last executing test programs: 7.569233508s ago: executing program 2 (id=261): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000780)='rxrpc\x00', 0x0, &(0x7f0000000900)="0000000000000004ff6943b80000000800000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r1) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000440000000000000100000000000000020000000000000001011dd1fccdce3af462f9750f07c69f834f88a9725e9351848f780f142e3a8712ce8ff6f3ece6cbd8825d187b682b4f7c8530775960cdd166bc5efb63041a5a21c49debd725fa43a283237681b098b57f58090395713bce14d0d962d2c34975aebae6dd660022118d75d8ce9c50b47124da5938e81a5557fee09f0c45cff953e3a7123df7d7fafed017b62b7707ef4"], 0x24, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r3, 0x0, 0x42, 0x0, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'veth1_to_team\x00', {0x2, 0x4e20, @private=0xa010102}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.269674504s ago: executing program 2 (id=267): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r1, 0x0, 0x3, 0x1}}, 0x20) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f0000000000200000000000000001"]) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x3c, 0x19, 0x800, 0x70bd28, 0x25dfdbfb, {0x2, 0x10, 0x20, 0xc, 0x0, 0x1, 0xfe, 0xa, 0xa00}, [@RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_TABLE={0x8, 0xf, 0x7ff}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_NH_ID={0x8, 0x1e, 0xa77}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x240880c5) 7.269279175s ago: executing program 2 (id=268): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r2 = socket(0x2d, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000300)={0x38000000, "ac2665cb7911feb99921786be70a873b47fd46068beff608662cafdaa5db098a", 0x3, 0x26, 0x3, 0x80008, 0x20000, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1, 0x1, 0xaadd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.360293202s ago: executing program 2 (id=281): madvise(&(0x7f0000de5000/0x3000)=nil, 0x3000, 0x17) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}]}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1080}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x104}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x171}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc2d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x24}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x5, 0x4]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x20040000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 6.289013429s ago: executing program 2 (id=283): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x140e, 0x100, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) setresuid(0xee00, 0xee00, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x2a020480) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0) 5.439812616s ago: executing program 2 (id=302): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="20000000410007012dbd7000fedbdf250300000000000000080009"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x105800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl(r3, 0xc4c85513, &(0x7f0000000200)="000000000200000000000000000000004c696e6520566f6c756d65") (async) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x16c102) (async) shmat(0x0, 0x0, 0x4000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) (async) pselect6(0x40, &(0x7f0000000100)={0x8000, 0x9, 0x7, 0x80000001, 0x7fb, 0x7, 0x100201, 0x1}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x2000000a}, 0x0, 0x0) 4.730059872s ago: executing program 3 (id=308): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'geneve0\x00', &(0x7f0000000600)=@ethtool_dump={0x40, 0x8cc, 0x4}}) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0xd, 0xa, 0x1, {0x22, 0x840}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7, 0x3, 0xfb, 0x10, 0x1d}, 0x10, &(0x7f00000000c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xd8, 0xda, 0x9, 0x5}]}, 0x2, [{0xee, &(0x7f0000000100)=@string={0xee, 0x3, "e29565052b6d42679c98c23a6a5fb2be607247801994c6cced0e3196ad3143278c881ea302a4b44596f1a330e9b8c997bf080633f75388887b0dec0bd9ea85c0509c6252017f7bde8a1077aae1392f08c715a186ade9383cbb9482a3c4f5fb844c1527a086dca7c4824debb3039217b5d75834cdd1c68da8d765c1e4e97b2608d4e557e397e0da171ae8439bc1a36c0178b18aa0fcc7bf7324bd2ffc21be8e51bc1dc3d10761383dbdd03c533a4ffb1b9aeb6dca375ea9900518f566244b206fc7c7748f9b4c67c1cd35466ada36c8596e33f0530a882aba6c12db12ba6bffaad0ad9b663a8987e07b8f682f"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44e}}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640)={0x0, 0x1000, "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"}, &(0x7f0000001680)=0x1008) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000016c0)={r3, 0x9a, "8ee18a2252c1878e3f6440eb5404936e36540da52ef92c449f73084768d595b65ed82180c300044880393ce39a55388fb7ef439e0e7f91b50839bae463ba01d8f225d75632c465a86d3e0503a7601a224c3f0a2c6c6b6affd196b7b99008616d0b4a86f4eb3c3e9b915f942ab5043e2960082f85bc216cafa720ab6de2bfbdc690f19f774ffb7925fa45024bd0957a00da30c5be45a4afb2f648"}, &(0x7f0000001780)=0xa2) bind$rxrpc(r1, &(0x7f00000002c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) 3.141261704s ago: executing program 1 (id=319): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xf) (rerun: 64) 3.060708175s ago: executing program 1 (id=320): r0 = socket$inet6(0xa, 0x5, 0x0) setuid(0xee01) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x2, 0x44}, 0x4f565559, 0x8, 0x0, 0xd, 0x0, 0x8}}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000280)={@my=0x1, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote, {[@timestamp={0x44, 0x1c, 0x7d, 0x0, 0x0, [0x2, 0xf2b4, 0x10001, 0x7, 0xc8, 0xcd03]}, @rr={0x7, 0xf, 0xd4, [@empty, @multicast2, @rand_addr=0x64010102]}]}}}}}}}, 0x0) rmdir(&(0x7f0000000040)='./config/nvmet/subsystems/testnqn\x00') 3.059508558s ago: executing program 1 (id=321): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r0, 0x1, 0x70bd25, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}}, 0x48040) 3.001129069s ago: executing program 1 (id=322): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x40000000, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0xffffffff, 0x0, 0x2, 0x1, 0x2, 0x2}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x8f}) ioctl(r2, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff7bfffffffeffffff00000000", @ANYRES32=0x0, @ANYBLOB="2010000000810000380012800b00010067726574617000002800028004001200060010004e200000060002000300200006000e000000000006000f0000100000"], 0x58}, 0x1, 0x0, 0x0, 0xfafcd0ae99faf8e2}, 0x40804) 2.127523895s ago: executing program 1 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) inotify_init() (async) remap_file_pages(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xbf12, 0x20000) 2.057187211s ago: executing program 1 (id=327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x8402, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_1\x00', 0x10) (async, rerun: 64) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f00000001c0)={0x1, 0x0, 0x3, r5, 0xdaa}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 1.738245249s ago: executing program 3 (id=332): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000900020073797a310000000008000a40bc5a818efffffffc0800054000000024080003400000004408000f4000006c9d84f55a3ccf67010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000854}, 0x24000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000900020073797a310000000008000a40bc5a818efffffffc0800054000000024080003400000004408000f4000006c9d84f55a3ccf67010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000854}, 0x24000000) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r2, &(0x7f0000000100)="d52dbd", 0x3) (async) write$9p(r2, &(0x7f0000000100)="d52dbd", 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpgrp(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x10, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r4}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x10, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r4}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) sendto$l2tp6(r2, &(0x7f00000002c0)="f8993566006b5e1c", 0x8, 0x2, &(0x7f0000000340)={0xa, 0x0, 0x5, @remote, 0xfffffff7, 0x3}, 0x20) (async) sendto$l2tp6(r2, &(0x7f00000002c0)="f8993566006b5e1c", 0x8, 0x2, &(0x7f0000000340)={0xa, 0x0, 0x5, @remote, 0xfffffff7, 0x3}, 0x20) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r5}, &(0x7f0000000380)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r7 = gettid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0xfffffffffffffffd) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0xfffffffffffffffd) tkill(r7, 0x16) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8f\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xa1\x06|\xf0\x00\x00\x00\x00r\x9b\xc7\x1d\x00jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9e[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8bJ\xa0\xa0\xeb\xa8\x0f\xa1\x93\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd3\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H;\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\b\x00\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xb6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x9aE~\xe3\xe5\rx.o\xca\xf5!\xc3\xb8\x1aU=\x9f\xae\'\xe6\xb8\x18\x04\x8a!s\xf9\x00\xf4x\x19\x9f\xa0{\xbb\x9e\xed\xdbN\xfc2X\xa68\xa2\x87i\xe3\xa0&|\x8d\xc3\xc9\xaf\x88HaZh?\x8egx\xaf;\x0f\xfcU0\x8e\x13:@\xfbu\x85\xac\xafc9$\x7f\x06W\aO\'\x10b\x93~\x90\xbeX@ G\x8c\x02\xb3Tr\x7fz\x1d\x02m\x9c\xf2\xaa\x15\xb0G\x13\xf0\x97O\x83\xa3\xcf\x0f\xcbr\xa2\x18\x91\xa3A\xb8\x91\xd5z\xcc\xdf\bO\xd9\xb7\x00\x00\x00\x00\x00\x00\x00\x00Z\xe2\x97s\x062\xf1\x86\xae\xa5-Q\x9d/V\x14\\;\xfe\x12\xf8`\b\x82\x83\xd3s$\xe0\xab\xe0\x84\xad\xe2\xb2\xc3\xd4/F+\xa3\xfa\xac)6\xda\x8d\xd1\v\xfd\x12:?rW\xf0\xcc]k\xbc\x10r\x01]\x9a\xa4S\xa4\xa1\x16\x1f\x88\x1a\xad\xa9\xfb\x16\x88X;>\ad\a\xee%\x8d|\xe1J!\x99\xd1\x8dxdlL\xda\xb6\xc9\x9a_K\x9c\xf4\x1d\x92\x98\x16m\x8a\xa7N\xf8\xbf\x834K\xc9Y\xc8\x8bb7\xd5L\xe6\xd8+5\x80\xb9V\x80\x98\\i\x9c\x13\xc8\xe8\xb7\x10\x02\xaf\x9e\x1a\xf2\x91[\xa5\x1c\xe3\x89\x06\xb7l\xce\x11.\xa0h\x93\xc5\xb5\xb3\xcc\xed\xd8Q\xd8rK\xe3\x04\xacQ\x9e\x1a\xe5\x17\x8c\x05\xf5\xf6\x82\x1d\xe1', 0x3) ftruncate(r10, 0x80079a0) (async) ftruncate(r10, 0x80079a0) r11 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x4788, 0x37}, 0x80, 0x0}, 0x4000080) (async) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x4788, 0x37}, 0x80, 0x0}, 0x4000080) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r10, 0x7fffd, 0x4) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1.679398341s ago: executing program 0 (id=333): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="471b3ec0905e02f965f5c98c92d3457f08252a5f68fe5f7d7a6c3826fe7de431b4f6e6a36bc5f205c7efba8f9181b256060a6cf87033d3b0ca34017b84a75f1de9bb4dd88b43f9a30c2c8b0afe4be2ebe04ea96fbaaf32fb678ca2141073822c7b2defd78541190495054bb1d6425caf54de3e47bdb0c8832c74177e", 0x7c) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000001380)=ANY=[@ANYBLOB="0b000000fe6b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270003006d0400003412000000000000000000000600ff0901a10185100901150026ff0075089506810009019100851109019513810009019100c0"], 0x13f) read(r2, &(0x7f0000000200)=""/4096, 0x1000) read(r2, &(0x7f0000000200)=""/4096, 0x1000) write$UHID_INPUT2(r2, &(0x7f0000000300)={0xc, {0x1, "11"}}, 0x7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048015}, 0x8010) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x58, r4, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x556, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0xc000) r8 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000600), 0xfec8) recvmmsg(r8, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000027c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0xcb, 0x0) 1.62621222s ago: executing program 3 (id=334): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e05004b20"], 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x200000000000000, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xfffffffe}}, 0xe8) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') (async) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x6840, 0x0) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x1) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x4) (async) ioctl$HIDIOCGSTRING(r4, 0x81044804, &(0x7f00000002c0)={0xa7, "99c34ca01afd4ac1b5d302675ff7acad35e6ccb6ea4706b2ddae51a8e1ea20fc3e32f1a6fac5d09f167c38a5caef8394d1492ffbb44da900d3f654530a8d985662ab7523edba895de668632855484161b0152db5915167ee87fd81c602d4299172f8ef6bf65e24396e29583f640c56a0432974712f3e1659ee17e9bb7c5850b781cb2294b145265e95d1d1aceff6bcb4c460907c5bd81aa87aefad1b35cd697be24efc1d480120"}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.481073612s ago: executing program 3 (id=335): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00', 0x6) (async) write(r1, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00', 0x6) 1.350643351s ago: executing program 3 (id=336): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x51, [0x7ffe, 0xc95a, 0x1, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x63, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x9, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0xd14c, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x10, 0x4, 0x4, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0xffff7fff, 0x2, 0x7218, 0xa, 0x5, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x89, 0x5, 0x3, 0x2, 0xf38, 0x7, 0x4, 0x6d01, 0x5, 0x3b, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x40000003, 0xee1, 0x1000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xb133, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0x4, 0x3, 0x7f, 0x104, 0x9606, 0x100007, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x81, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x3, 0x0, [0x3, 0x200, 0x9, 0x1, 0xde, 0x8f, 0x7, 0x3]}) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') 811.126029ms ago: executing program 0 (id=337): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000003100000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='0d#1') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 701.046494ms ago: executing program 0 (id=338): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22280000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000240)=0x9, 0x4) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000280)=[@nested_amd_invlpga={0x17d, 0x20, {0x3000, 0x14d9}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x4, 0x6}}, @nested_load_syzos={0x136, 0x50, {0x3, 0x2, [@nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x1}]}}, @in_dx={0x69, 0x20, {0xaffb, 0x4}}, @nested_load_syzos={0x136, 0xc2, {0x2, 0x5, [@cpuid={0x64, 0x18, {0x0, 0x7}}, @code={0xa, 0x6a, {"640f00d4430f01c966b85f008ec0470f20816544f466baf80cb80cd0d38cef66bafc0c66ed2e66660f38815e702e66430f2172c744240000000000c74424029134c05bc7442406000000000f011c2466ba4100b85dffffffef"}}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x96d9}}]}}, @wr_drn={0x68, 0x20, {0x4, 0x100000001}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xd981, 0x7fe, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x7a, 0x2}}, @wr_crn={0x67, 0x20, {0x4, 0x1}}, @wrmsr={0x65, 0x20, {0x40b, 0x9}}, @wr_crn={0x67, 0x20, {0x3, 0x8000}}, @code={0xa, 0x54, {"8f49e8997e0c460f01df66b802008ee0673e420f01c9460f0866baf80cb8ed672e8def66bafc0cecf0109e0e000000c401e4c2f89366b817008ed866460f388144f0ff"}}], 0x2a6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3636, 0x1a}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3e}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_PMKID={0x14, 0x55, "417231af2362638dc6bd131c6e5e1dab"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x400, 0x70bd29, 0x227, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040851}, 0x800) read$FUSE(r1, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000802, r9, &(0x7f0000002880)={0x8, 0xffff, 0x101, 0x8000000000000000, 0xa0, 0xbea, 0x40, 0xfff, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002940), r2) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r10, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x3c, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x125}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa}, 0x41) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002b40), 0x183002, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002bc0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x14, r12, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x48454) mount(&(0x7f0000002cc0)=@rnullb, &(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)='pvfs2\x00', 0x2000800, &(0x7f0000002d80)='&\x06[{]\x00') r13 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000002dc0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r13, 0xc0d05605, &(0x7f0000002e00)={0xe, @vbi={0x600000, 0x8, 0xff, 0x38303553, [0x6, 0x7fffffff], [0x1, 0x4], 0x1}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000002f00)=0x2, 0x4) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000002f40)=""/154) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000003180)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x6c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004}, 0x801) 621.149368ms ago: executing program 0 (id=339): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x80000, 0xc) ioctl$RTC_PIE_ON(r0, 0x7005) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) (rerun: 64) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000000840)='3', 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x53, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000300)="b8010000000f01c10f20e035000010000f22e0c4e1f9c5e0e00f01c4673ef30fa7d8b9800000c00f3235000100000f30660f388047c0b8880000000f23c00f21f835020005000f23f80f0132f20f5ec9", 0x50}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2663}, 0x8004) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r7, 0x1261, 0x0) 140.706143ms ago: executing program 3 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0x3, 0x300) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be000000030c000800050086dd88a888be000000021609660501000000000088a8080022eb00020000200cf00802000000000000020004940308b3005800000002"], 0x7a) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x40000081, 0x0, 0x3}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000940)={0x3, 0x0, [{0x0, 0xe8, &(0x7f0000000680)=""/232}, {0x8000000, 0xb1, &(0x7f0000000780)=""/177}, {0x2, 0x88, &(0x7f0000000840)=""/136}]}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000580)={@my=0x1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) 1.097389ms ago: executing program 0 (id=341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0x0, 0x3ffe, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0x0, 0x3ffe, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) 0s ago: executing program 0 (id=342): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, &(0x7f0000000500)="65660f3a0f1d00f00fc1510eba2000b80c00ef660f3adfa1c62814660f6bf0660f388245cf660f3880b30050f6260000f2f02937ba2000ec", 0x38}], 0x1, 0x18, &(0x7f0000000580), 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, &(0x7f0000000500)="65660f3a0f1d00f00fc1510eba2000b80c00ef660f3adfa1c62814660f6bf0660f388245cf660f3880b30050f6260000f2f02937ba2000ec", 0x38}], 0x1, 0x18, &(0x7f0000000580), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$l2tp(0x2, 0x2, 0x73) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000140)=0xf, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x470c8, 0x0) chroot(0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x400, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0xffffffffffffffc0, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008880}, 0x8050) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x400, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0xffffffffffffffc0, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008880}, 0x8050) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000400), 0x4, 0x4101) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r9, r8, 0x0) (async) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire={0x40046302}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire={0x40046302}], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x2, 0x4, 0x6, 0x8, r3, 0x0, '\x00', r7, r10, 0x3, 0x5, 0x0, 0x2}, 0x50) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000070a030000000000000000000200000a0aa4d1b5b09d1541d96179d9c3c2638f00fc75de05caf7628f149752f0c6d5c57063b6b366e05da928e870df5402ba2d148d591dea823da4b388d0cd9a138d0bebf102222b39f1e8440d20ca71fecc16795d"], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x10) (async) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000070a030000000000000000000200000a0aa4d1b5b09d1541d96179d9c3c2638f00fc75de05caf7628f149752f0c6d5c57063b6b366e05da928e870df5402ba2d148d591dea823da4b388d0cd9a138d0bebf102222b39f1e8440d20ca71fecc16795d"], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x10) kernel console output (not intermixed with test programs): [ 38.037417][ T42] audit: type=1400 audit(1787508984.162:116): avc: denied { write } for pid=5637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.102172][ T42] audit: type=1400 audit(1787508984.232:117): avc: denied { write } for pid=5641 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.250716][ T42] audit: type=1400 audit(1787508984.372:118): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.293407][ T42] audit: type=1400 audit(1787508984.422:119): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.396901][ T42] audit: type=1400 audit(1787508984.522:120): avc: denied { write } for pid=5652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:43647' (ED25519) to the list of known hosts. [ 40.989765][ T5662] cgroup: Unknown subsys name 'net' [ 41.144755][ T5662] cgroup: Unknown subsys name 'cpuset' [ 41.150258][ T5662] cgroup: Unknown subsys name 'rlimit' [ 41.415711][ T5716] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.184898][ T5662] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.445117][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 45.445134][ T42] audit: type=1400 audit(1787508991.572:156): avc: denied { execmem } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.648278][ T42] audit: type=1400 audit(1787508991.772:157): avc: denied { create } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.658434][ T42] audit: type=1400 audit(1787508991.772:158): avc: denied { read write } for pid=5727 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.667223][ T42] audit: type=1400 audit(1787508991.772:159): avc: denied { open } for pid=5727 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.674987][ T42] audit: type=1400 audit(1787508991.782:160): avc: denied { ioctl } for pid=5727 comm="syz-executor" path="socket:[6602]" dev="sockfs" ino=6602 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.679932][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.692219][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.697626][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.700505][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.704509][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.706248][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.708530][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.709124][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.709345][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.710119][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.711352][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.712080][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.714268][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.715628][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.717101][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.719174][ T42] audit: type=1400 audit(1787508991.842:161): avc: denied { read } for pid=5727 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.724231][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.725898][ T42] audit: type=1400 audit(1787508991.842:162): avc: denied { open } for pid=5727 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.729907][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.730468][ T42] audit: type=1400 audit(1787508991.842:163): avc: denied { mounton } for pid=5727 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.733782][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.740064][ T42] audit: type=1400 audit(1787508991.862:164): avc: denied { module_request } for pid=5727 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.744884][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.754740][ T42] audit: type=1400 audit(1787508991.882:165): avc: denied { sys_module } for pid=5728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.759069][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.298562][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.302833][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.305259][ T5727] bridge_slave_0: entered allmulticast mode [ 46.308371][ T5727] bridge_slave_0: entered promiscuous mode [ 46.313375][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.316158][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.318671][ T5727] bridge_slave_1: entered allmulticast mode [ 46.322403][ T5727] bridge_slave_1: entered promiscuous mode [ 46.376187][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.399075][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.456782][ T5727] team0: Port device team_slave_0 added [ 46.461216][ T5727] team0: Port device team_slave_1 added [ 46.463563][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.466551][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.469405][ T5729] bridge_slave_0: entered allmulticast mode [ 46.473219][ T5729] bridge_slave_0: entered promiscuous mode [ 46.478591][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.481530][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.484343][ T5729] bridge_slave_1: entered allmulticast mode [ 46.487983][ T5729] bridge_slave_1: entered promiscuous mode [ 46.507125][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.510229][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.513439][ T5728] bridge_slave_0: entered allmulticast mode [ 46.517101][ T5728] bridge_slave_0: entered promiscuous mode [ 46.521914][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.524846][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.526960][ T5728] bridge_slave_1: entered allmulticast mode [ 46.529630][ T5728] bridge_slave_1: entered promiscuous mode [ 46.585978][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.588221][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.597191][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.635877][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.638651][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.649073][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.656433][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.660039][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.663720][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.666641][ T5732] bridge_slave_0: entered allmulticast mode [ 46.670377][ T5732] bridge_slave_0: entered promiscuous mode [ 46.675386][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.684349][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.688937][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.699941][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.702705][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.705672][ T5732] bridge_slave_1: entered allmulticast mode [ 46.708314][ T5732] bridge_slave_1: entered promiscuous mode [ 46.754728][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.759111][ T5728] team0: Port device team_slave_0 added [ 46.763519][ T5728] team0: Port device team_slave_1 added [ 46.772101][ T5729] team0: Port device team_slave_0 added [ 46.776281][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.796542][ T5729] team0: Port device team_slave_1 added [ 46.829610][ T5727] hsr_slave_0: entered promiscuous mode [ 46.832296][ T5727] hsr_slave_1: entered promiscuous mode [ 46.842052][ T5732] team0: Port device team_slave_0 added [ 