7f0000000080)=@ll={0x11, 0x10, r3, 0x1, 0xd, 0x6, @broadcast}, 0x80) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x80}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000fe0000000b"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x200, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trust000000000000064 '], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x149000) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x149000) 139.421016ms ago: executing program 2 (id=259): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000007b07040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.639911ms ago: executing program 2 (id=260): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) 0s ago: executing program 2 (id=261): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0xfffffffc00000000, 0x0, 0x0, 0x1e, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x6]}}) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0xfffffffc00000000, 0x0, 0x0, 0x1e, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x6]}}) r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="166ec45440881f46d060f13ee38f1492e260db502a49ca69ae5eb56e056e9ad28dfca1479f9f9b2395de37b597928ddc7fc1ffd7524d3712a5e7ab4a45cfa6441278310fffb8909d0ecc571043102bea79bad5c20e977b44ea23df0d368733c938419b5654db18df6aa970003eecbe4d9fb0313d0128335484ebdd0177cbb48b4797c2d28b27fc2489cb2c3f850848f14a7e1cd224747586fd8b3b5b0a291716b0bd6ebff37062", 0xa7, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x9a0000, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @p_u16=&(0x7f0000000280)=0x4}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) fsetxattr$security_evm(r2, &(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x3) (async) fsetxattr$security_evm(r2, &(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x3) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) (async) write(r5, &(0x7f0000000400)='1', 0x1) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x9}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x9}) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r8, &(0x7f0000000500)='dummy_udc.0', 0xb) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 28.983609][ T43] audit: type=1400 audit(1788726516.468:114): avc: denied { rlimitinh } for pid=5636 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.983628][ T43] audit: type=1400 audit(1788726516.468:115): avc: denied { siginh } for pid=5636 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:61712' (ED25519) to the list of known hosts. [ 30.734726][ T43] audit: type=1400 audit(1788726518.228:116): avc: denied { name_bind } for pid=5643 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.765523][ T43] audit: type=1400 audit(1788726518.258:117): avc: denied { execute } for pid=5644 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.765749][ T43] audit: type=1400 audit(1788726518.258:118): avc: denied { execute_no_trans } for pid=5644 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.428631][ T43] audit: type=1400 audit(1788726518.918:119): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.491366][ T43] audit: type=1400 audit(1788726518.978:120): avc: denied { write } for pid=5648 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.691213][ T43] audit: type=1400 audit(1788726519.178:121): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.729121][ T43] audit: type=1400 audit(1788726519.218:122): avc: denied { write } for pid=5654 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.797609][ T43] audit: type=1400 audit(1788726519.288:123): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.854088][ T43] audit: type=1400 audit(1788726519.348:124): avc: denied { write } for pid=5660 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.911451][ T43] audit: type=1400 audit(1788726519.398:125): avc: denied { write } for pid=5663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.016023][ T5644] cgroup: Unknown subsys name 'net' [ 33.146105][ T5644] cgroup: Unknown subsys name 'cpuset' [ 33.149848][ T5644] cgroup: Unknown subsys name 'rlimit' [ 33.342215][ T5678] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.998707][ T5644] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.270890][ T43] kauditd_printk_skb: 34 callbacks suppressed [ 37.270954][ T43] audit: type=1400 audit(1788726524.758:160): avc: denied { execmem } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.387062][ T43] audit: type=1400 audit(1788726524.878:161): avc: denied { create } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.387456][ T43] audit: type=1400 audit(1788726524.878:162): avc: denied { read write } for pid=5726 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.387737][ T43] audit: type=1400 audit(1788726524.878:163): avc: denied { open } for pid=5727 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.392501][ T43] audit: type=1400 audit(1788726524.878:164): avc: denied { ioctl } for pid=5727 comm="syz-executor" path="socket:[7514]" dev="sockfs" ino=7514 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.401431][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.402807][ T5729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.403190][ T5729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.403891][ T5729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.404267][ T5729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.410096][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.412191][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.417322][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.417776][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.420472][ T43] audit: type=1400 audit(1788726524.908:165): avc: denied { read } for pid=5727 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.420497][ T43] audit: type=1400 audit(1788726524.908:166): avc: denied { open } for pid=5727 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.420516][ T43] audit: type=1400 audit(1788726524.908:167): avc: denied { mounton } for pid=5727 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.420751][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.423108][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.424010][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.425140][ T43] audit: type=1400 audit(1788726524.918:168): avc: denied { module_request } for pid=5727 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.425419][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.426220][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.426791][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.427183][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.427396][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.431013][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.431120][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.433697][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.454537][ T43] audit: type=1400 audit(1788726524.948:169): avc: denied { sys_module } for pid=5727 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.917902][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.918077][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.918156][ T5727] bridge_slave_0: entered allmulticast mode [ 37.918868][ T5727] bridge_slave_0: entered promiscuous mode [ 37.944447][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.947039][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.947362][ T5727] bridge_slave_1: entered allmulticast mode [ 37.948079][ T5727] bridge_slave_1: entered promiscuous mode [ 38.011514][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.011681][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.012069][ T5731] bridge_slave_0: entered allmulticast mode [ 38.012812][ T5731] bridge_slave_0: entered promiscuous mode [ 38.021456][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.022981][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.033593][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.033665][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.033818][ T5731] bridge_slave_1: entered allmulticast mode [ 38.034505][ T5731] bridge_slave_1: entered promiscuous mode [ 38.045128][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.045256][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.045379][ T5726] bridge_slave_0: entered allmulticast mode [ 38.046637][ T5726] bridge_slave_0: entered promiscuous mode [ 38.048791][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.048833][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.048889][ T5730] bridge_slave_0: entered allmulticast mode [ 38.049608][ T5730] bridge_slave_0: entered promiscuous mode [ 38.068459][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.068564][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.068802][ T5726] bridge_slave_1: entered allmulticast mode [ 38.069960][ T5726] bridge_slave_1: entered promiscuous mode [ 38.070765][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.070826][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.070877][ T5730] bridge_slave_1: entered allmulticast mode [ 38.071548][ T5730] bridge_slave_1: entered promiscuous mode [ 38.099460][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.100451][ T5727] team0: Port device team_slave_0 added [ 38.102537][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.118104][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.119840][ T5727] team0: Port device team_slave_1 added [ 38.121057][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.138450][ T5730] team0: Port device team_slave_0 added [ 38.151350][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.157493][ T5730] team0: Port device team_slave_1 added [ 38.158374][ T5731] team0: Port device team_slave_0 added [ 38.165383][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.171649][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.171703][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.171728][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.173101][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.173115][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.173127][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.180014][ T5731] team0: Port device team_slave_1 added [ 38.180830][ T5726] team0: Port device team_slave_0 added [ 38.192788][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.192798][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.192810][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.198736][ T5726] team0: Port device team_slave_1 added [ 38.205646][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.205655][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.205666][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.207128][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.207136][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.207149][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.222187][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.222196][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.222208][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.249642][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.249652][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.249664][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.250989][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.250997][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.251008][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.257830][ T5727] hsr_slave_0: entered promiscuous mode [ 38.258336][ T5727] hsr_slave_1: entered promiscuous mode [ 38.273217][ T5731] hsr_slave_0: entered promiscuous mode [ 38.273693][ T5731] hsr_slave_1: entered promiscuous mode [ 38.273974][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 38.274019][ T5731] Cannot create hsr debugfs directory [ 38.306340][ T5726] hsr_slave_0: entered promiscuous mode [ 38.306783][ T5726] hsr_slave_1: entered promiscuous mode [ 38.307065][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 38.307075][ T5726] Cannot create hsr debugfs directory [ 38.309869][ T5730] hsr_slave_0: entered promiscuous mode [ 38.310321][ T5730] hsr_slave_1: entered promiscuous mode [ 38.310633][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 38.310644][ T5730] Cannot create hsr debugfs directory [ 38.544012][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.552255][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.552914][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.556894][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.560297][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.564336][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.564793][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.568617][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.605442][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.605531][ T5731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.606063][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.606106][ T5731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.608320][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.612499][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.612875][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.616409][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.617096][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.620663][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.621493][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.624792][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.661930][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.662010][ T5730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.662140][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.662183][ T5730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.666431][ T5727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.670791][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.671369][ T5727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.675084][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.677720][ T5727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.679793][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.684581][ T5727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.688497][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.740875][ T5726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.745587][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.748253][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.749498][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.749632][ T5727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.749729][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.749771][ T5727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.754157][ T5726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.757111][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.757478][ T5726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.761202][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.769993][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.772347][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.775345][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.777762][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.781042][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.783834][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.790860][ T5726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.794695][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.804412][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.816244][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.816327][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.828097][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.838898][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.838966][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.850220][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.855781][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.855869][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.874792][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.879371][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.879639][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.915479][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.917966][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.918009][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.934938][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.935018][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.945637][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.974435][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.979245][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.979325][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.992514][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.992591][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.118541][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.142202][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.146102][ T5731] veth0_vlan: entered promiscuous mode [ 39.150581][ T5731] veth1_vlan: entered promiscuous mode [ 39.180835][ T5730] veth0_vlan: entered promiscuous mode [ 39.183062][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.187299][ T5731] veth0_macvtap: entered promiscuous mode [ 39.189496][ T5731] veth1_macvtap: entered promiscuous mode [ 39.202905][ T5730] veth1_vlan: entered promiscuous mode [ 39.205034][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.207085][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.227665][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.250711][ T5727] veth0_vlan: entered promiscuous mode [ 39.258812][ T5730] veth0_macvtap: entered promiscuous mode [ 39.262047][ T5730] veth1_macvtap: entered promiscuous mode [ 39.263969][ T5727] veth1_vlan: entered promiscuous mode [ 39.292325][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.295530][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.295580][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.310566][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.323796][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.324102][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.324113][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.331166][ T5726] veth0_vlan: entered promiscuous mode [ 39.348399][ T5726] veth1_vlan: entered promiscuous mode [ 39.354619][ T5727] veth0_macvtap: entered promiscuous mode [ 39.361594][ T5727] veth1_macvtap: entered promiscuous mode [ 39.364234][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.364343][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.364364][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.364382][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.364400][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.364418][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.364437][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.387161][ T5726] veth0_macvtap: entered promiscuous mode [ 39.389156][ T5731] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.395411][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.399222][ T5726] veth1_macvtap: entered promiscuous mode [ 39.399999][ T397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.400010][ T397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.404854][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.421051][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.440917][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.442429][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.447963][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.451983][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.464140][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.464427][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.464695][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.483341][ T5878] jffs2: notice: (5878) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 39.484766][ T5733] Bluetooth: hci2: command tx timeout [ 39.484770][ T5729] Bluetooth: hci1: command tx timeout [ 39.485075][ T5733] Bluetooth: hci3: command tx timeout [ 39.485097][ T5729] Bluetooth: hci0: command tx timeout [ 39.485885][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.494919][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.494931][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.534132][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.534211][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.534229][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.535797][ T397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.535808][ T397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.565859][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.565919][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.589828][ T5887] size and base must be multiples of 4 kiB [ 39.593032][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 39.593049][ T5887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 39.593055][ T5887] Call Trace: [ 39.593059][ T5887] [ 39.593064][ T5887] dump_stack_lvl+0x100/0x190 [ 39.593084][ T5887] mtrr_del.cold+0x72/0x85 [ 39.593096][ T5887] mtrr_ioctl+0xbc8/0xcf0 [ 39.593108][ T5887] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 39.593121][ T5887] ? __pfx_mtrr_ioctl+0x10/0x10 [ 39.593131][ T5887] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 39.593143][ T5887] ? __fget_files+0x34/0x3d0 [ 39.593162][ T5887] ? __pfx_mtrr_ioctl+0x10/0x10 [ 39.593172][ T5887] proc_reg_unlocked_ioctl+0x229/0x320 [ 39.593187][ T5887] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 39.593203][ T5887] __x64_sys_ioctl+0x18e/0x210 [ 39.593215][ T5887] do_syscall_64+0x123/0x790 [ 39.593235][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.593247][ T5887] RIP: 0033:0x7f2998d9e159 [ 39.593258][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.593268][ T5887] RSP: 002b:00007f2999cef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.593280][ T5887] RAX: ffffffffffffffda RBX: 00007f2999025fa0 RCX: 00007f2998d9e159 [ 39.593288][ T5887] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 39.593295][ T5887] RBP: 00007f2998e35024 R08: 0000000000000000 R09: 0000000000000000 [ 39.593302][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.593309][ T5887] R13: 00007f2999026038 R14: 00007f2999025fa0 R15: 00007ffc96408918 [ 39.593323][ T5887] [ 39.593440][ T397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.593452][ T397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.609032][ T5887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6'. [ 39.709490][ T5894] Zero length message leads to an empty skb [ 39.727976][ T5896] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 39.853682][ T5829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 39.894764][ T5912] jffs2: notice: (5912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 39.969585][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.970314][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.998584][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.000339][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.004152][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 40.009062][ T5829] usb 7-1: unable to get BOS descriptor or descriptor too short [ 40.009125][ T5829] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.015702][ T5829] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 40.018484][ T5829] usb 7-1: can't read configurations, error -71 [ 40.073711][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.073776][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.073795][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.073812][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.193630][ T2397] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.217299][ T5931] process 'syz.3.17' launched './file2' with NULL argv: empty string added [ 40.223072][ T5931] loop2: detected capacity change from 0 to 7 [ 40.227222][ T5931] Dev loop2: unable to read RDB block 7 [ 40.227293][ T5931] loop2: unable to read partition table [ 40.227483][ T5931] loop2: partition table beyond EOD, truncated [ 40.227528][ T5931] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 40.345858][ T2397] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.346999][ T2397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.347033][ T2397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.350348][ T2397] usb 6-1: config 0 descriptor?? [ 40.508417][ T5934] syzkaller0: entered promiscuous mode [ 40.508546][ T5934] syzkaller0: entered allmulticast mode [ 40.543093][ T5143] Dev loop2: unable to read RDB block 7 [ 40.543146][ T5143] loop2: unable to read partition table [ 40.543254][ T5143] loop2: partition table beyond EOD, truncated [ 40.556836][ T2397] usbhid 6-1:0.0: can't add hid device: -71 [ 40.559646][ T2397] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 40.562071][ T5940] vivid-000: ================= START STATUS ================= [ 40.562089][ T5940] vivid-000: Radio HW Seek Mode: Bounded [ 40.562102][ T5940] vivid-000: Radio Programmable HW Seek: false [ 40.562112][ T5940] vivid-000: RDS Rx I/O Mode: Block I/O [ 40.562122][ T5940] vivid-000: Generate RBDS Instead of RDS: false [ 40.562132][ T5940] vivid-000: RDS Reception: true [ 40.562142][ T5940] vivid-000: RDS Program Type: 0 inactive [ 40.562154][ T5940] vivid-000: RDS PS Name: inactive [ 40.562166][ T5940] vivid-000: RDS Radio Text: inactive [ 40.562178][ T5940] vivid-000: RDS Traffic Announcement: false inactive [ 40.562190][ T5940] vivid-000: RDS Traffic Program: false inactive [ 40.562202][ T5940] vivid-000: RDS Music: false inactive [ 40.562218][ T5940] vivid-000: ================== END STATUS ================== [ 40.591790][ T5143] Dev loop2: unable to read RDB block 7 [ 40.591864][ T5143] loop2: unable to read partition table [ 40.592064][ T5143] loop2: partition table beyond EOD, truncated [ 40.597763][ T2397] usb 6-1: USB disconnect, device number 2 [ 40.606460][ T5945] FAULT_INJECTION: forcing a failure. [ 40.606460][ T5945] name fail_futex, interval 1, probability 0, space 0, times 1 [ 40.606496][ T5945] CPU: 3 UID: 0 PID: 5945 Comm: syz.2.21 Not tainted syzkaller #0 PREEMPT(full) [ 40.606521][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.606529][ T5945] Call Trace: [ 40.606533][ T5945] [ 40.606538][ T5945] dump_stack_lvl+0x100/0x190 [ 40.606557][ T5945] should_fail_ex.cold+0x5/0xa [ 40.606573][ T5945] get_futex_key+0x1d0/0x14f0 [ 40.606589][ T5945] ? __pfx_get_futex_key+0x10/0x10 [ 40.606607][ T5945] futex_wait_setup+0x91/0x540 [ 40.606628][ T5945] __futex_wait+0x19f/0x300 [ 40.606646][ T5945] ? __pfx___futex_wait+0x10/0x10 [ 40.606662][ T5945] ? __pfx_try_to_wake_up+0x10/0x10 [ 40.606674][ T5945] ? futex_hash+0x311/0x400 [ 40.606687][ T5945] ? __pfx_futex_wake_mark+0x10/0x10 [ 40.606706][ T5945] ? find_held_lock+0x2b/0x80 [ 40.606721][ T5945] ? futex_wake+0x4ea/0x5e0 [ 40.606740][ T5945] futex_wait+0xe6/0x370 [ 40.606756][ T5945] ? __pfx_futex_wait+0x10/0x10 [ 40.606775][ T5945] ? percpu_counter_add_batch+0xb9/0x230 [ 40.606787][ T5945] ? errseq_sample+0x51/0x70 [ 40.606803][ T5945] ? file_init_path+0x48e/0x670 [ 40.606818][ T5945] do_futex+0x265/0x440 [ 40.606832][ T5945] ? __pfx_do_futex+0x10/0x10 [ 40.606846][ T5945] ? fd_install+0x223/0x580 [ 40.606861][ T5945] __x64_sys_futex+0x34f/0x4d0 [ 40.606875][ T5945] ? __sys_socket+0xac/0x260 [ 40.606890][ T5945] ? __pfx___x64_sys_futex+0x10/0x10 [ 40.606909][ T5945] do_syscall_64+0x123/0x790 [ 40.606924][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.606947][ T5945] RIP: 0033:0x7f2998d9e159 [ 40.606957][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.606968][ T5945] RSP: 002b:00007f2999cef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 40.606979][ T5945] RAX: ffffffffffffffda RBX: 00007f2999025fa8 RCX: 00007f2998d9e159 [ 40.606986][ T5945] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2999025fa8 [ 40.606992][ T5945] RBP: 00007f2999025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 40.606998][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.607004][ T5945] R13: 00007f2999026038 R14: 00007ffc96408830 R15: 00007ffc96408918 [ 40.607018][ T5945] [ 40.611879][ T37] IPVS: starting estimator thread 0... [ 40.642195][ T5950] jffs2: notice: (5950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 40.672481][ T5143] Dev loop2: unable to read RDB block 7 [ 40.672502][ T5143] loop2: unable to read partition table [ 40.672585][ T5143] loop2: partition table beyond EOD, truncated [ 40.689019][ T5143] Dev loop2: unable to read RDB block 7 [ 40.689039][ T5143] loop2: unable to read partition table [ 40.689118][ T5143] loop2: partition table beyond EOD, truncated [ 40.704349][ T5143] Dev loop2: unable to read RDB block 7 [ 40.704367][ T5143] loop2: unable to read partition table [ 40.704449][ T5143] loop2: partition table beyond EOD, truncated [ 40.713667][ T5947] IPVS: using max 44 ests per chain, 105600 per kthread [ 40.748789][ T5963] netlink: 48 bytes leftover after parsing attributes in process `syz.2.25'. [ 40.819134][ T5143] Dev loop2: unable to read RDB block 7 [ 40.819492][ T5143] loop2: unable to read partition table [ 40.819619][ T5143] loop2: partition table beyond EOD, truncated [ 40.847204][ T5143] Dev loop2: unable to read RDB block 7 [ 40.847460][ T5143] loop2: unable to read partition table [ 40.847548][ T5143] loop2: partition table beyond EOD, truncated [ 40.909786][ T5980] jffs2: notice: (5980) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 40.950216][ T5984] cgroup2: Unknown parameter 'io' [ 40.963657][ T2397] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 41.077939][ T5994] Format for deleting device is "id" (uint). [ 41.115073][ T2397] usb 6-1: Using ep0 maxpacket: 32 [ 41.117064][ T2397] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 41.122489][ T2397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.127132][ T2397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.135029][ T2397] usb 6-1: config 0 descriptor?? [ 41.140839][ T2397] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 41.146170][ T2397] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 41.236833][ T6000] dummy0: entered allmulticast mode [ 41.240581][ T6000] Mount JFS Failure: -22 [ 41.240636][ T6000] jfs_mount failed w/return code = -22 [ 41.348993][ C2] IPv4: Oversized IP packet from 127.0.0.1 [ 41.485917][ T6021] netlink: 168 bytes leftover after parsing attributes in process `syz.3.39'. [ 41.495691][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.39'. [ 41.498637][ T6021] capability: warning: `syz.3.39' uses deprecated v2 capabilities in a way that may be insecure [ 41.498924][ T6021] overlay: ./file0 is not a directory [ 41.548678][ T5886] usb 6-1: USB disconnect, device number 3 [ 41.555298][ T5886] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 41.565023][ T65] Bluetooth: hci3: command tx timeout [ 41.565079][ T5729] Bluetooth: hci0: command tx timeout [ 41.565088][ T65] Bluetooth: hci1: command tx timeout [ 41.565101][ T65] Bluetooth: hci2: command tx timeout [ 41.577543][ T6029] jffs2: notice: (6029) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 41.728773][ T6038] syzkaller0: entered promiscuous mode [ 41.728826][ T6038] syzkaller0: entered allmulticast mode [ 42.107199][ T6056] jffs2: notice: (6056) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 42.159742][ T65] Bluetooth: Wrong link type (-71) [ 42.248177][ T6071] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 42.361436][ T43] kauditd_printk_skb: 131 callbacks suppressed [ 42.361505][ T43] audit: type=1400 audit(1788726529.848:301): avc: denied { ioctl } for pid=6064 comm="syz.3.59" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.431594][ T6077] netlink: 536 bytes leftover after parsing attributes in process `syz.0.62'. [ 42.440089][ T6077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6077 comm=syz.0.62 [ 42.470935][ T6083] netlink: 9152 bytes leftover after parsing attributes in process `syz.0.63'. [ 42.479452][ T6085] jffs2: notice: (6085) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 42.480523][ T43] audit: type=1400 audit(1788726529.968:302): avc: denied { write } for pid=6084 comm="syz.1.64" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.506110][ T43] audit: type=1400 audit(1788726529.998:303): avc: denied { read } for pid=6087 comm="syz.0.65" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 42.506247][ T43] audit: type=1400 audit(1788726529.998:304): avc: denied { open } for pid=6087 comm="syz.0.65" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 42.517580][ T6090] syz_tun: entered allmulticast mode [ 42.524752][ T6089] syz_tun: left allmulticast mode [ 42.624666][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'. [ 42.625618][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 42.728780][ T43] audit: type=1400 audit(1788726530.218:305): avc: denied { write } for pid=6101 comm="syz.1.71" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 42.800344][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 42.806846][ T6113] 9pnet_virtio: no channels available for device syz [ 42.893207][ T43] audit: type=1400 audit(1788726530.378:306): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.984071][ T5821] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 43.113677][ T5821] usb 6-1: device descriptor read/64, error -71 [ 43.208479][ T43] audit: type=1400 audit(1788726530.698:307): avc: denied { read } for pid=6119 comm="syz.3.74" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 43.208733][ T43] audit: type=1400 audit(1788726530.698:308): avc: denied { open } for pid=6119 comm="syz.3.74" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 43.209391][ T43] audit: type=1400 audit(1788726530.698:309): avc: denied { ioctl } for pid=6119 comm="syz.3.74" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 43.211216][ T43] audit: type=1400 audit(1788726530.698:310): avc: denied { mounton } for pid=6119 comm="syz.3.74" path="/22/file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.211359][ T6120] 9p: Bad value for 'rq' [ 43.258593][ T6123] jffs2: notice: (6123) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 43.347639][ T6133] affs: No valid root block on device sr0 [ 43.363776][ T5821] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 43.420378][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.84'. [ 43.449282][ T6149] jffs2: notice: (6149) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 43.469108][ T6133] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 43.469149][ T6133] [U] J"—e:ÀÆ" [ 43.503665][ T5821] usb 6-1: device descriptor read/64, error -71 [ 43.556000][ T6154] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 43.556703][ T6154] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 43.573222][ T6154] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 43.578170][ T6154] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 43.579289][ T6154] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 43.587086][ T6154] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 43.591798][ T6154] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 43.592165][ T6154] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 43.597508][ T6154] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 43.601894][ T6154] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 43.601947][ T6154] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 43.607520][ T6154] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 43.613938][ T5821] usb usb6-port1: attempt power cycle [ 43.645640][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.645688][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.645768][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.645792][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.645842][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.645864][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.645915][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.645939][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.646014][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.646046][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.646126][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.646158][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.646246][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.646279][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.646360][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.646393][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.646459][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.646482][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.647727][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.647759][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.647812][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.647834][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.647883][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.647905][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.647954][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.647976][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648027][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648050][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648107][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648139][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648199][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648222][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648275][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648286][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648319][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648328][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648361][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648369][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648403][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648411][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648445][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648453][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648486][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648495][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648878][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648892][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648930][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648939][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.648973][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.648982][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.649016][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.649024][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.649059][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.649068][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.649104][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.649113][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.649145][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.649154][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.649187][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.649196][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.649229][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.649243][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.649276][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.649284][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.649317][ T65] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 43.649326][ T65] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 43.677354][ T65] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 43.679878][ T6171] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 43.974360][ T5821] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 43.994381][ T5821] usb 6-1: device descriptor read/8, error -71 [ 44.146323][ T6186] jffs2: notice: (6186) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 44.191414][ T6189] Invalid logical block size (5) [ 44.233606][ T5821] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 44.264461][ T5821] usb 6-1: device descriptor read/8, error -71 [ 44.326667][ T6201] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 44.373864][ T5821] usb usb6-port1: unable to enumerate USB device [ 44.554787][ T6204] bonding: b is being created... [ 44.685901][ T6214] bond1: (slave veth0_to_batadv): Device is not bonding slave [ 44.685948][ T6214] bond1: option active_slave: invalid value (veth0_to_batadv) [ 44.690575][ T6214] bond1 (unregistering): Released all slaves [ 44.761281][ T5445] 8021q: adding VLAN 0 to HW filter on device b [ 44.776827][ T6222] __nla_validate_parse: 2 callbacks suppressed [ 44.776887][ T6222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.103'. [ 44.780302][ T6222] fuse: Bad value for 'fd' [ 44.969076][ T6233] jffs2: notice: (6233) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 45.009854][ T6238] xt_socket: unknown flags 0x58 [ 45.280623][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 45.339108][ T6256] netlink: 'syz.0.113': attribute type 3 has an invalid length. [ 45.644164][ T5739] Bluetooth: hci1: command 0x0419 tx timeout [ 45.646473][ T65] Bluetooth: hci3: command 0x0419 tx timeout [ 45.722638][ T6261] jffs2: notice: (6261) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 45.826590][ T6266] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 46.003693][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 46.164917][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 46.167725][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 46.172716][ T10] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 46.172771][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 46.172843][ T10] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 46.172879][ T10] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 46.172918][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 46.197132][ T10] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 46.197180][ T10] usb 8-1: Product: syz [ 46.197219][ T10] usb 8-1: Manufacturer: syz [ 46.197247][ T10] usb 8-1: SerialNumber: syz [ 46.215568][ T10] usb 8-1: config 0 descriptor?? [ 46.225838][ T6280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.122'. [ 46.225985][ T6280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6280 comm=syz.0.122 [ 46.229341][ T6285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.122'. [ 46.229591][ T6286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6286 comm=syz.0.122 [ 46.244223][ T10] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 46.252026][ T10] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 46.282523][ T6291] jffs2: notice: (6291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 46.345324][ T6299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.127'. [ 46.372744][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 46.425156][ T1591] usb 8-1: USB disconnect, device number 2 [ 46.425248][ C2] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 46.429904][ T1591] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 46.430747][ T6307] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.128'. [ 46.431283][ T6305] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.128'. [ 46.431407][ T6306] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.128'. [ 46.707361][ T6324] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 46.721651][ T6324] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 46.727506][ T6324] netlink: 'syz.1.133': attribute type 5 has an invalid length. [ 46.732317][ T6324] program syz.1.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.747321][ T6328] jffs2: notice: (6328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 46.764386][ T6331] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 46.932574][ T6337] kvm [6336]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x100000006 [ 46.955780][ T6342] FAULT_INJECTION: forcing a failure. [ 46.955780][ T6342] name failslab, interval 1, probability 0, space 0, times 1 [ 46.955841][ T6342] CPU: 2 UID: 0 PID: 6342 Comm: syz.0.140 Tainted: G L syzkaller #0 PREEMPT(full) [ 46.955867][ T6342] Tainted: [L]=SOFTLOCKUP [ 46.955872][ T6342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.955878][ T6342] Call Trace: [ 46.955883][ T6342] [ 46.955888][ T6342] dump_stack_lvl+0x100/0x190 [ 46.955907][ T6342] should_fail_ex.cold+0x5/0xa [ 46.955923][ T6342] should_failslab+0xc2/0x120 [ 46.955937][ T6342] __kmalloc_noprof+0xfc/0x840 [ 46.955948][ T6342] ? lsm_blob_alloc+0x68/0x90 [ 46.955964][ T6342] lsm_blob_alloc+0x68/0x90 [ 46.955977][ T6342] security_sk_alloc+0x2d/0x290 [ 46.955994][ T6342] sk_prot_alloc+0x1d1/0x2a0 [ 46.956008][ T6342] sk_alloc+0x36/0xe80 [ 46.956026][ T6342] inet_create+0x3a0/0x1060 [ 46.956040][ T6342] ? inet_create+0x94/0x1060 [ 46.956055][ T6342] __sock_create+0x339/0x860 [ 46.956072][ T6342] mptcp_subflow_create_socket+0xec/0xa30 [ 46.956090][ T6342] ? mptcp_release_cb+0x48a/0x710 [ 46.956103][ T6342] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 46.956124][ T6342] ? lock_acquire+0x1d1/0x380 [ 46.956143][ T6342] __mptcp_nmpc_sk+0x17f/0x880 [ 46.956160][ T6342] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 46.956174][ T6342] ? __local_bh_enable_ip+0xa5/0x120 [ 46.956187][ T6342] mptcp_getsockopt+0xce7/0xe50 [ 46.956204][ T6342] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 46.956219][ T6342] ? __asan_memset+0x23/0x50 [ 46.956235][ T6342] ? _copy_from_user+0x59/0xd0 [ 46.956260][ T6342] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 46.956299][ T6342] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 46.956325][ T6342] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 46.956344][ T6342] do_sock_getsockopt+0x50a/0x6e0 [ 46.956360][ T6342] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 46.956376][ T6342] ? __fget_files+0x34/0x3d0 [ 46.956388][ T6342] ? find_held_lock+0x2b/0x80 [ 46.956407][ T6342] ? __fget_files+0x21f/0x3d0 [ 46.956422][ T6342] __sys_getsockopt+0x148/0x260 [ 46.956436][ T6342] ? __x64_sys_getsockopt+0xbd/0x160 [ 46.956447][ T6342] __x64_sys_getsockopt+0xbd/0x160 [ 46.956456][ T6342] ? do_syscall_64+0xae/0x790 [ 46.956469][ T6342] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.956481][ T6342] do_syscall_64+0x123/0x790 [ 46.956495][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.956506][ T6342] RIP: 0033:0x7efea2f9e159 [ 46.956516][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.956526][ T6342] RSP: 002b:00007efea3dde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 46.956538][ T6342] RAX: ffffffffffffffda RBX: 00007efea3225fa0 RCX: 00007efea2f9e159 [ 46.956545][ T6342] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000005 [ 46.956551][ T6342] RBP: 00007efea3035024 R08: 0000000000000000 R09: 0000000000000000 [ 46.956557][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.956564][ T6342] R13: 00007efea3226038 R14: 00007efea3225fa0 R15: 00007ffeba2e3658 [ 46.956577][ T6342] [ 47.226558][ T6353] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 47.277985][ T6357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6357 comm=syz.2.142 [ 47.278119][ T6357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.142'. [ 47.724127][ T5739] Bluetooth: hci3: command 0x0419 tx timeout [ 47.724148][ T65] Bluetooth: hci1: command 0x0419 tx timeout [ 47.842332][ T43] kauditd_printk_skb: 75 callbacks suppressed [ 47.842396][ T43] audit: type=1400 audit(1788726535.328:386): avc: denied { create } for pid=6362 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.842979][ T43] audit: type=1400 audit(1788726535.328:387): avc: denied { create } for pid=6362 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.857923][ T43] audit: type=1400 