46.844478][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.847186][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.856769][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.861058][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.863288][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.871487][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.876114][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.878247][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.886256][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.891370][ T5732] team0: Port device team_slave_1 added [ 46.893607][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.896315][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.906228][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.956550][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.958982][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.969123][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.975303][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.978164][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.988643][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.043281][ T5728] hsr_slave_0: entered promiscuous mode [ 47.045449][ T5728] hsr_slave_1: entered promiscuous mode [ 47.047574][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 47.049384][ T5728] Cannot create hsr debugfs directory [ 47.054506][ T5729] hsr_slave_0: entered promiscuous mode [ 47.056981][ T5729] hsr_slave_1: entered promiscuous mode [ 47.059081][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 47.060974][ T5729] Cannot create hsr debugfs directory [ 47.124322][ T5732] hsr_slave_0: entered promiscuous mode [ 47.126502][ T5732] hsr_slave_1: entered promiscuous mode [ 47.128542][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 47.130324][ T5732] Cannot create hsr debugfs directory [ 47.393270][ T5727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.403654][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.409453][ T5727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.415424][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.418946][ T5727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.423383][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.431984][ T5727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.436348][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.471912][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.476218][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.479846][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.484498][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.488883][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.492766][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.497061][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.501681][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.552716][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.557863][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.561413][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.566595][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.569892][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.573930][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.577464][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.583111][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.657113][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.662045][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.666035][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.669597][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.672846][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.676899][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.682161][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.686869][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.690341][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.716770][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.737915][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.740977][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.746540][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.749334][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.768479][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.791386][ T65] Bluetooth: hci2: command tx timeout [ 47.791390][ T5734] Bluetooth: hci0: command tx timeout [ 47.795563][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.800762][ T65] Bluetooth: hci3: command tx timeout [ 47.800836][ T5734] Bluetooth: hci1: command tx timeout [ 47.808603][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.816246][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.818565][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.824314][ T5727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.840504][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.842832][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.853611][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.866155][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.868424][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.872111][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.874589][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.898647][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.941385][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.962180][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.964983][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.979460][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.982306][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.089209][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.133547][ T5727] veth0_vlan: entered promiscuous mode [ 48.142247][ T5727] veth1_vlan: entered promiscuous mode [ 48.163688][ T5727] veth0_macvtap: entered promiscuous mode [ 48.169229][ T5727] veth1_macvtap: entered promiscuous mode [ 48.177958][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.184084][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.197056][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.209200][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.233652][ T5732] veth0_vlan: entered promiscuous mode [ 48.249588][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.258367][ T5732] veth1_vlan: entered promiscuous mode [ 48.316775][ T5728] veth0_vlan: entered promiscuous mode [ 48.324988][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.325337][ T5728] veth1_vlan: entered promiscuous mode [ 48.328567][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.350131][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.353357][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.369184][ T5732] veth0_macvtap: entered promiscuous mode [ 48.377921][ T5732] veth1_macvtap: entered promiscuous mode [ 48.391908][ T5727] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.402767][ T5729] veth0_vlan: entered promiscuous mode [ 48.405860][ T5728] veth0_macvtap: entered promiscuous mode [ 48.413299][ T5728] veth1_macvtap: entered promiscuous mode [ 48.424006][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.431912][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.438529][ T5729] veth1_vlan: entered promiscuous mode [ 48.453876][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.461983][ T5807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.473778][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.511615][ T5729] veth0_macvtap: entered promiscuous mode [ 48.519298][ T373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.519806][ T5729] veth1_macvtap: entered promiscuous mode [ 48.524070][ T373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.555455][ T373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.559665][ T373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.569446][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.581003][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.588921][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.618080][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.622765][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.680675][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.684714][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.714851][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.719784][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.753970][ T5807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.761689][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.764947][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.770986][ T5807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.774006][ T5807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.776966][ T5807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.779643][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.783068][ T5807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.786194][ T5807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.789646][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.794280][ T5807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.797145][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.799901][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.811106][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.815490][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.830852][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.833631][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.040737][ T5874] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.190682][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 49.193431][ T5874] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 49.198271][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 49.203249][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.205809][ T5874] usb 7-1: Product: syz [ 49.207149][ T5874] usb 7-1: Manufacturer: syz [ 49.208714][ T5874] usb 7-1: SerialNumber: syz [ 49.215244][ T5874] usb 7-1: config 0 descriptor?? [ 49.220319][ T5874] hub 7-1:0.0: bad descriptor, ignoring hub [ 49.222307][ T5874] hub 7-1:0.0: probe with driver hub failed with error -5 [ 49.226419][ T5874] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 49.871866][ T5734] Bluetooth: hci1: command tx timeout [ 49.872305][ T65] Bluetooth: hci3: command tx timeout [ 49.873896][ T5731] Bluetooth: hci2: command tx timeout [ 49.874359][ T5731] Bluetooth: hci0: command tx timeout [ 51.742024][ T1480] usb 7-1: USB disconnect, device number 2 [ 51.750676][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 51.750690][ T42] audit: type=1400 audit(1787508997.872:206): avc: denied { setopt } for pid=5898 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.790320][ T42] audit: type=1400 audit(1787508997.912:207): avc: denied { read write } for pid=5900 comm="syz.1.11" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 51.804150][ T42] audit: type=1400 audit(1787508997.912:208): avc: denied { open } for pid=5900 comm="syz.1.11" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 51.812740][ T42] audit: type=1400 audit(1787508997.922:209): avc: denied { mounton } for pid=5900 comm="syz.1.11" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.812763][ T42] audit: type=1400 audit(1787508997.932:210): avc: denied { create } for pid=5901 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.812782][ T42] audit: type=1400 audit(1787508997.932:211): avc: denied { ioctl } for pid=5901 comm="syz.3.4" path="socket:[9492]" dev="sockfs" ino=9492 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.818684][ T42] audit: type=1400 audit(1787508997.942:212): avc: denied { bind } for pid=5900 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.819731][ T42] audit: type=1400 audit(1787508997.942:213): avc: denied { write } for pid=5900 comm="syz.1.11" path="socket:[9498]" dev="sockfs" ino=9498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.820813][ T5902] Bluetooth: MGMT ver 1.23 [ 51.927766][ T42] audit: type=1400 audit(1787508998.052:214): avc: denied { create } for pid=5904 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.932154][ T5905] ip6t_srh: unknown srh invflags 4000 [ 51.936052][ T42] audit: type=1400 audit(1787508998.052:215): avc: denied { shutdown } for pid=5904 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.951206][ T5731] Bluetooth: hci0: command tx timeout [ 51.960753][ T5731] Bluetooth: hci1: command tx timeout [ 51.960815][ T5734] Bluetooth: hci3: command tx timeout [ 51.960996][ T5743] Bluetooth: hci2: command tx timeout [ 52.071354][ T5874] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.245334][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short [ 52.248872][ T5874] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.253546][ T5874] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 52.255762][ T5874] usb 6-1: can't read configurations, error -71 [ 52.280872][ T5918] cgroup2: Unknown parameter 'memory_hugetlbcEX0ZL_accounting' [ 52.284472][ T5919] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 52.380333][ T5929] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 52.391851][ T5929] team0: Port device dummy0 added [ 52.547347][ T5929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20'. [ 52.553661][ T5937] ======================================================= [ 52.553661][ T5937] WARNING: The mand mount option has been deprecated and [ 52.553661][ T5937] and is ignored by this kernel. Remove the mand [ 52.553661][ T5937] option from the mount to silence this warning. [ 52.553661][ T5937] ======================================================= [ 52.569933][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 52.625577][ T5941] overlayfs: regular lower layers cannot follow data lower layers [ 52.717952][ T5945] Zero length message leads to an empty skb [ 52.895168][ T5957] bond1: option mode: invalid value (12) [ 52.901968][ T5957] bond1 (unregistering): Released all slaves [ 52.940411][ T5960] IPv6: Can't replace route, no match found [ 52.968558][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 52.972150][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 52.975984][ T5962] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 53.092713][ T5874] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.124658][ T5967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.147747][ T5973] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 53.251929][ T5874] usb 6-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00 [ 53.256598][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.260907][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.266230][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.272569][ T5874] usb 6-1: config 0 descriptor?? [ 53.299005][ T5990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.40'. [ 53.344359][ T5998] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 53.420355][ T6005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6005 comm=syz.2.47 [ 53.427296][ T6005] netlink: 84 bytes leftover after parsing attributes in process `syz.2.47'. [ 53.430478][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 53.528898][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 53.645225][ T6015] syz.2.52 uses obsolete (PF_INET,SOCK_PACKET) [ 53.888255][ T5954] ubi0: attaching mtd0 [ 53.893149][ T5954] ubi0: scanning is finished [ 53.895148][ T5954] ubi0: empty MTD device detected [ 54.031147][ T5734] Bluetooth: hci3: command tx timeout [ 54.031734][ T5731] Bluetooth: hci2: command tx timeout [ 54.041214][ T5731] Bluetooth: hci1: command tx timeout [ 54.041701][ T5734] Bluetooth: hci0: command tx timeout [ 54.099348][ T5954] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 54.104103][ T5954] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 54.106808][ T5954] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 54.109155][ T5954] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 54.112535][ T5954] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 54.115135][ T5954] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 54.118242][ T5954] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3256445982 [ 54.124364][ T5954] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 54.130693][ T6032] ubi0: background thread "ubi_bgt0d" started, PID 6032 [ 54.131921][ T5874] usbhid 6-1:0.0: can't add hid device: -71 [ 54.135392][ T5874] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 54.139055][ T5874] usb 6-1: USB disconnect, device number 3 [ 54.310713][ T5566] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.342218][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.58'. [ 54.358364][ T6036] overlayfs: conflicting lowerdir path [ 54.474133][ T6041] openvswitch: netlink: IPv4 tun info is not correct [ 54.485595][ T5566] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 54.490403][ T5566] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.495678][ T5566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.516658][ T6046] netlink: 'syz.0.61': attribute type 11 has an invalid length. [ 54.519903][ T6046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.61'. [ 54.543438][ T5566] msi2500 7-1:1.0: Registered as swradio24 [ 54.545775][ T5566] msi2500 7-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 54.558278][ T6051] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 54.559695][ T373] IPVS: starting estimator thread 0... [ 54.650728][ T5874] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 54.670736][ T6054] IPVS: using max 27 ests per chain, 64800 per kthread [ 54.813503][ T6037] tmpfs: Unknown parameter 'm' [ 55.584660][ T6070] SELinux: policydb version -160896585 does not match my version range 15-35 [ 55.588675][ T6070] SELinux: failed to load policy [ 55.788162][ T6085] openvswitch: netlink: Multiple metadata blocks provided [ 55.899722][ T6094] netlink: 'syz.1.75': attribute type 21 has an invalid length. [ 55.929450][ T6097] netlink: 'syz.1.75': attribute type 21 has an invalid length. [ 56.764310][ T6029] msi2500 7-1:1.0: failed -110, cmd 41, data 0e09 [ 56.768492][ T6029] spi_master spi0: failed to transfer one message from queue [ 56.772025][ T6029] spi_master spi0: noqueue transfer failed [ 56.776448][ T6029] msi2500 7-1:1.0: failed -32, cmd 41, data 608008 [ 56.781507][ T41] usb 7-1: USB disconnect, device number 3 [ 56.884069][ T6138] xt_hashlimit: overflow, rate too high: 1 [ 56.887225][ T42] kauditd_printk_skb: 117 callbacks suppressed [ 56.887239][ T42] audit: type=1400 audit(1787509003.012:333): avc: denied { create } for pid=6137 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.898043][ T42] audit: type=1400 audit(1787509003.012:334): avc: denied { write } for pid=6137 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.907359][ T42] audit: type=1400 audit(1787509003.012:335): avc: denied { nlmsg_write } for pid=6137 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.971517][ T6147] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 57.057964][ T6162] binder: 6160:6162 ioctl c0306201 200000000100 returned -14 [ 57.063543][ T42] audit: type=1400 audit(1787509003.192:336): avc: denied { read } for pid=6160 comm="syz.1.90" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.072903][ T6162] binder_alloc: 6160: binder_alloc_buf, no vma [ 57.076233][ T42] audit: type=1400 audit(1787509003.192:337): avc: denied { open } for pid=6160 comm="syz.1.90" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.081368][ T6159] SELinux: invalid class [ 57.085849][ T42] audit: type=1400 audit(1787509003.192:338): avc: denied { ioctl } for pid=6160 comm="syz.1.90" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.124021][ T6159] SELinux: failed to load policy [ 57.196820][ T5874] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 57.201475][ T5874] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 57.204227][ T5874] usb 8-1: can't read configurations, error -71 [ 57.217411][ T6169] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 57.223393][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6169 comm=syz.1.92 [ 57.227623][ T6169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.92'. [ 57.230514][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6169 comm=syz.1.92 [ 57.235195][ T6169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.92'. [ 57.239880][ T6173] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 57.332279][ T42] audit: type=1400 audit(1787509003.462:339): avc: denied { create } for pid=6179 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.340081][ T42] audit: type=1400 audit(1787509003.462:340): avc: denied { setopt } for pid=6179 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.351393][ T850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.351698][ T42] audit: type=1400 audit(1787509003.482:341): avc: denied { create } for pid=6179 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.362707][ T42] audit: type=1400 audit(1787509003.482:342): avc: denied { ioctl } for pid=6179 comm="syz.2.96" path="socket:[11442]" dev="sockfs" ino=11442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.444747][ T6190] syzkaller0: entered promiscuous mode [ 57.448747][ T6190] syzkaller0: entered allmulticast mode [ 57.511244][ T850] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 57.515862][ T850] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 57.519022][ T850] usb 5-1: config 1 has no interface number 0 [ 57.521323][ T850] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 57.524251][ T850] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 57.527450][ T850] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xB has an invalid bInterval 214, changing to 11 [ 57.531422][ T850] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 57.535948][ T850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.538480][ T850] usb 5-1: Product: syz [ 57.539749][ T850] usb 5-1: Manufacturer: syz [ 57.542673][ T850] usb 5-1: SerialNumber: syz [ 57.546937][ T6165] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 57.549360][ T6165] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 57.553322][ T850] usb 5-1: Expected 3 endpoints, found: 2 [ 57.900705][ T5566] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 58.052732][ T5566] usb 6-1: not running at top speed; connect to a high speed hub [ 58.056372][ T5566] usb 6-1: New USB device found, idVendor=2040, idProduct=7060, bcdDevice=c8.95 [ 58.062615][ T5566] usb 6-1: config 3 has an invalid interface number: 31 but max is 0 [ 58.068226][ T5566] usb 6-1: config 3 has no interface number 0 [ 58.072049][ T5566] usb 6-1: config 3 interface 31 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 58.075661][ T5566] usb 6-1: config 3 interface 31 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 58.078986][ T5566] usb 6-1: config 3 interface 31 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 58.083682][ T5566] usb 6-1: config 3 interface 31 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 58.087250][ T5566] usb 6-1: config 3 interface 31 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 58.090483][ T5566] usb 6-1: config 3 interface 31 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 58.094362][ T5566] usb 6-1: config 3 interface 31 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 58.098798][ T5566] usb 6-1: config 3 interface 31 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 58.103444][ T5566] usb 6-1: config 3 interface 31 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 58.107872][ T5566] usb 6-1: config 3 interface 31 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 58.113063][ T5566] usb 6-1: config 3 interface 31 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 58.117466][ T5566] usb 6-1: config 3 interface 31 has no altsetting 0 [ 58.121384][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 58.122642][ T5566] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.127577][ T5566] usb 6-1: Product: ы [ 58.129221][ T5566] usb 6-1: Manufacturer: 諩慨ꨝ袱蓊즐게䮋ါ潵᎚㶎궀ܛ㟗拶ꟴꝬ좬窒Δ竟鬗ᩦﾝ贓蕾Ꟁ삻肧嘓訦独쟟Ι㝯⹻裢ࠋ맢푞벣堁웻-䨥≿碗佖꼜⅖䄈䯺ꄣ [ 58.138120][ T5566] usb 6-1: SerialNumber: Г [ 58.146779][ T6195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.405763][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 58.502888][ T6209] syzkaller0: entered promiscuous mode [ 58.504727][ T6209] syzkaller0: entered allmulticast mode [ 58.509834][ T6209] TC_ACT_REPEAT abuse ? [ 58.771034][ T5566] dvb-usb: found a 'Hauppauge Nova-T Stick' in warm state. [ 58.849070][ T5566] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 58.852262][ T5566] dvbdev: DVB: registering new adapter (Hauppauge Nova-T Stick) [ 58.864653][ T5566] usb 6-1: media controller created [ 58.882880][ T5566] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 58.887132][ T6213] 9pnet_virtio: no channels available for device syz [ 58.973654][ T5566] DVB: Unable to find symbol dib7000p_attach() [ 58.975726][ T5566] dvb-usb: no frontend was attached by 'Hauppauge Nova-T Stick' [ 59.005149][ T6215] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 59.009046][ T6215] CPU: 3 UID: 0 PID: 6215 Comm: syz.2.106 Not tainted syzkaller #0 PREEMPT(full) [ 59.009068][ T6215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.009079][ T6215] Call Trace: [ 59.009086][ T6215] [ 59.009093][ T6215] dump_stack_lvl+0x100/0x190 [ 59.009138][ T6215] sysfs_warn_dup.cold+0x1c/0x28 [ 59.009167][ T6215] sysfs_create_dir_ns+0x24b/0x2b0 [ 59.009200][ T6215] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 59.009226][ T6215] ? find_held_lock+0x2b/0x80 [ 59.009247][ T6215] ? kobject_add_internal+0x25f/0x930 [ 59.009275][ T6215] ? kobject_add_internal+0x25f/0x930 [ 59.009318][ T6215] ? class_dir_child_ns_type+0xd/0x60 [ 59.009343][ T6215] kobject_add_internal+0x2c8/0x930 [ 59.009373][ T6215] kobject_add+0x16a/0x1e0 [ 59.009397][ T6215] ? __pfx_kobject_add+0x10/0x10 [ 59.009436][ T6215] ? get_device_parent+0x1b3/0x4c0 [ 59.009458][ T6215] ? kobject_put+0xb9/0x640 [ 59.009488][ T6215] device_add+0x294/0x1970 [ 59.009510][ T6215] ? lockdep_init_map_type+0x5c/0x250 [ 59.009536][ T6215] ? __pfx_device_add+0x10/0x10 [ 59.009554][ T6215] ? lockdep_init_map_type+0x5c/0x250 [ 59.009580][ T6215] ? __init_waitqueue_head+0xca/0x150 [ 59.009604][ T6215] tty_register_device_attr+0x388/0x7f0 [ 59.009633][ T6215] ? lockdep_init_map_type+0x5c/0x250 [ 59.009658][ T6215] ? __pfx_tty_register_device_attr+0x10/0x10 [ 59.009690][ T6215] ? tty_port_init+0x156/0x1c0 [ 59.009711][ T6215] gsm_activate_mux+0x155/0x2a0 [ 59.009730][ T6215] gsmld_ioctl+0xbbc/0x15c0 [ 59.009753][ T6215] ? kasan_quarantine_put+0x104/0x240 [ 59.009777][ T6215] ? __pfx_gsmld_ioctl+0x10/0x10 [ 59.009813][ T6215] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.009840][ T6215] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 59.009864][ T6215] ? __pfx_gsmld_ioctl+0x10/0x10 [ 59.009884][ T6215] tty_ioctl+0x11b4/0x1640 [ 59.009901][ T6215] ? __pfx_tty_ioctl+0x10/0x10 [ 59.009916][ T6215] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 59.009948][ T6215] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 59.009990][ T6215] ? selinux_file_ioctl+0x13b/0x290 [ 59.010013][ T6215] ? selinux_file_ioctl+0xb6/0x290 [ 59.010048][ T6215] ? __pfx_tty_ioctl+0x10/0x10 [ 59.010069][ T6215] __x64_sys_ioctl+0x18e/0x210 [ 59.010094][ T6215] do_syscall_64+0x123/0x790 [ 59.010115][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.010134][ T6215] RIP: 0033:0x7efe8959e0d9 [ 59.010149][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.010165][ T6215] RSP: 002b:00007efe8a47a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.010182][ T6215] RAX: ffffffffffffffda RBX: 00007efe89826090 RCX: 00007efe8959e0d9 [ 59.010195][ T6215] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000004 [ 59.010205][ T6215] RBP: 00007efe89635024 R08: 0000000000000000 R09: 0000000000000000 [ 59.010216][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.010226][ T6215] R13: 00007efe89826128 R14: 00007efe89826090 R15: 00007ffff0d5a418 [ 59.010251][ T6215] [ 59.023202][ T6215] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 59.051339][ T5566] rc_core: IR keymap rc-dib0700-rc5 not found [ 59.174878][ T5566] Registered IR keymap rc-empty [ 59.176709][ T5566] dvb-usb: could not initialize remote control. [ 59.178638][ T5566] dvb-usb: Hauppauge Nova-T Stick successfully initialized and connected. [ 59.209193][ T5566] usb 6-1: USB disconnect, device number 4 [ 59.315199][ T5566] dvb-usb: Hauppauge Nova-T Stick successfully deinitialized and disconnected. [ 59.614542][ T6224] kernel profiling enabled (shift: 63) [ 59.624447][ T6224] profiling shift: 63 too large [ 59.661825][ T6226] Console: switching to colour dummy device 80x25 [ 59.745506][ T6235] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 59.765879][ T6235] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 60.032659][ T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.045318][ T5874] usb 5-1: USB disconnect, device number 2 [ 60.131936][ T6266] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 60.136577][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.181296][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 60.183794][ T50] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.187390][ T50] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.190155][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 60.193106][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.195934][ T50] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.199650][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.279028][ T6273] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 60.408874][ T50] usb 8-1: usb_control_msg returned -32 [ 60.410688][ T50] usbtmc 8-1:16.0: can't read capabilities [ 60.767292][ T6306] usbtmc 8-1:16.0: usbtmc_ioctl_request failed -32 [ 60.775634][ T50] usb 8-1: USB disconnect, device number 4 [ 60.795477][ T6310] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 60.829064][ T6313] program syz.0.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.833785][ T6313] ubi: mtd0 is already attached to ubi0 [ 60.836875][ T6313] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 60.842422][ T6313] exFAT-fs (nbd0): unable to read boot sector [ 60.845258][ T6313] exFAT-fs (nbd0): failed to read boot sector [ 60.847218][ T6313] exFAT-fs (nbd0): failed to recognize exfat type [ 60.901757][ T6315] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 60.905258][ T6315] ref_ctr increment failed for inode: 0xe6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c8bf2c0 [ 60.910186][ T6315] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 60.920781][ T6315] ref_ctr decrement failed for inode: 0xe6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c8bf2c0 [ 60.925463][ T6315] uprobe: syz.0.134:6315 failed to unregister, leaking uprobe [ 60.960986][ T850] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 61.121285][ T850] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 61.124905][ T850] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 61.128024][ T850] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 61.131117][ T850] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 61.134074][ T850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.139079][ T6303] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 61.143587][ T850] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 61.155104][ T850] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 61.315919][ T6320] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.347132][ T6303] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 61.352983][ T6303] xt_socket: unknown flags 0x58 [ 61.358037][ T5874] usb 6-1: USB disconnect, device number 5 [ 61.366667][ T5874] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 61.372052][ T5874] cyberjack 6-1:1.0: device disconnected [ 61.469209][ T6332] tc action pedit offset must be on 32 bit boundaries [ 61.481961][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 61.481971][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 61.859476][ T6318] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 61.873152][ T6355] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 61.875041][ T6353] null_blk: nullb1: using native zone append [ 61.879949][ T6355] overlayfs: missing 'lowerdir' [ 61.912924][ T6360] xt_hashlimit: max too large, truncated to 1048576 [ 61.917911][ T6364] sch_tbf: burst 0 is lower than device dummy0 mtu (1514) ! [ 61.920860][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 61.920869][ T42] audit: type=1326 audit(1787509008.042:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f79e0d9 code=0x7ff00000 [ 61.927123][ T6360] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 61.930248][ T42] audit: type=1326 audit(1787509008.052:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f79e0d9 code=0x7ff00000 [ 61.940351][ T42] audit: type=1326 audit(1787509008.052:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f79e0d9 code=0x7ff00000 [ 61.947629][ T42] audit: type=1326 audit(1787509008.052:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f79e0d9 code=0x7ff00000 [ 61.956101][ T42] audit: type=1326 audit(1787509008.052:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f79e0d9 code=0x7ff00000 [ 61.957117][ T6353] null_blk: disk nullb1 created [ 61.962988][ T42] audit: type=1326 audit(1787509008.052:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f79e0d9 code=0x7ff00000 [ 61.963011][ T42] audit: type=1400 audit(1787509008.052:413): avc: denied { write } for pid=6352 comm="syz.2.145" name="nullb" dev="configfs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.963031][ T42] audit: type=1326 audit(1787509008.052:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f79e0d9 code=0x7ff00000 [ 61.964664][ T42] audit: type=1326 audit(1787509008.052:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f79e0d9 code=0x7ff00000 [ 61.993076][ T42] audit: type=1326 audit(1787509008.052:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f79e0d9 code=0x7ff00000 [ 62.024105][ T6353] null_blk: disk nullb2 created [ 62.092204][ T6382] netlink: 14 bytes leftover after parsing attributes in process `syz.0.153'. [ 62.102361][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.151'. [ 62.219352][ T6399] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82 [ 62.224050][ T6401] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 62.245438][ T6401] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x67 [ 62.620648][ T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 62.780764][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 62.783843][ T50] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 62.788629][ T50] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 62.793188][ T50] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 62.797656][ T50] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.803405][ T50] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 62.810837][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.814138][ T50] usb 6-1: Product: syz [ 62.815855][ T50] usb 6-1: Manufacturer: syz [ 62.817818][ T50] usb 6-1: SerialNumber: syz [ 62.828243][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 62.841548][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 62.846960][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 62.851971][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x19c2 instead [ 62.852016][ T50] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input7 [ 62.855473][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8288 instead [ 62.864145][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 62.867847][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 62.871372][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 62.875320][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 62.878878][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 62.882391][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 62.886443][ T6442] jffs2: Further such events for this erase block will not be printed [ 62.889271][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 62.895324][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 62.899784][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x19c2 instead [ 62.900197][ T6444] 9pnet_virtio: no channels available for device syz [ 62.900223][ T6443] 9pnet_virtio: no channels available for device syz [ 62.903680][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8288 instead [ 62.906410][ T6443] 9pnet_virtio: no channels available for device syz [ 62.908066][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 62.908081][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 62.908094][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 62.908110][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 62.928162][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 62.931309][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 62.934423][ T6442] jffs2: Further such events for this erase block will not be printed [ 62.937065][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 62.940143][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 62.943387][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x19c2 instead [ 62.946402][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x8288 instead [ 62.949444][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 62.952676][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 62.955784][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x19c2 instead [ 62.958807][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x8288 instead [ 62.961936][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 62.965012][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 62.968122][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x19c2 instead [ 62.971244][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x8288 instead [ 62.974366][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 62.977490][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 62.980558][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x19c2 instead [ 62.983675][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x8288 instead [ 62.986720][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 62.989787][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 62.992957][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x19c2 instead [ 62.995959][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x8288 instead [ 62.998980][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 63.002015][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 63.004945][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x19c2 instead [ 63.007843][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x8288 instead [ 63.010847][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 63.013725][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 63.016930][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x19c2 instead [ 63.020076][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x8288 instead [ 63.023304][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 63.026449][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 63.029621][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x19c2 instead [ 63.032837][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x8288 instead [ 63.036135][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 63.039297][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 63.042506][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x19c2 instead [ 63.045640][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x8288 instead [ 63.048807][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 63.050737][ T50] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 63.052019][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 63.055729][ T50] (id 0x00) [ 63.058326][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x19c2 instead [ 63.058339][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x8288 instead [ 63.058367][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 63.058376][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 63.072547][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x19c2 instead [ 63.075738][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x8288 instead [ 63.078814][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 63.080764][ T5731] Bluetooth: hci0: command 0x0c20 tx timeout [ 63.081998][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 63.082010][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x19c2 instead [ 63.082021][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x8288 instead [ 63.082047][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 63.082056][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 63.082065][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x19c2 instead [ 63.082075][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x8288 instead [ 63.082098][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 63.082107][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 63.082117][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x19c2 instead [ 63.082127][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x8288 instead [ 63.082150][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 63.082159][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 63.082168][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x19c2 instead [ 63.082178][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x8288 instead [ 63.082201][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 63.082210][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 63.082219][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x19c2 instead [ 63.082229][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x8288 instead [ 63.082252][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 63.082261][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 63.082270][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x19c2 instead [ 63.082280][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x8288 instead [ 63.082303][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 63.082312][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 63.082321][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x19c2 instead [ 63.082331][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x8288 instead [ 63.082354][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 63.082363][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 63.082372][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x19c2 instead [ 63.082382][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x8288 instead [ 63.082405][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 63.082414][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 