audit(1788726535.348:388): avc: denied { setopt } for pid=6362 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.858234][ T43] audit: type=1400 audit(1788726535.348:389): avc: denied { setopt } for pid=6362 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.859208][ T43] audit: type=1400 audit(1788726535.348:390): avc: denied { write } for pid=6362 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.981184][ T6371] jffs2: notice: (6371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 47.983084][ T43] audit: type=1400 audit(1788726535.468:391): avc: denied { write } for pid=6370 comm="syz.0.146" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.038039][ T6378] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 48.038081][ T6378] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 48.069175][ T6387] NILFS (loop1): device size too small [ 48.071800][ T43] audit: type=1400 audit(1788726535.558:392): avc: denied { getopt } for pid=6377 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.074817][ T43] audit: type=1400 audit(1788726535.558:393): avc: denied { read } for pid=6377 comm="syz.0.150" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.074842][ T43] audit: type=1400 audit(1788726535.568:394): avc: denied { open } for pid=6377 comm="syz.0.150" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.074861][ T43] audit: type=1400 audit(1788726535.568:395): avc: denied { ioctl } for pid=6377 comm="syz.0.150" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.147022][ T6391] input: syz0 as /devices/virtual/input/input7 [ 48.151670][ T6393] SELinux: DCCP has been removed, pid=6393 comm=syz.3.153 [ 48.162065][ T6393] rnbd_client L127: Can't parse path ip:127.0'0.1: -22 [ 48.201607][ T6403] jffs2: notice: (6403) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 49.050875][ T6420] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 49.062096][ T6420] team0: Port device veth0 added [ 49.100202][ T6427] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 49.213395][ T6439] jffs2: notice: (6439) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 49.291013][ T6446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.332932][ T6444] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.344292][ T6447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.400668][ T6446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.403739][ T5886] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 49.576838][ T5886] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 49.577882][ T5886] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 49.577905][ T5886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 49.577920][ T5886] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 49.577947][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.583239][ T6432] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.584971][ T5886] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 49.606768][ T5886] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 49.722622][ T6453] netlink: 'syz.0.174': attribute type 5 has an invalid length. [ 49.803750][ T5733] Bluetooth: hci3: command 0x0419 tx timeout [ 49.803846][ T5739] Bluetooth: hci1: command 0x0419 tx timeout [ 49.948670][ T6465] jffs2: notice: (6465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 50.020901][ T6471] tmpfs: Bad value for 'mpol' [ 50.084149][ T6482] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 50.135619][ T6486] __nla_validate_parse: 2 callbacks suppressed [ 50.135700][ T6486] netlink: 48 bytes leftover after parsing attributes in process `syz.2.185'. [ 50.141780][ T6487] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 50.385097][ T6496] jffs2: notice: (6496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 50.457341][ T6501] netlink: 32 bytes leftover after parsing attributes in process `syz.2.190'. [ 50.458036][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 50.458048][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 50.537024][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 50.537085][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 50.547413][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 50.547471][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 50.573721][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.573814][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.573882][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.573930][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.633020][ T6512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=6512 comm=syz.2.193 [ 50.675854][ T6515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'. [ 50.860868][ T6524] jffs2: notice: (6524) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 50.902631][ T6528] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 50.986716][ T6538] FAULT_INJECTION: forcing a failure. [ 50.986716][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 50.987385][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.0.202 Tainted: G L syzkaller #0 PREEMPT(full) [ 50.987414][ T6538] Tainted: [L]=SOFTLOCKUP [ 50.987421][ T6538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.987432][ T6538] Call Trace: [ 50.987439][ T6538] [ 50.987446][ T6538] dump_stack_lvl+0x100/0x190 [ 50.987491][ T6538] should_fail_ex.cold+0x5/0xa [ 50.987517][ T6538] should_failslab+0xc2/0x120 [ 50.987543][ T6538] kmem_cache_alloc_noprof+0x92/0x6a0 [ 50.987563][ T6538] ? __asan_memcpy+0x3c/0x60 [ 50.987588][ T6538] ? __kernfs_new_node+0xd2/0xa10 [ 50.987618][ T6538] __kernfs_new_node+0xd2/0xa10 [ 50.987644][ T6538] ? kernfs_add_one+0x611/0xaa0 [ 50.987667][ T6538] ? kernfs_add_one+0x611/0xaa0 [ 50.987691][ T6538] ? __pfx___kernfs_new_node+0x10/0x10 [ 50.987724][ T6538] ? lock_acquire+0x1d1/0x380 [ 50.987742][ T6538] ? kernfs_root+0x23/0x2a0 [ 50.987767][ T6538] ? find_held_lock+0x2b/0x80 [ 50.987793][ T6538] ? kernfs_root+0xee/0x2a0 [ 50.987818][ T6538] ? kernfs_root+0xee/0x2a0 [ 50.987846][ T6538] kernfs_create_dir_ns+0xa6/0x2b0 [ 50.987877][ T6538] sysfs_create_dir_ns+0x13a/0x2b0 [ 50.987901][ T6538] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 50.987922][ T6538] ? find_held_lock+0x2b/0x80 [ 50.987946][ T6538] ? kobject_add_internal+0x25f/0x930 [ 50.987979][ T6538] ? kobject_add_internal+0x25f/0x930 [ 50.988010][ T6538] ? class_dir_child_ns_type+0xd/0x60 [ 50.988035][ T6538] kobject_add_internal+0x2c8/0x930 [ 50.988067][ T6538] kobject_add+0x16a/0x1e0 [ 50.988094][ T6538] ? __pfx_kobject_add+0x10/0x10 [ 50.988126][ T6538] ? kobject_put+0xb9/0x640 [ 50.988158][ T6538] device_add+0x294/0x1970 [ 50.988182][ T6538] ? __pfx_dev_set_name+0x10/0x10 [ 50.988205][ T6538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.988224][ T6538] ? __pfx_device_add+0x10/0x10 [ 50.988249][ T6538] ? lockdep_init_map_type+0x5c/0x250 [ 50.988270][ T6538] ? __init_waitqueue_head+0xca/0x150 [ 50.988298][ T6538] wakeup_source_device_create+0x243/0x2e0 [ 50.988324][ T6538] wakeup_source_sysfs_add+0x1c/0x90 [ 50.988349][ T6538] wakeup_source_register+0x154/0x3e0 [ 50.988371][ T6538] ep_create_wakeup_source+0x1df/0x2e0 [ 50.988397][ T6538] ? __mutex_unlock_slowpath+0x35d/0x930 [ 50.988422][ T6538] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 50.988453][ T6538] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 50.988480][ T6538] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 50.988514][ T6538] do_epoll_ctl_file+0x1e26/0x36e0 [ 50.988550][ T6538] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 50.988573][ T6538] ? lock_acquire+0x1d1/0x380 [ 50.988592][ T6538] ? __fget_files+0x34/0x3d0 [ 50.988615][ T6538] ? find_held_lock+0x2b/0x80 [ 50.988640][ T6538] ? __fget_files+0x215/0x3d0 [ 50.988663][ T6538] ? __fget_files+0x21f/0x3d0 [ 50.988689][ T6538] ? do_epoll_ctl+0xfd/0x1a0 [ 50.988719][ T6538] do_epoll_ctl+0xfd/0x1a0 [ 50.988749][ T6538] ? __pfx_do_epoll_ctl+0x10/0x10 [ 50.988784][ T6538] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 50.988816][ T6538] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 50.988854][ T6538] do_syscall_64+0x123/0x790 [ 50.988881][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.988904][ T6538] RIP: 0033:0x7efea2f9e159 [ 50.988919][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.988936][ T6538] RSP: 002b:00007efea3dde028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 50.988957][ T6538] RAX: ffffffffffffffda RBX: 00007efea3225fa0 RCX: 00007efea2f9e159 [ 50.988969][ T6538] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 50.988980][ T6538] RBP: 00007efea3035024 R08: 0000000000000000 R09: 0000000000000000 [ 50.988991][ T6538] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.989002][ T6538] R13: 00007efea3226038 R14: 00007efea3225fa0 R15: 00007ffeba2e3658 [ 50.989028][ T6538] [ 50.989054][ T6538] kobject: kobject_add_internal failed for wakeup23 (error: -12 parent: wakeup) [ 51.000032][ T6539] xt_hashlimit: size too large, truncated to 1048576 [ 51.065266][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 51.134114][ T6551] FAULT_INJECTION: forcing a failure. [ 51.134114][ T6551] name failslab, interval 1, probability 0, space 0, times 0 [ 51.134134][ T6551] CPU: 2 UID: 0 PID: 6551 Comm: syz.0.206 Tainted: G L syzkaller #0 PREEMPT(full) [ 51.134149][ T6551] Tainted: [L]=SOFTLOCKUP [ 51.134153][ T6551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.134166][ T6551] Call Trace: [ 51.134170][ T6551] [ 51.134175][ T6551] dump_stack_lvl+0x100/0x190 [ 51.134194][ T6551] should_fail_ex.cold+0x5/0xa [ 51.134212][ T6551] should_failslab+0xc2/0x120 [ 51.134226][ T6551] kmem_cache_alloc_noprof+0x92/0x6a0 [ 51.134240][ T6551] ? alloc_empty_file+0x5b/0x1c0 [ 51.134257][ T6551] alloc_empty_file+0x5b/0x1c0 [ 51.134271][ T6551] path_openat+0xdb/0x2440 [ 51.134285][ T6551] ? __pfx_path_openat+0x10/0x10 [ 51.134301][ T6551] do_file_open+0x20e/0x430 [ 51.134314][ T6551] ? __pfx_do_file_open+0x10/0x10 [ 51.134337][ T6551] ? _raw_spin_unlock+0x28/0x50 [ 51.134347][ T6551] ? alloc_fd+0x471/0x7a0 [ 51.134363][ T6551] do_sys_openat2+0x10f/0x1e0 [ 51.134377][ T6551] ? __pfx_do_sys_openat2+0x10/0x10 [ 51.134391][ T6551] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 51.134408][ T6551] __x64_sys_openat+0x12d/0x210 [ 51.134422][ T6551] ? __pfx___x64_sys_openat+0x10/0x10 [ 51.134436][ T6551] ? ksys_write+0x1ac/0x250 [ 51.134450][ T6551] do_syscall_64+0x123/0x790 [ 51.134464][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.134475][ T6551] RIP: 0033:0x7efea2f9e159 [ 51.134485][ T6551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.134495][ T6551] RSP: 002b:00007efea3dde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 51.134506][ T6551] RAX: ffffffffffffffda RBX: 00007efea3225fa0 RCX: 00007efea2f9e159 [ 51.134512][ T6551] RDX: 0000000000080600 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 51.134519][ T6551] RBP: 00007efea3035024 R08: 0000000000000000 R09: 0000000000000000 [ 51.134525][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.134531][ T6551] R13: 00007efea3226038 R14: 00007efea3225fa0 R15: 00007ffeba2e3658 [ 51.134544][ T6551] [ 51.157184][ T6551] netlink: 'syz.0.206': attribute type 2 has an invalid length. [ 51.583674][ T5886] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.744351][ T5886] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 51.745374][ T5886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.745396][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.751265][ T5886] as10x_usb: device has been detected [ 51.751749][ T5886] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 51.779043][ T5886] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 51.806049][ T5886] as10x_usb: error during firmware upload part1 [ 51.806480][ T5886] Registered device Abilis Systems DVB-Titan [ 51.883654][ T65] Bluetooth: hci1: command 0x0419 tx timeout [ 51.883735][ T65] Bluetooth: hci3: command 0x0419 tx timeout [ 52.110751][ T6582] atomic_op ffff888048aeb1e0 conn xmit_atomic 0000000000000000 [ 52.130875][ T1591] usb 6-1: USB disconnect, device number 8 [ 52.155592][ T1591] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 52.156034][ T1591] cyberjack 6-1:1.0: device disconnected [ 52.860362][ T5733] Bluetooth: hci0: unexpected event for opcode 0x202d [ 52.870876][ T6612] macsec1: entered promiscuous mode [ 52.870944][ T6612] batadv0: entered promiscuous mode [ 52.871456][ T6612] macsec1: entered allmulticast mode [ 52.871466][ T6612] batadv0: entered allmulticast mode [ 52.872751][ T6612] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 52.874761][ T6612] batadv0: left allmulticast mode [ 52.874776][ T6612] batadv0: left promiscuous mode [ 52.885606][ T43] kauditd_printk_skb: 77 callbacks suppressed [ 52.885616][ T43] audit: type=1400 audit(1788726540.378:473): avc: denied { getopt } for pid=6613 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.888346][ T6614] tc_dump_action: action bad kind [ 52.929454][ T6614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 52.929488][ T6614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.930403][ T6614] vhci_hcd vhci_hcd.0: Device attached [ 52.933158][ T6617] vhci_hcd: connection closed [ 52.936132][ T12] vhci_hcd vhci_hcd.2: stop threads [ 52.936408][ T12] vhci_hcd vhci_hcd.2: release socket [ 52.936432][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 53.096893][ T6624] syz.3.226 uses obsolete (PF_INET,SOCK_PACKET) [ 53.097529][ T43] audit: type=1400 audit(1788726540.588:474): avc: denied { ioctl } for pid=6623 comm="syz.3.226" path="socket:[12986]" dev="sockfs" ino=12986 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.109171][ T5733] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 53.111279][ T43] audit: type=1400 audit(1788726540.598:475): avc: denied { open } for pid=6623 comm="syz.3.226" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 53.112109][ T43] audit: type=1400 audit(1788726540.598:476): avc: denied { ioctl } for pid=6623 comm="syz.3.226" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 53.116622][ T43] audit: type=1400 audit(1788726540.608:477): avc: denied { nlmsg_read } for pid=6623 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.305805][ T6628] capability: warning: `syz.3.228' uses 32-bit capabilities (legacy support in use) [ 53.383396][ T43] audit: type=1400 audit(1788726540.868:478): avc: denied { map } for pid=6557 comm="syz.0.208" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.384787][ T43] audit: type=1400 audit(1788726540.878:479): avc: denied { create } for pid=6557 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.390301][ T6559] binder: BINDER_SET_CONTEXT_MGR already set [ 53.390308][ T6559] binder: 6557:6559 ioctl 4018620d 200000004a80 returned -16 [ 53.390729][ T6559] binder: BINDER_SET_CONTEXT_MGR already set [ 53.390735][ T6559] binder: 6557:6559 ioctl 4018620d 200000000040 returned -16 [ 53.390821][ T6559] binder: 6557:6559 ioctl c0306201 2000000000c0 returned -22 [ 53.426307][ T43] audit: type=1400 audit(1788726540.918:480): avc: denied { mount } for pid=6634 comm="syz.3.230" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.428794][ T43] audit: type=1800 audit(1788726540.918:481): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.230" name="(" dev="sda1" ino=2039 res=0 errno=0 [ 53.525058][ T6639] xt_hashlimit: size too large, truncated to 1048576 [ 53.585293][ T5886] usb 5-1: USB disconnect, device number 2 [ 53.631110][ T5886] Unregistered device Abilis Systems DVB-Titan [ 53.632545][ T5886] as10x_usb: device has been disconnected [ 53.680871][ T6644] bond1: entered promiscuous mode [ 53.791981][ T43] audit: type=1400 audit(1788726541.278:482): avc: denied { create } for pid=6648 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.963621][ T5739] Bluetooth: hci1: command 0x0419 tx timeout [ 54.024226][ T6662] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 54.099306][ T6671] netlink: 'syz.2.240': attribute type 8 has an invalid length. [ 54.233833][ T5886] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.375765][ T6682] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 54.375820][ T6682] overlayfs: failed to set xattr on upper [ 54.386226][ T6682] overlayfs: ...falling back to redirect_dir=nofollow. [ 54.386305][ T6682] overlayfs: ...falling back to index=off. [ 54.386328][ T6682] overlayfs: ...falling back to uuid=null. [ 54.393911][ T5886] usb 8-1: Using ep0 maxpacket: 8 [ 54.396486][ T5886] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 54.397494][ T5886] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 54.397516][ T5886] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.397527][ T5886] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 54.397539][ T5886] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.397550][ T5886] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.397568][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.608064][ T5886] usb 8-1: usb_control_msg returned -32 [ 54.608169][ T5886] usbtmc 8-1:16.0: can't read capabilities [ 54.685497][ T6696] xt_hashlimit: size too large, truncated to 1048576 [ 54.690282][ T6697] xt_hashlimit: size too large, truncated to 1048576 [ 54.971876][ T6708] usbtmc 8-1:16.0: stb usb_control_msg returned -32 [ 54.982684][ T5886] usb 8-1: USB disconnect, device number 3 [ 55.556023][ T6728] ip_tables: iptables: counters copy to user failed while replacing table [ 55.690961][ T6741] i2c i2c-0: delete_device: Can't find device in list [ 55.739813][ T6746] xt_hashlimit: size too large, truncated to 1048576 [ 55.795215][ T6747] __nla_validate_parse: 7 callbacks suppressed [ 55.795433][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.258'. [ 55.809276][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.258'. [ 55.843220][ T6746] trusted_key: encrypted_key: hex blob is missing [ 56.233643][ T1476] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.383996][ T1476] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 56.384701][ T1476] usb 5-1: Dual-Role OTG device on HNP port [ 56.384955][ T1476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.392096][ T1476] gspca_main: spca501-2.14.0 probing 0000:0000 ** replaying previous printk message ** [ 56.392450][ T1476] gspca_spca501: reg write: error -32 [ 56.392460][ T1476] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 56.392513][ T1476] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 56.398116][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 56.411802][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 56.414638][ C1] CPU: 1 UID: 0 PID: 1476 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.418010][ C1] Tainted: [L]=SOFTLOCKUP [ 56.419357][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.422662][ C1] Workqueue: usb_hub_wq hub_event [ 56.424311][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 56.426177][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 56.432100][ C1] RSP: 0018:ffffc900006b09d8 EFLAGS: 00010002 [ 56.434004][ C1] RAX: dffffc0000000000 RBX: ffff888035e48000 RCX: 0000000000000103 [ 56.436453][ C1] RDX: 00000000000000e6 RSI: ffffffff87f565e6 RDI: ffff888035e48128 [ 56.438904][ C1] RBP: ffff888035e48128 R08: 0000000000000004 R09: 0000000000000020 [ 56.441354][ C1] R10: 0000000000000020 R11: 000000000000762b R12: ffff888035e480f0 [ 56.443812][ C1] R13: ffff888035e48128 R14: ffff888035e48740 R15: 0000000000000001 [ 56.446277][ C1] FS: 0000000000000000(0000) GS:ffff8880d5c5f000(0000) knlGS:0000000000000000 [ 56.449028][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.451115][ C1] CR2: 00007f2998deb840 CR3: 000000003610e000 CR4: 0000000000352ef0 [ 56.453586][ C1] Call Trace: [ 56.454658][ C1] [ 56.455580][ C1] f_midi2_set_alt+0x444/0x5f0 [ 56.457100][ C1] composite_setup+0x16f8/0x9290 [ 56.458661][ C1] ? __lock_acquire+0x4c5/0x1ec0 [ 56.460248][ C1] ? __pfx_composite_setup+0x10/0x10 [ 56.461921][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.463601][ C1] ? do_raw_spin_lock+0x128/0x260 [ 56.465196][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.466889][ C1] ? configfs_composite_setup+0xfb/0x130 [ 56.468650][ C1] configfs_composite_setup+0xfb/0x130 [ 56.470358][ C1] dummy_timer+0x2039/0x3700 [ 56.471816][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 56.473637][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 56.475389][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 56.476942][ C1] ? mark_held_locks+0x40/0x70 [ 56.478449][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.480284][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 56.481845][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 56.483483][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 56.485108][ C1] handle_softirqs+0x1e6/0x9d0 [ 56.486619][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 56.488275][ C1] ? _raw_spin_unlock+0x28/0x50 [ 56.489824][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 56.491585][ C1] __irq_exit_rcu+0x194/0x210 [ 56.493071][ C1] irq_exit_rcu+0x9/0x30 [ 56.494432][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 56.496178][ C1] [ 56.497114][ C1] [ 56.498054][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 56.499926][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 56.501876][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 4d 14 f6 48 89 df e8 4e a3 14 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 aa 03 f6 65 48 83 3d e4 24 b9 08 00 74 16 5b [ 56.507676][ C1] RSP: 0018:ffffc90006a4e880 EFLAGS: 00000246 [ 56.509522][ C1] RAX: 0000000000000006 RBX: ffff8880283d0000 RCX: 0000000000000040 [ 56.511969][ C1] RDX: 0000000000000001 RSI: ffffffff8e3ebe23 RDI: ffffffff8c621080 [ 56.514417][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 56.516865][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000080000000 [ 56.519277][ C1] R13: ffff88802cd82478 R14: 0000000000000000 R15: ffff88802cd82400 [ 56.521760][ C1] dummy_urb_enqueue+0x56c/0x880 [ 56.523315][ C1] ? __device_attach_driver+0xf1/0x320 [ 56.525193][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 56.526826][ C1] ? bus_for_each_drv+0x159/0x1e0 [ 56.528433][ C1] ? __device_attach+0x1e4/0x4d0 [ 56.530007][ C1] ? device_initial_probe+0xaf/0xd0 [ 56.531672][ C1] ? bus_probe_device+0x64/0x160 [ 56.533267][ C1] ? device_add+0x121d/0x1970 [ 56.534798][ C1] ? usb_new_device.part.0+0xcc2/0x1686 [ 56.536535][ C1] ? hub_event.cold+0x1e3/0xe90 [ 56.538151][ C1] usb_submit_urb+0x827/0x19b0 [ 56.539708][ C1] ? __init_swait_queue_head+0xca/0x150 [ 56.541428][ C1] usb_start_wait_urb+0x10e/0x580 [ 56.543026][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 56.544781][ C1] ? __asan_memset+0x23/0x50 [ 56.546272][ C1] usb_control_msg+0x328/0x4b0 [ 56.547783][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 56.549437][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.551086][ C1] usb_control_msg_send+0xca/0x130 [ 56.552728][ C1] usb_set_interface+0x9b6/0xe20 [ 56.554366][ C1] snd_usb_midi_v2_create+0x629/0x4070 [ 56.556129][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 56.557889][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.559779][ C1] ? snd_info_create_entry+0x6f/0x400 [ 56.561578][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 56.563360][ C1] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 56.565208][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 56.566884][ C1] ? snd_info_create_entry+0x314/0x400 [ 56.568571][ C1] ? usb_ifnum_to_if+0x16f/0x1d0 [ 56.570073][ C1] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 56.571903][ C1] usb_audio_probe+0xf0b/0x3b10 [ 56.573420][ C1] ? __pfx_usb_audio_probe+0x10/0x10 [ 56.575018][ C1] ? do_raw_spin_lock+0x128/0x260 [ 56.576553][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.578481][ C1] ? mark_held_locks+0x40/0x70 [ 56.580028][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 56.581822][ C1] ? find_held_lock+0x2b/0x80 [ 56.583468][ C1] ? mark_held_locks+0x40/0x70 [ 56.584964][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.586795][ C1] usb_probe_interface+0x386/0x9b0 [ 56.588402][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 56.590182][ C1] ? kernfs_put+0x3f/0x60 [ 56.591545][ C1] ? sysfs_create_link+0x68/0xc0 [ 56.593117][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 56.594876][ C1] really_probe+0x241/0xa60 [ 56.596308][ C1] __driver_probe_device+0x210/0x460 [ 56.597972][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.599802][ C1] driver_probe_device+0x4a/0x140 [ 56.601378][ C1] __device_attach_driver+0x1df/0x320 [ 56.603115][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 56.604964][ C1] bus_for_each_drv+0x159/0x1e0 [ 56.606526][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 56.608531][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.610603][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 56.612760][ C1] __device_attach+0x1e4/0x4d0 [ 56.614552][ C1] ? __pfx___device_attach+0x10/0x10 [ 56.616616][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 56.618264][ C1] device_initial_probe+0xaf/0xd0 [ 56.619849][ C1] bus_probe_device+0x64/0x160 [ 56.621359][ C1] device_add+0x121d/0x1970 [ 56.622827][ C1] ? __pfx_device_add+0x10/0x10 [ 56.624362][ C1] ? mark_held_locks+0x40/0x70 [ 56.625903][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.627723][ C1] usb_set_configuration+0xd97/0x1c60 [ 56.629402][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 56.631495][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 56.633489][ C1] usb_probe_device+0xef/0x400 [ 56.634992][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 56.636657][ C1] really_probe+0x241/0xa60 [ 56.638102][ C1] __driver_probe_device+0x210/0x460 [ 56.639760][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.641584][ C1] driver_probe_device+0x4a/0x140 [ 56.643171][ C1] __device_attach_driver+0x1df/0x320 [ 56.644845][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 56.646705][ C1] bus_for_each_drv+0x159/0x1e0 [ 56.648335][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 56.650033][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.651677][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 56.653525][ C1] __device_attach+0x1e4/0x4d0 [ 56.655028][ C1] ? __pfx___device_attach+0x10/0x10 [ 56.656675][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 56.658304][ C1] device_initial_probe+0xaf/0xd0 [ 56.659895][ C1] bus_probe_device+0x64/0x160 [ 56.661406][ C1] device_add+0x121d/0x1970 [ 56.662860][ C1] ? __pfx_device_add+0x10/0x10 [ 56.664392][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 56.666206][ C1] usb_new_device.part.0+0xcc2/0x1686 [ 56.667923][ C1] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 56.669794][ C1] ? mark_held_locks+0x40/0x70 [ 56.671400][ C1] hub_event.cold+0x1e3/0xe90 [ 56.673036][ C1] ? __pfx_hub_event+0x10/0x10 [ 56.674546][ C1] ? print_usage_bug.part.0+0x1f0/0x340 [ 56.676273][ C1] ? lock_acquire+0x1d1/0x380 [ 56.677777][ C1] ? process_one_work+0xa2c/0x1b10 [ 56.679390][ C1] ? process_one_work+0x906/0x1b10 [ 56.681011][ C1] ? process_one_work+0x906/0x1b10 [ 56.682654][ C1] process_one_work+0xac7/0x1b10 [ 56.684213][ C1] ? __pfx_process_one_work+0x10/0x10 [ 56.685914][ C1] ? lock_acquire+0x1d1/0x380 [ 56.687411][ C1] ? __pfx_hub_event+0x10/0x10 [ 56.688940][ C1] worker_thread+0x5ef/0xe50 [ 56.690418][ C1] ? __pfx_worker_thread+0x10/0x10 [ 56.692044][ C1] ? kthread+0x13a/0x450 [ 56.693391][ C1] ? __pfx_worker_thread+0x10/0x10 [ 56.695013][ C1] kthread+0x373/0x450 [ 56.696305][ C1] ? __pfx_kthread+0x10/0x10 [ 56.697776][ C1] ret_from_fork+0x730/0xd60 [ 56.699355][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 56.700978][ C1] ? __switch_to+0x800/0x10f0 [ 56.702497][ C1] ? __pfx_kthread+0x10/0x10 [ 56.704313][ C1] ret_from_fork_asm+0x1a/0x30 [ 56.706291][ C1] [ 56.707568][ C1] Modules linked in: [ 56.708919][ C1] ---[ end trace 0000000000000000 ]--- [ 56.710666][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 56.710686][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 56.710696][ C1] RSP: 0018:ffffc900006b09d8 EFLAGS: 00010002 [ 56.710705][ C1] RAX: dffffc0000000000 RBX: ffff888035e48000 RCX: 0000000000000103 [ 56.710711][ C1] RDX: 00000000000000e6 RSI: ffffffff87f565e6 RDI: ffff888035e48128 [ 56.710718][ C1] RBP: ffff888035e48128 R08: 0000000000000004 R09: 0000000000000020 [ 56.710724][ C1] R10: 0000000000000020 R11: 000000000000762b R12: ffff888035e480f0 [ 56.710731][ C1] R13: ffff888035e48128 R14: ffff888035e48740 R15: 0000000000000001 [ 56.710737][ C1] FS: 0000000000000000(0000) GS:ffff8880d5c5f000(0000) knlGS:0000000000000000 [ 56.710759][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.710768][ C1] CR2: 00007f2998deb840 CR3: 000000003610e000 CR4: 0000000000352ef0 [ 56.710776][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 56.743558][ C1] Kernel Offset: disabled [ 56.744927][ C1] Rebooting in 86400 seconds..