63.082423][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x19c2 instead [ 63.082433][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x8288 instead [ 63.082456][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 63.082465][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 63.082474][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x19c2 instead [ 63.082489][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x8288 instead [ 63.082512][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 63.082521][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 63.082555][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x19c2 instead [ 63.082567][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x8288 instead [ 63.082591][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 63.082600][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 63.082609][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x19c2 instead [ 63.082619][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x8288 instead [ 63.082643][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 63.082651][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 63.082661][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x19c2 instead [ 63.082671][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x8288 instead [ 63.082694][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 63.082703][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 63.082712][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x19c2 instead [ 63.082722][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x8288 instead [ 63.082745][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 63.082754][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 63.082763][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x19c2 instead [ 63.082773][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x8288 instead [ 63.082842][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 63.082853][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 63.082862][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x19c2 instead [ 63.082872][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x8288 instead [ 63.082895][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 63.082905][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 63.082914][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x19c2 instead [ 63.082924][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x8288 instead [ 63.082976][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 63.082990][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 63.083004][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x19c2 instead [ 63.083014][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x8288 instead [ 63.083037][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 63.083046][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 63.083055][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x19c2 instead [ 63.083065][ T6442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x8288 instead [ 63.083083][ T6442] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 63.083089][ T6442] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 63.130680][ T50] rc_core: IR keymap rc-imon-pad not found [ 63.328344][ T50] Registered IR keymap rc-empty [ 63.331153][ T50] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 63.334272][ T50] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 63.337474][ T50] imon:send_packet: packet tx failed (-71) [ 63.360690][ T50] imon 6-1:155.0: remote input dev register failed [ 63.362724][ T50] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 63.378554][ T50] imon 6-1:155.0: unable to initialize intf0, err 0 [ 63.380733][ T50] imon:imon_probe: failed to initialize context! [ 63.382678][ T50] imon 6-1:155.0: unable to register, err -19 [ 63.386302][ T50] usb 6-1: USB disconnect, device number 6 [ 63.474266][ T6455] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 64.003654][ T6458] input: syz0 as /devices/virtual/input/input9 [ 64.192139][ T5731] Bluetooth: hci4: command 0x1003 tx timeout [ 64.192465][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 64.429633][ T6487] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 64.451285][ T850] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 64.458428][ T6489] tipc: Started in network mode [ 64.460719][ T6489] tipc: Node identity 62f77883f44f, cluster identity 4711 [ 64.463048][ T6489] tipc: Enabled bearer , priority 0 [ 64.468476][ T6489] syzkaller0: entered promiscuous mode [ 64.471078][ T6489] syzkaller0: entered allmulticast mode [ 64.472775][ T6493] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 64.477001][ T6489] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 64.480321][ T6493] netlink: 'syz.2.188': attribute type 2 has an invalid length. [ 64.491031][ T6489] tipc: Resetting bearer [ 64.497686][ T6488] tipc: Resetting bearer [ 64.509534][ T6488] tipc: Disabling bearer [ 64.549194][ T6497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'. [ 64.575782][ T5734] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 64.578952][ T6500] process 'syz.2.190' launched './file0' with NULL argv: empty string added [ 64.613597][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 64.620190][ T6502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.191'. [ 64.620747][ T850] usb 6-1: Using ep0 maxpacket: 8 [ 64.626323][ T850] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 64.634343][ T850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 64.640711][ T850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.652159][ T850] usb 6-1: config 0 descriptor?? [ 64.689741][ T6508] MINIX-fs: blocksize too small for device [ 64.868082][ T850] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 64.956831][ T6514] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 64.965389][ T6514] comedi comedi1: Minor 240 is invalid! [ 64.978150][ T6514] can0: slcan on ttynull. [ 64.981447][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 64.984238][ T6514] netlink: 'syz.3.196': attribute type 30 has an invalid length. [ 64.986577][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 64.989684][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 64.992456][ T6514] netlink: 'syz.3.196': attribute type 30 has an invalid length. [ 65.025934][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.102035][ T6513] can0 (unregistered): slcan off ttynull. [ 65.318107][ T5874] usb 6-1: USB disconnect, device number 7 [ 65.514005][ T6555] overlayfs: workdir and upperdir must reside under the same mount [ 65.562016][ T6560] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.607495][ T6560] socket: no more sockets [ 65.811604][ T6570] SELinux: truncated policydb string identifier [ 65.814363][ T6570] SELinux: failed to load policy [ 65.866810][ T6575] qnx4: no qnx4 filesystem (no root dir). [ 65.930707][ T5874] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 66.110654][ T5874] usb 8-1: Using ep0 maxpacket: 8 [ 66.113424][ T5874] usb 8-1: New USB device found, idVendor=1b75, idProduct=3070, bcdDevice=f8.96 [ 66.117786][ T5874] usb 8-1: config 1 has an invalid interface number: 161 but max is 2 [ 66.120326][ T5874] usb 8-1: config 1 has an invalid interface number: 105 but max is 2 [ 66.122951][ T5874] usb 8-1: config 1 has an invalid interface number: 153 but max is 2 [ 66.125460][ T5874] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 66.128101][ T5874] usb 8-1: config 1 has no interface number 0 [ 66.130016][ T5874] usb 8-1: config 1 has no interface number 1 [ 66.132037][ T5874] usb 8-1: config 1 has no interface number 2 [ 66.133903][ T5874] usb 8-1: config 1 interface 161 altsetting 205 endpoint 0xE has an invalid bInterval 120, changing to 7 [ 66.137927][ T5874] usb 8-1: config 1 interface 161 altsetting 205 bulk endpoint 0xF has invalid maxpacket 146 [ 66.141682][ T5874] usb 8-1: config 1 interface 161 altsetting 205 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 66.145539][ T5874] usb 8-1: config 1 interface 161 altsetting 205 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 66.149381][ T5874] usb 8-1: config 1 interface 161 altsetting 205 bulk endpoint 0x3 has invalid maxpacket 64 [ 66.152860][ T5874] usb 8-1: config 1 interface 161 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 66.156646][ T5874] usb 8-1: config 1 interface 161 altsetting 205 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 66.160751][ T5874] usb 8-1: config 1 interface 161 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 66.164598][ T5874] usb 8-1: config 1 interface 161 altsetting 205 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 66.169215][ T5874] usb 8-1: config 1 interface 105 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 66.173201][ T5874] usb 8-1: config 1 interface 105 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 66.176323][ T5874] usb 8-1: config 1 interface 105 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 66.179415][ T5874] usb 8-1: config 1 interface 105 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 66.182608][ T5874] usb 8-1: config 1 interface 105 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 66.185768][ T5874] usb 8-1: config 1 interface 105 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 66.189165][ T5874] usb 8-1: config 1 interface 153 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 66.192786][ T5874] usb 8-1: config 1 interface 153 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 66.196994][ T5874] usb 8-1: config 1 interface 153 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 66.200673][ T5874] usb 8-1: config 1 interface 153 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 66.204341][ T5874] usb 8-1: config 1 interface 153 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 66.207979][ T5874] usb 8-1: config 1 interface 153 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 66.211877][ T5874] usb 8-1: config 1 interface 161 has no altsetting 0 [ 66.214222][ T5874] usb 8-1: config 1 interface 105 has no altsetting 0 [ 66.217933][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.220862][ T5874] usb 8-1: Product: syz [ 66.222419][ T5874] usb 8-1: Manufacturer: 棡黉᤬꼐ꚁ忀쀕ᩀ⍶霢⿿㮝㢬柲ꈴ肩랅枧ꗂ숵椿嶝ⶦꌧ擷㥞嶥쳌ꝺ剬㾝߫簨袥濥ⷹ鮨敏柪쮀ʃ㧬컶琵胨憀강⽦䍶ﮭ䥩᭩ሀ䜺ᣋ噟⅞䘴屄猀膘ⴝ͍๒毾ﲑ螉≳장ꋮ녻╋ί鑞೨龞힍잸籰욨꡸輩汜㍡⠀ [ 66.232412][ T5874] usb 8-1: SerialNumber: syz [ 66.236706][ T6568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.239586][ T6568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.478086][ T5874] usb 8-1: USB disconnect, device number 5 [ 66.912418][ T6582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=6582 comm=syz.0.213 [ 66.917140][ T6582] __nla_validate_parse: 2 callbacks suppressed [ 66.917149][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 66.931211][ T42] kauditd_printk_skb: 135 callbacks suppressed [ 66.931227][ T42] audit: type=1400 audit(1787509013.062:552): avc: denied { bind } for pid=6581 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.983146][ T6588] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 66.985681][ T6588] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 66.988094][ T6588] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 66.990706][ T6588] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 66.993537][ T6588] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 66.996060][ T6588] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 67.002802][ T6589] vlan2: entered promiscuous mode [ 67.015365][ T6591] ALSA: seq fatal error: cannot create timer (-19) [ 67.020002][ T42] audit: type=1400 audit(1787509013.142:553): avc: denied { mount } for pid=6590 comm="syz.1.217" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 67.048206][ T6595] 9pnet_virtio: no channels available for device syz [ 67.060647][ T6595] syzkaller0: entered promiscuous mode [ 67.062982][ T6595] syzkaller0: entered allmulticast mode [ 67.219576][ T42] audit: type=1400 audit(1787509013.342:554): avc: denied { read write } for pid=6597 comm="syz.3.219" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 67.229654][ T42] audit: type=1400 audit(1787509013.342:555): avc: denied { open } for pid=6597 comm="syz.3.219" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 67.270787][ T5566] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 67.431585][ T5566] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 67.436479][ T5566] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 67.442592][ T5566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.450463][ T6591] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.458375][ T5566] opticon 6-1:1.0: opticon converter detected [ 67.468184][ T5566] usb 6-1: opticon converter now attached to ttyUSB0 [ 67.830877][ T42] audit: type=1400 audit(1787509013.952:556): avc: denied { write } for pid=6610 comm="syz.0.223" name="usb_gadget" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.838221][ T42] audit: type=1400 audit(1787509013.962:557): avc: denied { write } for pid=6610 comm="syz.0.223" name="configs" dev="configfs" ino=15413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.840259][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 67.845090][ T42] audit: type=1400 audit(1787509013.962:558): avc: denied { write } for pid=6610 comm="syz.0.223" name="functions" dev="configfs" ino=15412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.858073][ T6611] xfrm1: entered promiscuous mode [ 67.859693][ T6611] xfrm1: entered allmulticast mode [ 67.867761][ T42] audit: type=1400 audit(1787509013.992:559): avc: denied { write } for pid=6610 comm="syz.0.223" name="c.1" dev="configfs" ino=12091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.877235][ T42] audit: type=1400 audit(1787509013.992:560): avc: denied { create } for pid=6610 comm="syz.0.223" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 67.887318][ T42] audit: type=1400 audit(1787509013.992:561): avc: denied { write } for pid=6610 comm="syz.0.223" name="c.1" dev="configfs" ino=12091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.081254][ T6614] loop5: detected capacity change from 0 to 7 [ 68.088307][ T6614] Dev loop5: unable to read RDB block 7 [ 68.090783][ T6614] loop5: AHDI p2 [ 68.092103][ T6614] loop5: partition table partially beyond EOD, truncated [ 68.170716][ T6161] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.317632][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.321959][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.325118][ T6161] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 68.327675][ T850] usb 6-1: USB disconnect, device number 8 [ 68.338018][ T6161] usb 5-1: Dual-Role OTG device on HNP port [ 68.341358][ T6161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.365429][ T850] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 68.369235][ T850] opticon 6-1:1.0: device disconnected [ 68.374765][ T6161] gspca_main: spca501-2.14.0 probing 0000:0000 [ 68.378551][ T6161] gspca_spca501: reg write: error -32 [ 68.380468][ T6161] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 68.383695][ T6161] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 69.036044][ T6638] xt_limit: Overflow, try lower: 0/0 [ 69.038584][ T6638] cgroup: name respecified [ 69.123419][ C0] Unknown status report in ack skb [ 69.140858][ T6642] ovs-system: entered promiscuous mode [ 69.283617][ T6653] 9pnet_virtio: no channels available for device syz [ 69.323026][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 69.326192][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 69.329347][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x19c2 instead [ 69.332756][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8288 instead [ 69.335926][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 69.338999][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 69.342242][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 69.345327][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 69.348416][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 69.351638][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 69.354752][ T6656] jffs2: Further such events for this erase block will not be printed [ 69.357387][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 69.360476][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 69.363647][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x19c2 instead [ 69.366761][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8288 instead [ 69.369857][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 69.373049][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 69.376142][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 69.379251][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 69.382667][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 69.385890][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 69.388965][ T6656] jffs2: Further such events for this erase block will not be printed [ 69.391850][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 69.395051][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 69.398017][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x19c2 instead [ 69.401157][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x8288 instead [ 69.404178][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 69.407082][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 69.410039][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x19c2 instead [ 69.413087][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x8288 instead [ 69.416103][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 69.419032][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 69.422080][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x19c2 instead [ 69.425053][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x8288 instead [ 69.428023][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 69.431090][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 69.434110][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x19c2 instead [ 69.437035][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x8288 instead [ 69.440143][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 69.443181][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 69.446124][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x19c2 instead [ 69.449099][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x8288 instead [ 69.452179][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 69.455130][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 69.458023][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x19c2 instead [ 69.461077][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x8288 instead [ 69.464512][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 69.468441][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 69.472676][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x19c2 instead [ 69.476847][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x8288 instead [ 69.481033][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 69.485010][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 69.488927][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x19c2 instead [ 69.493037][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x8288 instead [ 69.497037][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 69.501111][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 69.505007][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x19c2 instead [ 69.508933][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x8288 instead [ 69.512917][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 69.516907][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 69.521024][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x19c2 instead [ 69.524892][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x8288 instead [ 69.528803][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 69.532896][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 69.536879][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x19c2 instead [ 69.541072][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x8288 instead [ 69.545073][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 69.550349][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 69.556517][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x19c2 instead [ 69.560714][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x8288 instead [ 69.564839][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 69.581151][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 69.585196][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x19c2 instead [ 69.589239][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x8288 instead [ 69.593484][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 69.597406][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 69.601891][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x19c2 instead [ 69.605958][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x8288 instead [ 69.609942][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 69.614040][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 69.618019][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x19c2 instead [ 69.623432][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x8288 instead [ 69.627507][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 69.631660][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 69.635868][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x19c2 instead [ 69.639776][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x8288 instead [ 69.643771][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 69.647702][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 69.651691][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x19c2 instead [ 69.655624][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x8288 instead [ 69.659561][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 69.664779][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 69.668785][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x19c2 instead [ 69.670820][ T6671] syz_tun: entered allmulticast mode [ 69.674709][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x8288 instead [ 69.674758][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 69.682932][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 69.686847][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x19c2 instead [ 69.690990][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x8288 instead [ 69.695160][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 69.699222][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 69.700130][ T6668] pimreg: entered allmulticast mode [ 69.703458][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x19c2 instead [ 69.703478][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x8288 instead [ 69.703521][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 69.703541][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 69.703556][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x19c2 instead [ 69.703572][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x8288 instead [ 69.703613][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 69.703627][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 69.703643][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x19c2 instead [ 69.703659][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x8288 instead [ 69.703699][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 69.723764][ T6667] syz_tun: left allmulticast mode [ 69.731883][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 69.735598][ T6667] pimreg: left allmulticast mode [ 69.742370][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x19c2 instead [ 69.756922][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x8288 instead [ 69.756975][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 69.765335][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 69.765348][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x19c2 instead [ 69.765358][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x8288 instead [ 69.765387][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 69.765396][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 69.765406][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x19c2 instead [ 69.765417][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x8288 instead [ 69.765441][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 69.765450][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 69.765460][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x19c2 instead [ 69.765470][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x8288 instead [ 69.765494][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 69.765503][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 69.765513][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x19c2 instead [ 69.765523][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x8288 instead [ 69.765551][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 69.765560][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 69.765570][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x19c2 instead [ 69.765580][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x8288 instead [ 69.765604][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 69.765613][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 69.765622][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x19c2 instead [ 69.765633][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x8288 instead [ 69.811342][ T6676] validate_nla: 1 callbacks suppressed [ 69.811358][ T6676] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 69.812352][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 69.815804][ T6676] netlink: 76 bytes leftover after parsing attributes in process `syz.3.247'. [ 69.818761][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 69.850933][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x19c2 instead [ 69.850948][ T6656] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x8288 instead [ 69.850967][ T6656] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 69.850972][ T6656] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 69.902371][ T6680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.249'. [ 69.905874][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.249'. [ 69.937771][ T6688] xt_hashlimit: size too large, truncated to 1048576 [ 70.004004][ T6695] netlink: 'syz.1.252': attribute type 3 has an invalid length. [ 70.021797][ T6695] netlink: 'syz.1.252': attribute type 3 has an invalid length. [ 70.039157][ T6695] team0 (unregistering): Port device team_slave_0 removed [ 70.044344][ T6695] team0 (unregistering): Port device team_slave_1 removed [ 70.127389][ T6702] binder: 6701:6702 ioctl c0306201 2000000001c0 returned -22 [ 70.990229][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 71.109090][ T6752] netlink: 'syz.3.271': attribute type 2 has an invalid length. [ 71.112397][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 71.165735][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.168637][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.267329][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.269887][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.335680][ T6765] overlayfs: invalid origin (0000) [ 71.494626][ T6777] netlink: 'syz.1.279': attribute type 4 has an invalid length. [ 71.686313][ T6799] netlink: 'syz.2.283': attribute type 4 has an invalid length. [ 71.741652][ T6808] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 71.870785][ T1492] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 71.874278][ T6810] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 72.021574][ T1492] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 72.026165][ T1492] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 72.029139][ T1492] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 72.032916][ T1492] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.037074][ T1492] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.040100][ T1492] usb 8-1: Product: syz [ 72.041999][ T1492] usb 8-1: Manufacturer: syz [ 72.043727][ T1492] usb 8-1: SerialNumber: syz [ 72.049052][ T1492] usb 8-1: config 0 descriptor?? [ 72.054004][ T1492] hub 8-1:0.0: bad descriptor, ignoring hub [ 72.056303][ T1492] hub 8-1:0.0: probe with driver hub failed with error -5 [ 72.060444][ T1492] usb 8-1: selecting invalid altsetting 0 [ 72.122087][ T6821] warning: `syz.1.291' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.167308][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 72.167320][ T42] audit: type=1400 audit(1787509018.292:595): avc: denied { setopt } for pid=6822 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.177086][ T42] audit: type=1400 audit(1787509018.292:596): avc: denied { watch } for pid=6822 comm="syz.1.292" path="/62/bus" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.185133][ T42] audit: type=1400 audit(1787509018.292:597): avc: denied { watch_sb watch_reads } for pid=6822 comm="syz.1.292" path="/62/bus" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.226363][ T6826] dlm: no locking on control device [ 72.258035][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.263999][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.288925][ T6838] vivid-000: disconnect [ 72.309803][ T6837] vivid-000: reconnect [ 72.370796][ T850] usb 8-1: USB disconnect, device number 6 [ 72.396822][ T42] audit: type=1400 audit(1787509018.522:598): avc: denied { append } for pid=6843 comm="syz.0.300" name="frontend0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.559352][ T42] audit: type=1400 audit(1787509018.682:599): avc: denied { watch watch_reads } for pid=6857 comm="syz.0.304" path="/proc/244/net/dev_snmp6" dev="proc" ino=4026533112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 72.561968][ T6858] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 72.569703][ T42] audit: type=1400 audit(1787509018.692:600): avc: denied { getopt } for pid=6857 comm="syz.0.304" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.605212][ T6863] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.305'. [ 72.620672][ T5971] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 72.643788][ T6865] netlink: 'syz.0.306': attribute type 1 has an invalid length. [ 72.672572][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.676301][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.771130][ T5971] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 72.774827][ T5971] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.777973][ T5971] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 72.781259][ T5971] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 72.784325][ T5971] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 72.788488][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.794704][ T6846] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 72.797196][ T6846] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 72.800369][ T5971] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 72.803876][ T5971] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 72.806215][ T5971] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 72.809142][ T5971] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 72.813277][ T5971] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 72.815700][ T5971] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 72.818724][ T5971] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 73.005251][ T42] audit: type=1400 audit(1787509019.132:601): avc: denied { ioctl } for pid=6844 comm="syz.1.299" path="socket:[13826]" dev="sockfs" ino=13826 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.164029][ T1480] usb 6-1: USB disconnect, device number 9 [ 73.175170][ T1480] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 73.184764][ T1480] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 73.189195][ T1480] keyspan 6-1:1.0: device disconnected [ 73.275010][ T42] audit: type=1400 audit(1787509019.402:602): avc: denied { bind } for pid=6874 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.380693][ T850] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 73.532119][ T850] usb 8-1: No LPM exit latency info found, disabling LPM. [ 73.534427][ T850] usb 8-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 73.537898][ T850] usb 8-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.541782][ T850] usb 8-1: config 1 interface 0 has no altsetting 0 [ 73.697968][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 73.701277][ T6878] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 74.241233][ T6886] capability: warning: `syz.0.313' uses deprecated v2 capabilities in a way that may be insecure [ 74.578031][ T6897] netlink: 'syz.0.316': attribute type 3 has an invalid length. [ 74.581277][ T6897] netlink: 'syz.0.316': attribute type 6 has an invalid length. [ 74.584389][ T6897] netlink: 52 bytes leftover after parsing attributes in process `syz.0.316'. [ 74.730108][ T6906] Cannot find add_set index 65532 as target [ 74.736477][ T6906] Cannot find add_set index 65532 as target [ 74.738560][ T6906] Cannot find add_set index 65532 as target [ 74.741712][ T6906] Cannot find add_set index 65532 as target [ 74.744292][ T6906] Cannot find add_set index 65532 as target [ 74.746450][ T6906] Cannot find add_set index 65532 as target [ 74.748522][ T6906] Cannot find add_set index 65532 as target [ 74.750517][ T6906] Cannot find add_set index 65532 as target [ 74.753809][ T6906] Cannot find add_set index 65532 as target [ 74.756722][ T6906] Cannot find add_set index 65532 as target [ 74.845929][ T6914] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 75.001155][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 75.750744][ T6926] mmap: syz.1.324 (6926) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.820239][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'. [ 75.899145][ T42] audit: type=1400 audit(1787509022.022:603): avc: denied { write } for pid=6938 comm="syz.0.329" name="core" dev="configfs" ino=5477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.994800][ T42] audit: type=1400 audit(1787509022.122:604): avc: denied { connect } for pid=6938 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.142926][ T6945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.148109][ T6945] netlink: 68 bytes leftover after parsing attributes in process `syz.0.331'. [ 76.157512][ T850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.162508][ T850] usb 8-1: can't set config #1, error -71 [ 76.165168][ T850] usb 8-1: USB disconnect, device number 7 [ 76.194473][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.332'. [ 76.198406][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.332'. [ 76.206759][ T5971] hid-generic 0003:046D:1234.0002: hidraw1: USB HID v0.00 Device [k] on syz1 [ 76.312500][ T5734] Bluetooth: hci2: unexpected cc 0x204b length: 34 > 3 [ 76.316395][ T6956] ip_tables: iptables: counters copy to user failed while replacing table [ 76.760671][ T1041] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 76.914040][ T1041] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 76.917667][ T1041] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 76.920657][ T1041] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 76.923536][ T1041] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.203328][ T5971] usb 8-1: USB disconnect, device number 8 [ 77.257946][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.263889][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.267460][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.270780][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.274347][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.277656][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.281213][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.287432][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.291603][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.294698][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.298688][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.303050][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.908697][ T6995] omfs: Invalid superblock (0) [ 77.912145][ T6994] omfs: Invalid superblock (0) [ 77.916351][ T6994] [ 77.917226][ T6994] ============================================ [ 77.919801][ T6994] WARNING: possible recursive locking detected [ 77.922503][ T6994] syzkaller #0 Not tainted [ 77.924321][ T6994] -------------------------------------------- [ 77.926833][ T6994] syz.0.342/6994 is trying to acquire lock: [ 77.929196][ T6994] ffff88805c98c160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 77.932817][ T6994] [ 77.932817][ T6994] but task is already holding lock: [ 77.935588][ T6994] ffff8880576b4d60 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 77.939463][ T6994] [ 77.939463][ T6994] other info that might help us debug this: [ 77.942518][ T6994] Possible unsafe locking scenario: [ 77.942518][ T6994] [ 77.945504][ T6994] CPU0 [ 77.946847][ T6994] ---- [ 77.948192][ T6994] lock(&rmidi->open_mutex); [ 77.950297][ T6994] lock(&rmidi->open_mutex); [ 77.952105][ T6994] [ 77.952105][ T6994] *** DEADLOCK *** [ 77.952105][ T6994] [ 77.955091][ T6994] May be due to missing lock nesting notation [ 77.955091][ T6994] [ 77.958281][ T6994] locks held by syz.0.342/6994: 2, last CPU#0: [ 77.960322][ T6994] #0: ffff8880576b4d60 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 77.964284][ T6994] #1: ffff88805c98c460 (&ump->open_mutex){+.+.}-{4:4}, at: snd_ump_legacy_close+0x117/0x300 [ 77.968114][ T6994] [ 77.968114][ T6994] stack backtrace: [ 77.969967][ T6994] CPU: 0 UID: 0 PID: 6994 Comm: syz.0.342 Not tainted syzkaller #0 PREEMPT(full) [ 77.969989][ T6994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.970000][ T6994] Call Trace: [ 77.970008][ T6994] [ 77.970015][ T6994] dump_stack_lvl+0x100/0x190 [ 77.970045][ T6994] print_deadlock_bug.cold+0xbd/0xca [ 77.970069][ T6994] __lock_acquire+0x1343/0x1ec0 [ 77.970096][ T6994] lock_acquire+0x1b9/0x370 [ 77.970118][ T6994] ? rawmidi_release_priv+0x45/0x280 [ 77.970141][ T6994] ? __pfx___might_resched+0x10/0x10 [ 77.970162][ T6994] ? lock_acquire+0x1b9/0x370 [ 77.970186][ T6994] __mutex_lock+0x1a4/0x1bc0 [ 77.970212][ T6994] ? rawmidi_release_priv+0x45/0x280 [ 77.970233][ T6994] ? rawmidi_release_priv+0x45/0x280 [ 77.970253][ T6994] ? trace_contention_end+0x126/0x160 [ 77.970278][ T6994] ? __pfx___mutex_lock+0x10/0x10 [ 77.970295][ T6994] ? __pfx___mutex_lock+0x10/0x10 [ 77.970313][ T6994] ? lock_acquire+0x1b9/0x370 [ 77.970336][ T6994] ? rawmidi_release_priv+0x45/0x280 [ 77.970356][ T6994] rawmidi_release_priv+0x45/0x280 [ 77.970378][ T6994] snd_rawmidi_kernel_release+0x3a/0xd0 [ 77.970399][ T6994] snd_ump_legacy_close+0x234/0x300 [ 77.970423][ T6994] close_substream.part.0+0x16b/0x860 [ 77.970445][ T6994] ? __pfx_close_substream.part.0+0x10/0x10 [ 77.970467][ T6994] ? locks_remove_file+0xd1/0x600 [ 77.970493][ T6994] rawmidi_release_priv+0x210/0x280 [ 77.970519][ T6994] snd_rawmidi_release+0x5a/0xf0 [ 77.970541][ T6994] ? __pfx_snd_rawmidi_release+0x10/0x10 [ 77.970561][ T6994] __fput+0x3ff/0xb50 [ 77.970576][ T6994] task_work_run+0x150/0x240 [ 77.970596][ T6994] ? __pfx_task_work_run+0x10/0x10 [ 77.970614][ T6994] ? __x64_sys_openat+0x12d/0x210 [ 77.970631][ T6994] exit_to_user_mode_loop+0x1d8/0x700 [ 77.970653][ T6994] ? rcu_is_watching+0x13/0xc0 [ 77.970671][ T6994] do_syscall_64+0x661/0x790 [ 77.970688][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.970705][ T6994] RIP: 0033:0x7fde2dd5e90e [ 77.970718][ T6994] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.970733][ T6994] RSP: 002b:00007fde2ed40b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.970748][ T6994] RAX: ffffffffffffffea RBX: 00007fde2ed416c0 RCX: 00007fde2dd5e90e [ 77.970759][ T6994] RDX: 0000000000004101 RSI: 00007fde2ed40c00 RDI: ffffffffffffff9c [ 77.970769][ T6994] RBP: 00007fde2ed40c00 R08: 0000000000000000 R09: 0000000000000000 [ 77.970779][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 77.970789][ T6994] R13: 00007fde2e026038 R14: 00007fde2e025fa0 R15: 00007ffc158d5648 [ 77.970804][ T6994] [ 77.971861][ T6995] binder: BC_ACQUIRE_RESULT not supported [ 77.980769][ T6999] binder: BC_ACQUIRE_RESULT not supported [ 77.981398][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 77.981408][ T42] audit: type=1400 audit(1787509024.112:610): avc: denied { read append } for pid=6996 comm="syz.1.343" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.982097][ T6999] binder: 6993:6999 ioctl c0306201 2000000003c0 returned -22 [ 77.982171][ T6995] binder: 6993:6995 ioctl c0306201 2000000003c0 returned -22 [ 77.983670][ T42] audit: type=1400 audit(1787509024.112:611): avc: denied { open } for pid=6996 comm="syz.1.343" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.985962][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 77.985974][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 78.140827][ T6998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.143202][ T6998] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.146250][ T6998] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.148652][ T6998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.150549][ T6998] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.153107][ T6998] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.155983][ T6998] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.158368][ T6998] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.162475][ T6998] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.165342][ T6998] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.167530][ T6998] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.170173][ T6998] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.190820][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.191007][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.191028][ T65] Bluetooth: hci0: command 0x0c20 tx timeout [ 80.192775][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.391953][ T57] cfg80211: failed to load regulatory.db [ 82.270745][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.270797][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.271511][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.280692][ T5743] Bluetooth: hci0: command 0x0c20 tx timeout [ 84.350792][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.352735][ T5734] Bluetooth: hci0: command 0x0c20 tx timeout [ 84.354665][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.356575][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout