last executing test programs: 5.4450194s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) open$dir(0x0, 0x4003, 0xb0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 5.345475993s ago: executing program 1 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) 4.098113403s ago: executing program 3 (id=18): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) 3.04490326s ago: executing program 1 (id=23): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 2.89401968s ago: executing program 3 (id=24): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @broadcast, @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x2, 0x24, 0x65, 0x0, 0xd, 0x21, 0x0, @remote, @private=0xa010100}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x5, 0x6, 's&}', 0x1, "c07b04"}}}}}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.806221528s ago: executing program 3 (id=25): sched_setparam(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) 2.730728417s ago: executing program 3 (id=26): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000000)='#\x00', 0x0, &(0x7f0000000040)={@align=0xfffffffffffffffe, {0xff, 0x8, 0x8, 0x1}}, 0xe9a, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9}, {[0xe, 0x6, 0x7f]}, 0x5, 0x9c, &(0x7f0000000240)=""/156}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000380)=0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x544ac}}, 0x20}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec, 0xc) ioctl(r2, 0xc4c85513, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000500)={{0x6, 0x2, 0x4, 0x9, '\x00', 0x9}, 0x1, [0x8, 0x50000000000000, 0x1, 0x30, 0x910, 0x3, 0x101, 0x5, 0xffff, 0xb, 0x400, 0xffff, 0x7, 0x8000000000000000, 0x6, 0x6, 0xac11, 0x1000, 0x8000000000000001, 0x9, 0x3, 0x1, 0x100, 0x3, 0xfffffffffffffc01, 0x8, 0x1, 0x3, 0x5, 0x1, 0x8, 0x9, 0x4, 0x7, 0x8, 0x7, 0xffffffffffffffff, 0x9, 0x5, 0x0, 0xd914, 0x3, 0x7, 0x5, 0x8000000000000001, 0x2, 0x2, 0x8e2, 0x7fffffffffffffff, 0x2, 0x6, 0x7, 0xffff, 0xd, 0x80, 0x2, 0x3, 0x2, 0x2, 0x400, 0x9, 0x4, 0x8, 0x3, 0x4, 0x7fffffffffffffff, 0x6, 0x10000, 0x2, 0x1ff, 0x38, 0x7fff, 0xfff, 0x61, 0x6, 0xc6, 0x4, 0x82, 0x2, 0xfffffffffffffffe, 0x0, 0x9000000000000000, 0x6, 0x5, 0x8, 0x100000001, 0x3, 0x205, 0x10000, 0x8, 0xa2b, 0x4c6, 0x7d37, 0x8000000000000000, 0x2b3c, 0x7ff, 0x5, 0x2, 0xe, 0x44, 0x6, 0x9, 0x2, 0x3, 0x8001, 0x7, 0x7, 0x3ff, 0x8, 0x8, 0x7fff, 0x1, 0x5, 0x4, 0xd, 0xeb, 0xb, 0xa6fa, 0x6, 0x4, 0x3, 0x0, 0x9, 0x6, 0x4, 0x3, 0x1]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.684439143s ago: executing program 1 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) mmap(&(0x7f0000315000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.335959954s ago: executing program 1 (id=29): memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 1.482101355s ago: executing program 1 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x4, 0x8000, 0x4, 0xffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x401}, 0x0, 0x0) setgroups(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x205c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 1.216799639s ago: executing program 0 (id=34): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x19, r3, 0xffffffffffffffff, 0x274b) migrate_pages(r3, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x7, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x7, 0x197, 0x4, 0x4, 0x0, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa09e88ab5b3a8c48}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r5}, 0x0, 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1.065061779s ago: executing program 0 (id=35): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='-+\'\'\v[\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 987.838658ms ago: executing program 0 (id=36): socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 910.624895ms ago: executing program 2 (id=37): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f0000000140)}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = io_uring_setup(0x5326, &(0x7f0000000040)={0x0, 0xb7a3, 0xc000, 0xc, 0xc7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffd, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf1, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 733.629904ms ago: executing program 2 (id=38): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x54, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="400001003c0001000900010067617465000000002c000200200001001800010000000000000000000000000000000000000000000800020000000000"}]}, 0x54}], 0x1}, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="540000003000050600000000000000000000010040000000000001000900000000002c00020020000100180001000000000000000000000000007bd2bb65516cbf4032b8b47e61000008000200"/87], 0x54}], 0x1}, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\xB\x00-^{', 0x3a, './file1'}, 0x3d) sendmmsg$unix(r1, &(0x7f0000000140), 0x400000000000287, 0x0) mq_open(&(0x7f0000000140)='\\xB\x00-^{', 0x40, 0x41, &(0x7f0000000180)={0x100000000, 0x2, 0x0, 0x39b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close(r0) 691.604432ms ago: executing program 2 (id=39): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0x30, r1, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}]}, 0x30}}, 0x4044800) 645.457646ms ago: executing program 3 (id=40): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) r5 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 635.668744ms ago: executing program 0 (id=41): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x4000, 0x0, 0x159}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000080), 0x80000) fanotify_init(0x0, 0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 592.090648ms ago: executing program 2 (id=42): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4014}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newtclass={0x64, 0x28, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {0xffff, 0xfff1}, {0x4, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x11e}}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x21}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004800}, 0x850) fcntl$setstatus(r0, 0x4, 0x2200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r6, &(0x7f0000001a40)={0xa, 0x4e23, 0x5, @mcast2, 0x8080000}, 0x1c) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0xa4e2812056436617) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000004b40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004b00)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4840) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) get_mempolicy(&(0x7f00000001c0), 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 248.452033ms ago: executing program 0 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 199.298018ms ago: executing program 3 (id=44): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x6, 0x2, 0x2c, 0x8, 0x1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x10, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3a}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000004c0)="ff4131768c8bcaf8d70e7aec8e39d02d76361b56a9c0d34bd89e6677f6d8553252a1afffe364af44512bc17a608420a5d7f0a5bc78d7b5f1fe43521b04441911534d3bf1966553409505a8f710c9a4fc06e7f1c999139c5140bf1022cb1338f07fc2c3610b348813b60f16a99001507b917f47ff60240324a405314adfefc5593b7d176fa48d58917638a0d1f0680dada6dc85d3e53c156fbe3207446ccc5b448321dd0d79cfa6d85fb74deca5a04094d4d8aa46dfed95ee622c82c4047a8f743b4172203ceafcb4a1", 0xc9}], 0x2, &(0x7f0000001480)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hopopts={{0x38, 0x29, 0x36, {0x1d, 0x3, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xe}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hopopts_2292={{0x1128, 0x29, 0x36, {0x60, 0x221, '\x00', [@generic={0x80, 0xe8, "1e024655102bce2e9cba6654783b82e40fe3a250f34ab6148390d6fa9622de5eee3caab6a6fbea4103fd467ea90fef249d74a57895c498681d7b985149302f2e4b706b0df2c11dfd441bd4a4592f2acee1b42cde47ac3b2e5a496ae1b97ba6ee47b483bd733b8ae9316c14ca33f8199f5361a5259d1505291a3c57bf98853e5defd0fac3789ab0877feac9871f00f9958812bfe4f8fb25a10bace797b87b29b0d9bb34240b7a6da1ac5873c550dcebe76be486c229c6a8e6bb452c2777a185a822ae1da95b62d83ab64f117ec1e94a79d36fd5cb439931907d2687739a8b8f4230c457557b6dac3d"}, @generic={0xfd, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0xfffffffe}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x7ff}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x11d8}}], 0x1, 0x20008014) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) socket$nl_crypto(0x10, 0x3, 0x15) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0xb, &(0x7f0000000000)={0x2a, 0x0, 0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r7, 0x0, 0x3, 0x70, &(0x7f0000001400)="21692a8cf76405ef312d036d49f4f7cb244753996088d1e99c1cc6ecdc2dd716256db532b24ac1c13f0e11e942a8189f9ddf58eb6c86c40154d687edc7e9b6aa1108ff12da9515b07bd1a8515170dd6ae2b93e30b7529a8f6cf93b52f1a243c1472f9d7022608819bba36a753aca3396", 0x5}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x3, 0x10}]}) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, 0x0) 192.088812ms ago: executing program 2 (id=45): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) write$bt_hci(r1, 0x0, 0x0) 121.873917ms ago: executing program 0 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)="44639987072f3e78d0086b399a0345a9a3d861", 0x13}, 0x68) r3 = syz_open_dev$evdev(0x0, 0x0, 0x822b01) ioctl$EVIOCGABS0(r3, 0x80184540, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000200)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1901, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000100)={0x301f5, 0x0, &(0x7f0000008000/0x2000)=nil}) 0s ago: executing program 2 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000140)='0x1d6b\n', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x0104\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200\n', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000b40), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0123456789\n', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='HID Gadget\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r5, &(0x7f0000000840), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r6, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029658100c0", 0x3f) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) write$hidraw(r8, &(0x7f0000000c40)="0001", 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:60593' (ED25519) to the list of known hosts. [ 39.091830][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 39.091843][ T43] audit: type=1400 audit(1789871097.899:138): avc: denied { name_bind } for pid=5717 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.126956][ T43] audit: type=1400 audit(1789871097.939:139): avc: denied { execute } for pid=5718 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.127112][ T43] audit: type=1400 audit(1789871097.939:140): avc: denied { execute_no_trans } for pid=5718 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.015775][ T43] audit: type=1400 audit(1789871100.829:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.017723][ T43] audit: type=1400 audit(1789871100.829:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.019730][ T5718] cgroup: Unknown subsys name 'net' [ 42.020963][ T43] audit: type=1400 audit(1789871100.829:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.149947][ T5718] cgroup: Unknown subsys name 'cpuset' [ 42.153754][ T5718] cgroup: Unknown subsys name 'rlimit' [ 42.293596][ T43] audit: type=1400 audit(1789871101.099:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.295680][ T43] audit: type=1400 audit(1789871101.099:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.295709][ T43] audit: type=1400 audit(1789871101.099:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.295734][ T43] audit: type=1400 audit(1789871101.099:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.361759][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.021934][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.673900][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 46.673918][ T43] audit: type=1400 audit(1789871105.479:158): avc: denied { execmem } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.882300][ T43] audit: type=1400 audit(1789871105.689:159): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.883450][ T43] audit: type=1400 audit(1789871105.689:160): avc: denied { read write } for pid=5730 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.884028][ T43] audit: type=1400 audit(1789871105.689:161): avc: denied { open } for pid=5730 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.893094][ T43] audit: type=1400 audit(1789871105.699:162): avc: denied { ioctl } for pid=5730 comm="syz-executor" path="socket:[6997]" dev="sockfs" ino=6997 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.902130][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.904867][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.905247][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.906276][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.906740][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.913752][ T43] audit: type=1400 audit(1789871105.719:163): avc: denied { read } for pid=5730 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.913780][ T43] audit: type=1400 audit(1789871105.719:164): avc: denied { open } for pid=5730 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.915605][ T5731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.915670][ T43] audit: type=1400 audit(1789871105.719:165): avc: denied { mounton } for pid=5730 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.918199][ T5731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.920157][ T5731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.920699][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.921153][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.921466][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.922076][ T43] audit: type=1400 audit(1789871105.729:166): avc: denied { module_request } for pid=5730 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.922172][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.923041][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.925820][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.930525][ T5731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.944459][ T43] audit: type=1400 audit(1789871105.749:167): avc: denied { sys_module } for pid=5730 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.026173][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.027660][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.028086][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.028913][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.029465][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.532167][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.532615][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.532684][ T5730] bridge_slave_0: entered allmulticast mode [ 47.533532][ T5730] bridge_slave_0: entered promiscuous mode [ 47.536831][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.536871][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.537016][ T5730] bridge_slave_1: entered allmulticast mode [ 47.537756][ T5730] bridge_slave_1: entered promiscuous mode [ 47.563911][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.564032][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.564098][ T5734] bridge_slave_0: entered allmulticast mode [ 47.564843][ T5734] bridge_slave_0: entered promiscuous mode [ 47.567601][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.567674][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.568336][ T5734] bridge_slave_1: entered allmulticast mode [ 47.569255][ T5734] bridge_slave_1: entered promiscuous mode [ 47.595133][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.621419][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.621583][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.621718][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.622008][ T5735] bridge_slave_0: entered allmulticast mode [ 47.623396][ T5735] bridge_slave_0: entered promiscuous mode [ 47.650786][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.650830][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.650888][ T5735] bridge_slave_1: entered allmulticast mode [ 47.651595][ T5735] bridge_slave_1: entered promiscuous mode [ 47.664537][ T5730] team0: Port device team_slave_0 added [ 47.666521][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.678706][ T5730] team0: Port device team_slave_1 added [ 47.687249][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.727291][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.728011][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.728024][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.728044][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.732106][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.743447][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.743460][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.743481][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.746229][ T5734] team0: Port device team_slave_0 added [ 47.770328][ T5735] team0: Port device team_slave_0 added [ 47.782602][ T5734] team0: Port device team_slave_1 added [ 47.789777][ T5735] team0: Port device team_slave_1 added [ 47.801499][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.801510][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.801523][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.822614][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.822630][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.822650][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.823754][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.823763][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.823776][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.841915][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.841928][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.841950][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.862480][ T5730] hsr_slave_0: entered promiscuous mode [ 47.863410][ T5730] hsr_slave_1: entered promiscuous mode [ 47.939531][ T5735] hsr_slave_0: entered promiscuous mode [ 47.940024][ T5735] hsr_slave_1: entered promiscuous mode [ 47.940320][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 47.940379][ T5735] Cannot create hsr debugfs directory [ 47.947498][ T5734] hsr_slave_0: entered promiscuous mode [ 47.947937][ T5734] hsr_slave_1: entered promiscuous mode [ 47.948226][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 47.948238][ T5734] Cannot create hsr debugfs directory [ 48.068073][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.068199][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.068491][ T5747] bridge_slave_0: entered allmulticast mode [ 48.069924][ T5747] bridge_slave_0: entered promiscuous mode [ 48.072083][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.072151][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.072242][ T5747] bridge_slave_1: entered allmulticast mode [ 48.073579][ T5747] bridge_slave_1: entered promiscuous mode [ 48.159484][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.183006][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.250549][ T5747] team0: Port device team_slave_0 added [ 48.265272][ T5747] team0: Port device team_slave_1 added [ 48.304016][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.304032][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.304052][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.315234][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.315249][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.315268][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.360906][ T5747] hsr_slave_0: entered promiscuous mode [ 48.361742][ T5747] hsr_slave_1: entered promiscuous mode [ 48.362091][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 48.362101][ T5747] Cannot create hsr debugfs directory [ 48.362335][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.366412][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.385765][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.388402][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.388781][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.391953][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.420474][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.422236][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.508987][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.512462][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.513154][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.516075][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.531405][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.533451][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.540667][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.544456][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.576042][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.578178][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.585290][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.589941][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.590314][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.592328][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.597178][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.601239][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.666941][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.669271][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.673104][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.675425][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.676617][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.680508][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.686291][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.689393][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.693508][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.734789][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.745751][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.760120][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.760237][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.775463][ T809] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.775768][ T809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.781481][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.791551][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.791642][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.802063][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.804705][ T809] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.804753][ T809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.820842][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.845943][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.846024][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.868778][ T809] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.868825][ T809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.880858][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.922864][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.926582][ T5731] Bluetooth: hci0: command tx timeout [ 48.937232][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.937278][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.942806][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.942887][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.006039][ T5731] Bluetooth: hci1: command tx timeout [ 49.006232][ T5731] Bluetooth: hci2: command tx timeout [ 49.086048][ T5090] Bluetooth: hci3: command tx timeout [ 49.170520][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.174285][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.190469][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.219208][ T5730] veth0_vlan: entered promiscuous mode [ 49.224885][ T5730] veth1_vlan: entered promiscuous mode [ 49.237250][ T5734] veth0_vlan: entered promiscuous mode [ 49.251717][ T5734] veth1_vlan: entered promiscuous mode [ 49.262167][ T5735] veth0_vlan: entered promiscuous mode [ 49.271242][ T5730] veth0_macvtap: entered promiscuous mode [ 49.273506][ T5735] veth1_vlan: entered promiscuous mode [ 49.277060][ T5730] veth1_macvtap: entered promiscuous mode [ 49.297113][ T5734] veth0_macvtap: entered promiscuous mode [ 49.304105][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.304364][ T5734] veth1_macvtap: entered promiscuous mode [ 49.310076][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.314308][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.333192][ T5735] veth0_macvtap: entered promiscuous mode [ 49.338462][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.338837][ T5735] veth1_macvtap: entered promiscuous mode [ 49.357203][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.382505][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.396712][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.421373][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.421389][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.459489][ T5747] veth0_vlan: entered promiscuous mode [ 49.478199][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.478217][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.483075][ T5747] veth1_vlan: entered promiscuous mode [ 49.495967][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.497076][ T809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.497093][ T809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.515467][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.515485][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.526412][ T5807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.526438][ T5807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.526455][ T5807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.526473][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.526491][ T5807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.526509][ T5807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.526526][ T5807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.526544][ T5807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.542192][ T5747] veth0_macvtap: entered promiscuous mode [ 49.549979][ T5730] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.553232][ T5747] veth1_macvtap: entered promiscuous mode [ 49.553961][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.553972][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.607198][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.607218][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.610045][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.620427][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.667185][ T5803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.696372][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.696388][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.716987][ T5882] Zero length message leads to an empty skb [ 49.729481][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.729493][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.765796][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.765962][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.766060][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.766078][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.766095][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.766112][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.955842][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.957505][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 50.116014][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 50.116853][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 50.118114][ T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 50.120115][ T10] usb 6-1: config 0 has no interfaces? [ 50.120137][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.121495][ T9] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 50.121507][ T9] usb 7-1: config 0 has no interface number 0 [ 50.121524][ T9] usb 7-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 50.123117][ T9] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 50.123129][ T9] usb 7-1: Product: syz [ 50.123136][ T9] usb 7-1: SerialNumber: syz [ 50.124913][ T10] usb 6-1: config 0 descriptor?? [ 50.167841][ T9] usb 7-1: config 0 descriptor?? [ 50.174296][ T9] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 50.197376][ T5898] bridge0: port 3(syz_tun) entered blocking state [ 50.197423][ T5898] bridge0: port 3(syz_tun) entered disabled state [ 50.197501][ T5898] syz_tun: entered allmulticast mode [ 50.198311][ T5898] syz_tun: entered promiscuous mode [ 50.198651][ T5898] bridge0: port 3(syz_tun) entered blocking state [ 50.198774][ T5898] bridge0: port 3(syz_tun) entered forwarding state [ 50.202796][ T5898] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 50.209219][ T5898] bridge0: port 3(syz_tun) entered disabled state [ 50.216076][ T5898] syz_tun (unregistering): left allmulticast mode [ 50.216090][ T5898] syz_tun (unregistering): left promiscuous mode [ 50.216221][ T5898] bridge0: port 3(syz_tun) entered disabled state [ 50.358442][ T9] usb 6-1: USB disconnect, device number 2 [ 51.005850][ T5090] Bluetooth: hci0: command tx timeout [ 51.086376][ T5090] Bluetooth: hci2: command tx timeout [ 51.087759][ T5090] Bluetooth: hci1: command tx timeout [ 51.162066][ T5905] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 51.175955][ T5731] Bluetooth: hci3: command tx timeout [ 51.530938][ T5908] FAULT_INJECTION: forcing a failure. [ 51.530938][ T5908] name failslab, interval 1, probability 0, space 0, times 1 [ 51.530958][ T5908] CPU: 3 UID: 0 PID: 5908 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(full) [ 51.530970][ T5908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.530977][ T5908] Call Trace: [ 51.530981][ T5908] [ 51.530985][ T5908] dump_stack_lvl+0x100/0x190 [ 51.531006][ T5908] should_fail_ex.cold+0x5/0xa [ 51.531023][ T5908] should_failslab+0xc2/0x120 [ 51.531039][ T5908] __kmalloc_cache_noprof+0x91/0x6d0 [ 51.531056][ T5908] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 51.531068][ T5908] ? blk_alloc_queue_stats+0x3f/0x110 [ 51.531088][ T5908] blk_alloc_queue_stats+0x3f/0x110 [ 51.531105][ T5908] blk_alloc_queue+0xda/0x790 [ 51.531118][ T5908] __blk_alloc_disk+0xa0/0x170 [ 51.531134][ T5908] ? __pfx___blk_alloc_disk+0x10/0x10 [ 51.531149][ T5908] ? __pfx___debug_object_init+0x10/0x10 [ 51.531170][ T5908] ? lockdep_init_map_type+0x5c/0x250 [ 51.531183][ T5908] ? lockdep_init_map_type+0x5c/0x250 [ 51.531198][ T5908] dm_create+0x5e8/0x1530 [ 51.531216][ T5908] dev_create+0x121/0x2a0 [ 51.531226][ T5908] ? __pfx_dev_create+0x10/0x10 [ 51.531240][ T5908] ctl_ioctl+0x4d2/0xcc0 [ 51.531256][ T5908] ? __pfx_dev_create+0x10/0x10 [ 51.531267][ T5908] ? __pfx_ctl_ioctl+0x10/0x10 [ 51.531296][ T5908] ? selinux_file_ioctl+0x13b/0x290 [ 51.531309][ T5908] ? selinux_file_ioctl+0xb6/0x290 [ 51.531322][ T5908] dm_ctl_ioctl+0x22/0x30 [ 51.531338][ T5908] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 51.531354][ T5908] __x64_sys_ioctl+0x18e/0x210 [ 51.531367][ T5908] do_syscall_64+0x123/0x790 [ 51.531384][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.531396][ T5908] RIP: 0033:0x7fd32ed9e159 [ 51.531406][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.531416][ T5908] RSP: 002b:00007fd32fccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.531428][ T5908] RAX: ffffffffffffffda RBX: 00007fd32f025fa0 RCX: 00007fd32ed9e159 [ 51.531435][ T5908] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 51.531441][ T5908] RBP: 00007fd32ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 51.531448][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.531454][ T5908] R13: 00007fd32f026038 R14: 00007fd32f025fa0 R15: 00007ffcfa4b0248 [ 51.531467][ T5908] [ 51.780496][ T43] kauditd_printk_skb: 65 callbacks suppressed [ 51.780509][ T43] audit: type=1400 audit(1789871110.589:233): avc: denied { create } for pid=5910 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.784854][ T43] audit: type=1400 audit(1789871110.589:234): avc: denied { prog_run } for pid=5910 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.787343][ T43] audit: type=1400 audit(1789871110.599:235): avc: denied { setopt } for pid=5910 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.817920][ T5911] TC_ACT_REPEAT abuse ? [ 52.073989][ T43] audit: type=1400 audit(1789871110.879:236): avc: denied { mount } for pid=5915 comm="syz.3.13" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.215597][ T5815] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.386607][ T5815] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 52.388267][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 52.388283][ T5815] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 52.388293][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 52.388310][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.391353][ T5913] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 52.393829][ T5815] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 52.399867][ T5815] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 52.599213][ T5913] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 52.601444][ T42] usb 5-1: USB disconnect, device number 2 [ 52.609928][ T42] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 52.610271][ T42] cyberjack 5-1:1.0: device disconnected [ 52.681498][ T64] usb 7-1: USB disconnect, device number 2 [ 52.682978][ T43] audit: type=1400 audit(1789871111.489:237): avc: denied { mount } for pid=5919 comm="syz.3.14" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 52.684162][ T43] audit: type=1400 audit(1789871111.489:238): avc: denied { search } for pid=5919 comm="syz.3.14" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 52.684319][ T43] audit: type=1400 audit(1789871111.489:239): avc: denied { write } for pid=5919 comm="syz.3.14" name="nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 52.684497][ T43] audit: type=1400 audit(1789871111.489:240): avc: denied { open } for pid=5919 comm="syz.3.14" path="/5/nfsd/nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 52.724984][ T5922] FAULT_INJECTION: forcing a failure. [ 52.724984][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 52.725034][ T5922] CPU: 3 UID: 0 PID: 5922 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 52.725055][ T5922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.725066][ T5922] Call Trace: [ 52.725073][ T5922] [ 52.725081][ T5922] dump_stack_lvl+0x100/0x190 [ 52.725113][ T5922] should_fail_ex.cold+0x5/0xa [ 52.725147][ T5922] should_failslab+0xc2/0x120 [ 52.725173][ T5922] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 52.725197][ T5922] ? sidtab_sid2str_get+0x84/0x670 [ 52.725223][ T5922] ? sidtab_sid2str_get+0x17a/0x670 [ 52.725252][ T5922] kmemdup_noprof+0x29/0x60 [ 52.725296][ T5922] sidtab_sid2str_get+0x17a/0x670 [ 52.725326][ T5922] security_sid_to_context_core+0x373/0x700 [ 52.725355][ T5922] avc_audit_post_callback+0x109/0x910 [ 52.725387][ T5922] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 52.725412][ T5922] ? skb_put+0x138/0x180 [ 52.725442][ T5922] ? audit_log_n_string+0x2a3/0x5a0 [ 52.725467][ T5922] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 52.725491][ T5922] common_lsm_audit+0x23f/0x2b0 [ 52.725515][ T5922] ? __pfx_common_lsm_audit+0x10/0x10 [ 52.725536][ T5922] ? find_held_lock+0x2b/0x80 [ 52.725565][ T5922] ? rcu_is_watching+0x13/0xc0 [ 52.725606][ T5922] slow_avc_audit+0x186/0x210 [ 52.725634][ T5922] ? __pfx_slow_avc_audit+0x10/0x10 [ 52.725670][ T5922] ? find_held_lock+0x2b/0x80 [ 52.725698][ T5922] ? avc_has_extended_perms+0x33a/0x1080 [ 52.725726][ T5922] ? avc_has_extended_perms+0x33a/0x1080 [ 52.725757][ T5922] avc_has_extended_perms+0x9b7/0x1080 [ 52.725793][ T5922] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 52.725824][ T5922] ? kasan_quarantine_put+0x104/0x240 [ 52.725847][ T5922] ? find_held_lock+0x2b/0x80 [ 52.725872][ T5922] ? tomoyo_path_number_perm+0x28f/0x580 [ 52.725898][ T5922] ? tomoyo_path_number_perm+0x188/0x580 [ 52.725922][ T5922] ? __pfx_futex_wait+0x10/0x10 [ 52.725946][ T5922] ? __lock_acquire+0x5c0/0x1f40 [ 52.725970][ T5922] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 52.725997][ T5922] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 52.726023][ T5922] ? __fget_files+0x34/0x3d0 [ 52.726057][ T5922] ? selinux_file_ioctl+0x13b/0x290 [ 52.726077][ T5922] selinux_file_ioctl+0x13b/0x290 [ 52.726102][ T5922] security_file_ioctl+0xfb/0x230 [ 52.726132][ T5922] __x64_sys_ioctl+0xb7/0x210 [ 52.726155][ T5922] do_syscall_64+0x123/0x790 [ 52.726187][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.726208][ T5922] RIP: 0033:0x7f456799e159 [ 52.726226][ T5922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.726243][ T5922] RSP: 002b:00007f45688e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.726263][ T5922] RAX: ffffffffffffffda RBX: 00007f4567c25fa0 RCX: 00007f456799e159 [ 52.726276][ T5922] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 52.726288][ T5922] RBP: 00007f4567a3506b R08: 0000000000000000 R09: 0000000000000000 [ 52.726300][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.726312][ T5922] R13: 00007f4567c26038 R14: 00007f4567c25fa0 R15: 00007fff3afb2c78 [ 52.726337][ T5922] [ 52.731638][ T43] audit: type=1400 audit(1789871111.529:241): avc: denied { ioctl } for pid=5921 comm="syz.2.15" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 ssid=149 tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.739087][ T43] audit: type=1400 audit(1789871111.549:242): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 53.085692][ T5731] Bluetooth: hci0: command tx timeout [ 53.105677][ T64] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 53.105679][ T5815] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.161719][ T5932] FAULT_INJECTION: forcing a failure. [ 53.161719][ T5932] name failslab, interval 1, probability 0, space 0, times 0 [ 53.161740][ T5932] CPU: 2 UID: 0 PID: 5932 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 53.161754][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.161761][ T5932] Call Trace: [ 53.161765][ T5932] [ 53.161770][ T5932] dump_stack_lvl+0x100/0x190 [ 53.161791][ T5932] should_fail_ex.cold+0x5/0xa [ 53.161808][ T5932] should_failslab+0xc2/0x120 [ 53.161825][ T5932] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 53.161839][ T5932] ? __d_alloc+0x35/0xa50 [ 53.161858][ T5932] __d_alloc+0x35/0xa50 [ 53.161874][ T5932] d_alloc_parallel+0x105/0x14c0 [ 53.161888][ T5932] ? lock_acquire+0x1d1/0x380 [ 53.161901][ T5932] ? find_held_lock+0x2b/0x80 [ 53.161916][ T5932] ? __d_lookup+0x25c/0x4a0 [ 53.161927][ T5932] ? __pfx_d_alloc_parallel+0x10/0x10 [ 53.161941][ T5932] ? __d_lookup+0x266/0x4a0 [ 53.161954][ T5932] ? d_lookup+0xe7/0x190 [ 53.161967][ T5932] proc_fill_cache+0x225/0x3a0 [ 53.161983][ T5932] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 53.162000][ T5932] ? __pfx_proc_fill_cache+0x10/0x10 [ 53.162015][ T5932] ? __pfx___up_read+0x10/0x10 [ 53.162029][ T5932] ? proc_map_files_readdir+0x457/0xb10 [ 53.162048][ T5932] proc_map_files_readdir+0x5b5/0xb10 [ 53.162068][ T5932] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 53.162084][ T5932] ? lock_acquire+0x1d1/0x380 [ 53.162101][ T5932] ? down_read_killable+0x35d/0x520 [ 53.162113][ T5932] ? __ww_mutex_lock.constprop.0+0x25b0/0x3f00 [ 53.162139][ T5932] ? avc_policy_seqno+0x9/0x20 [ 53.162155][ T5932] ? selinux_file_permission+0x8f/0x6d0 [ 53.162174][ T5932] iterate_dir+0x296/0xae0 [ 53.162190][ T5932] __x64_sys_getdents64+0x13b/0x2c0 [ 53.162203][ T5932] ? __x64_sys_futex+0x358/0x4d0 [ 53.162220][ T5932] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 53.162234][ T5932] ? __pfx_filldir64+0x10/0x10 [ 53.162252][ T5932] do_syscall_64+0x123/0x790 [ 53.162269][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.162281][ T5932] RIP: 0033:0x7fcb8db9e159 [ 53.162291][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.162301][ T5932] RSP: 002b:00007fcb8e9f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 53.162313][ T5932] RAX: ffffffffffffffda RBX: 00007fcb8de25fa0 RCX: 00007fcb8db9e159 [ 53.162320][ T5932] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000004 [ 53.162327][ T5932] RBP: 00007fcb8dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 53.162333][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.162340][ T5932] R13: 00007fcb8de26038 R14: 00007fcb8de25fa0 R15: 00007ffe522cdf78 [ 53.162353][ T5932] [ 53.165768][ T5731] Bluetooth: hci1: command tx timeout [ 53.165797][ T5731] Bluetooth: hci2: command tx timeout [ 53.207061][ T5934] SELinux: Context system_u:object_r:auditd_ is not valid (left unmapped). [ 53.245841][ T5090] Bluetooth: hci3: command tx timeout [ 53.257776][ T64] usb 7-1: unable to get BOS descriptor or descriptor too short [ 53.257812][ T64] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 53.258995][ T64] usb 7-1: config 8 has an invalid interface number: 109 but max is 0 [ 53.259016][ T64] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 53.259030][ T64] usb 7-1: config 8 has no interface number 0 [ 53.259060][ T64] usb 7-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 53.259085][ T64] usb 7-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 53.259105][ T64] usb 7-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 53.262326][ T64] usb 7-1: string descriptor 0 read error: -22 [ 53.262417][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.269427][ T5927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.271978][ T64] metro_usb 7-1:8.109: Metrologic USB to Serial converter detected [ 53.275284][ T64] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 53.275627][ T5815] usb 8-1: Using ep0 maxpacket: 8 [ 53.276457][ T5815] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 53.277683][ T5815] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 53.277695][ T5815] usb 8-1: config 0 has no interface number 0 [ 53.277713][ T5815] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 53.277732][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.282165][ T5815] usb 8-1: config 0 descriptor?? [ 53.291151][ T5815] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 53.483110][ T64] usb 7-1: USB disconnect, device number 3 [ 53.487062][ T64] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 53.487351][ T64] metro_usb 7-1:8.109: device disconnected [ 53.495255][ T5808] usb 8-1: USB disconnect, device number 2 [ 54.406408][ T1690] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.562051][ T5966] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 54.562051][ T5966] [ 54.562242][ T5966] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 54.563217][ T5966] CIFS: Attempting to mount //127.0.0.1/share [ 54.645051][ T1690] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 54.781179][ T1690] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 54.781196][ T1690] usb 8-1: config 1 has no interface number 0 [ 54.817618][ T1690] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.817634][ T1690] usb 8-1: Product: syz [ 54.817641][ T1690] usb 8-1: Manufacturer: syz [ 54.817649][ T1690] usb 8-1: SerialNumber: syz [ 54.878379][ T5090] Bluetooth: hci0: Malformed LE Event: 0x1b [ 55.166908][ T5090] Bluetooth: hci0: command tx timeout [ 55.245654][ T5090] Bluetooth: hci2: command tx timeout [ 55.245679][ T5090] Bluetooth: hci1: command tx timeout [ 55.315135][ T5966] CIFS: VFS: cifs_mount failed w/return code = -512 [ 55.318233][ T1690] usb 8-1: 3:0 : does not exist [ 55.318245][ T1690] usb 8-1: 3:0 : does not exist [ 55.325636][ T5731] Bluetooth: hci3: command tx timeout [ 55.686682][ T1690] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.689803][ T1690] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 55.725192][ T1690] usb 8-1: USB disconnect, device number 3 [ 55.803913][ T5996] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.914511][ T6000] FAULT_INJECTION: forcing a failure. [ 55.914511][ T6000] name failslab, interval 1, probability 0, space 0, times 0 [ 55.914531][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 55.914543][ T6000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.914550][ T6000] Call Trace: [ 55.914554][ T6000] [ 55.914559][ T6000] dump_stack_lvl+0x100/0x190 [ 55.914587][ T6000] should_fail_ex.cold+0x5/0xa [ 55.914604][ T6000] should_failslab+0xc2/0x120 [ 55.914621][ T6000] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.914634][ T6000] ? lockdep_init_map_type+0x5c/0x250 [ 55.914647][ T6000] ? sk_prot_alloc+0x60/0x2a0 [ 55.914666][ T6000] sk_prot_alloc+0x60/0x2a0 [ 55.914683][ T6000] sk_clone+0x7b/0x16f0 [ 55.914699][ T6000] sctp_clone_sock+0x34/0x1970 [ 55.914712][ T6000] ? security_socket_post_create+0x85/0x270 [ 55.914732][ T6000] ? sock_create_lite+0x48/0x120 [ 55.914749][ T6000] sctp_getsockopt_peeloff_common.constprop.0+0x237/0x640 [ 55.914764][ T6000] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 55.914782][ T6000] sctp_getsockopt+0x2fb2/0x7110 [ 55.914796][ T6000] ? avc_has_perm_noaudit+0x56/0x3b0 [ 55.914812][ T6000] ? find_held_lock+0x2b/0x80 [ 55.914827][ T6000] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 55.914843][ T6000] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 55.914860][ T6000] ? __pfx_sctp_getsockopt+0x10/0x10 [ 55.914899][ T6000] ? __pfx_avc_has_perm+0x10/0x10 [ 55.914918][ T6000] ? lock_acquire+0x1d1/0x380 [ 55.914930][ T6000] ? __might_fault+0xc5/0x140 [ 55.914948][ T6000] ? find_held_lock+0x2b/0x80 [ 55.914964][ T6000] ? __might_fault+0xc5/0x140 [ 55.914980][ T6000] ? __might_fault+0xc5/0x140 [ 55.915002][ T6000] ? _copy_from_user+0x59/0xd0 [ 55.915016][ T6000] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 55.915034][ T6000] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 55.915054][ T6000] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 55.915071][ T6000] do_sock_getsockopt+0x50a/0x6e0 [ 55.915090][ T6000] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 55.915109][ T6000] ? __fget_files+0x34/0x3d0 [ 55.915124][ T6000] ? find_held_lock+0x2b/0x80 [ 55.915143][ T6000] ? __fget_files+0x21f/0x3d0 [ 55.915160][ T6000] __sys_getsockopt+0x148/0x260 [ 55.915177][ T6000] ? __x64_sys_getsockopt+0xbd/0x160 [ 55.915190][ T6000] __x64_sys_getsockopt+0xbd/0x160 [ 55.915203][ T6000] ? do_syscall_64+0xae/0x790 [ 55.915219][ T6000] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.915235][ T6000] do_syscall_64+0x123/0x790 [ 55.915252][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.915264][ T6000] RIP: 0033:0x7fcb8db9e159 [ 55.915274][ T6000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.915285][ T6000] RSP: 002b:00007fcb8e9f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 55.915297][ T6000] RAX: ffffffffffffffda RBX: 00007fcb8de25fa0 RCX: 00007fcb8db9e159 [ 55.915304][ T6000] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 55.915311][ T6000] RBP: 00007fcb8dc3506b R08: 0000200000000040 R09: 0000000000000000 [ 55.915317][ T6000] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 55.915325][ T6000] R13: 00007fcb8de26038 R14: 00007fcb8de25fa0 R15: 00007ffe522cdf78 [ 55.915340][ T6000] [ 56.474390][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.475124][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.502618][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 56.502633][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 56.524242][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.526611][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.645695][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.645721][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.645739][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.645761][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.878255][ T43] kauditd_printk_skb: 772 callbacks suppressed [ 56.878272][ T43] audit: type=1400 audit(1789871115.619:1015): avc: denied { create } for pid=6021 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.878304][ T43] audit: type=1400 audit(1789871115.629:1016): avc: denied { bind } for pid=6021 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.878339][ T43] audit: type=1400 audit(1789871115.629:1017): avc: denied { setopt } for pid=6021 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.878369][ T43] audit: type=1400 audit(1789871115.629:1018): avc: denied { accept } for pid=6021 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.878398][ T43] audit: type=1400 audit(1789871115.629:1019): avc: denied { write } for pid=6021 comm="syz.2.45" path="socket:[10587]" dev="sockfs" ino=10587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.963401][ T43] audit: type=1400 audit(1789871115.769:1020): avc: denied { write } for pid=6025 comm="syz.2.47" name="usb_gadget" dev="configfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.963631][ T43] audit: type=1400 audit(1789871115.769:1021): avc: denied { add_name } for pid=6025 comm="syz.2.47" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.963834][ T43] audit: type=1400 audit(1789871115.769:1022): avc: denied { create } for pid=6025 comm="syz.2.47" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 56.966303][ T43] audit: type=1400 audit(1789871115.779:1023): avc: denied { write } for pid=6025 comm="syz.2.47" name="idProduct" dev="configfs" ino=10600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 56.966482][ T43] audit: type=1400 audit(1789871115.779:1024): avc: denied { open } for pid=6025 comm="syz.2.47" path="/11/config/usb_gadget/g1/idProduct" dev="configfs" ino=10600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 57.255946][ T5834] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 57.335600][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.406019][ T5834] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 57.408215][ T5834] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 57.408229][ T5834] usb 8-1: config 0 has no interface number 0 [ 57.408247][ T5834] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.408259][ T5834] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 57.409426][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 57.409437][ T5834] usb 8-1: Product: syz [ 57.409444][ T5834] usb 8-1: SerialNumber: syz [ 57.414190][ T5834] usb 8-1: config 0 descriptor?? [ 57.414875][ T6022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 57.443099][ T5834] cm109 8-1:0.8: invalid payload size 64, expected 4 [ 57.445307][ T5834] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input5 [ 57.495851][ T10] usb 5-1: New USB device found, idVendor=0000, idProduct=0104, bcdDevice= 7.03 [ 57.496399][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.497350][ T10] usb 5-1: Dual-Role OTG device on HNP port [ 57.497866][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.497877][ T10] usb 5-1: Product: HID Gadget [ 57.497884][ T10] usb 5-1: SerialNumber: 0123456789 [ 57.502516][ C0] ------------[ cut here ]------------ [ 57.502524][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 57.502533][ C0] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#0: swapper/0/0 [ 57.521832][ C0] Modules linked in: [ 57.523071][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 57.525626][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.528547][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 57.530143][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ca 2c 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 12 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 05 da 8c [ 57.535982][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010046 [ 57.537766][ C0] RAX: dffffc0000000000 RBX: ffff88801dad00e0 RCX: ffffffff8cda4960 [ 57.540087][ C0] RDX: 0000000000000081 RSI: ffffffff8cda12c0 RDI: ffffffff9152a3c0 [ 57.542394][ C0] RBP: 0000000000000081 R08: ffffffff8cda05a0 R09: 0000000000000000 [ 57.544719][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8cda05a0 [ 57.547044][ C0] R13: 0000000000000000 R14: ffff88801dad00e0 R15: ffff8880650adc18 [ 57.549405][ C0] FS: 0000000000000000(0000) GS:ffff8880d5b56000(0000) knlGS:0000000000000000 [ 57.552018][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.553957][ C0] CR2: 00007f8cd37eb840 CR3: 000000005fe38000 CR4: 0000000000352ef0 [ 57.556327][ C0] Call Trace: [ 57.557540][ C0] [ 57.558407][ C0] hidg_set_alt+0x190/0xa10 [ 57.559744][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 57.561309][ C0] ? rcu_is_watching+0x13/0xc0 [ 57.562762][ C0] composite_setup+0x2ccf/0x9290 [ 57.564220][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 57.565717][ C0] ? __pfx_composite_setup+0x10/0x10 [ 57.567315][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.568902][ C0] ? do_raw_spin_lock+0x128/0x260 [ 57.570388][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.571978][ C0] ? configfs_composite_setup+0xfb/0x130 [ 57.573642][ C0] configfs_composite_setup+0xfb/0x130 [ 57.575249][ C0] dummy_timer+0x2039/0x3700 [ 57.576637][ C0] ? __trace_array_vprintk+0x310/0x470 [ 57.579021][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 57.580754][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 57.582853][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 57.584359][ C0] ? rcu_is_watching+0x13/0xc0 [ 57.585809][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.587561][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 57.589028][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 57.590584][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 57.592118][ C0] handle_softirqs+0x1e6/0x9d0 [ 57.593541][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 57.595113][ C0] ? _raw_spin_unlock+0x28/0x50 [ 57.596576][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 57.598341][ C0] __irq_exit_rcu+0x16a/0x210 [ 57.599765][ C0] irq_exit_rcu+0x9/0x30 [ 57.601055][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 57.602716][ C0] [ 57.603626][ C0] [ 57.604522][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.606377][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 57.608340][ C0] Code: 48 94 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 57 1a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 57.613949][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000202 [ 57.615725][ C0] RAX: 00000000000cd807 RBX: ffffffff8ea91580 RCX: ffffffff8bd16185 [ 57.618055][ C0] RDX: 0000000000000001 RSI: ffffffff8e38c98a RDI: ffffffff8c623580 [ 57.620403][ C0] RBP: fffffbfff1d522b0 R08: 0000000000000001 R09: ffffed100d4867bd [ 57.622760][ C0] R10: ffff88806a433deb R11: 0000000000000001 R12: 0000000000000000 [ 57.625114][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 57.627433][ C0] ? ct_kernel_exit+0x125/0x180 [ 57.628927][ C0] default_idle+0x9/0x10 [ 57.630218][ C0] default_idle_call+0x6c/0xb0 [ 57.631661][ C0] do_idle+0x3ae/0x5b0 [ 57.632879][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 57.634643][ C0] ? __pfx_do_idle+0x10/0x10 [ 57.636234][ C0] ? do_idle+0x10/0x5b0 [ 57.637519][ C0] cpu_startup_entry+0x4f/0x60 [ 57.638980][ C0] rest_init+0x2d3/0x2e0 [ 57.640222][ C0] ? __pfx_rest_init+0x10/0x10 [ 57.641680][ C0] ? __pfx_kernel_init+0x10/0x10 [ 57.643138][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 57.644719][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 57.646279][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 57.647949][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 57.649608][ C0] start_kernel+0x48e/0x490 [ 57.651134][ C0] x86_64_start_reservations+0x24/0x30 [ 57.652991][ C0] x86_64_start_kernel+0x12b/0x130 [ 57.654519][ C0] common_startup_64+0x13e/0x158 [ 57.656045][ C0] [ 57.657015][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.659202][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 57.661824][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.665060][ C0] Call Trace: [ 57.666053][ C0] [ 57.666938][ C0] dump_stack_lvl+0x100/0x190 [ 57.668358][ C0] vpanic+0x553/0x970 [ 57.669585][ C0] ? __pfx_vpanic+0x10/0x10 [ 57.670973][ C0] panic+0xd1/0xe0 [ 57.672108][ C0] ? __pfx_panic+0x10/0x10 [ 57.673476][ C0] check_panic_on_warn.cold+0x19/0x34 [ 57.675077][ C0] ? usb_ep_enable+0x3e6/0x490 [ 57.676536][ C0] __warn.cold+0x191/0x318 [ 57.677909][ C0] __report_bug+0x30f/0x440 [ 57.679327][ C0] ? usb_ep_enable+0x3e6/0x490 [ 57.680775][ C0] ? __pfx___report_bug+0x10/0x10 [ 57.682295][ C0] ? try_to_wake_up+0x158/0x1c90 [ 57.683798][ C0] report_bug_entry+0xe2/0x290 [ 57.685260][ C0] ? usb_ep_enable+0x3f8/0x490 [ 57.686730][ C0] handle_bug+0x1cd/0x2a0 [ 57.688041][ C0] exc_invalid_op+0x17/0x50 [ 57.689430][ C0] asm_exc_invalid_op+0x1a/0x20 [ 57.691263][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 57.693388][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ca 2c 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 12 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 05 da 8c [ 57.699139][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010046 [ 57.700945][ C0] RAX: dffffc0000000000 RBX: ffff88801dad00e0 RCX: ffffffff8cda4960 [ 57.703288][ C0] RDX: 0000000000000081 RSI: ffffffff8cda12c0 RDI: ffffffff9152a3c0 [ 57.705627][ C0] RBP: 0000000000000081 R08: ffffffff8cda05a0 R09: 0000000000000000 [ 57.707982][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8cda05a0 [ 57.710334][ C0] R13: 0000000000000000 R14: ffff88801dad00e0 R15: ffff8880650adc18 [ 57.712661][ C0] hidg_set_alt+0x190/0xa10 [ 57.714029][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 57.715818][ C0] ? rcu_is_watching+0x13/0xc0 [ 57.717394][ C0] composite_setup+0x2ccf/0x9290 [ 57.718863][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 57.720290][ C0] ? __pfx_composite_setup+0x10/0x10 [ 57.721859][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.723651][ C0] ? do_raw_spin_lock+0x128/0x260 [ 57.725196][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.726832][ C0] ? configfs_composite_setup+0xfb/0x130 [ 57.728527][ C0] configfs_composite_setup+0xfb/0x130 [ 57.730180][ C0] dummy_timer+0x2039/0x3700 [ 57.731584][ C0] ? __trace_array_vprintk+0x310/0x470 [ 57.733197][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 57.734929][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 57.736654][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 57.738165][ C0] ? rcu_is_watching+0x13/0xc0 [ 57.739616][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.741386][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 57.742846][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 57.744392][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 57.745924][ C0] handle_softirqs+0x1e6/0x9d0 [ 57.747364][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 57.748945][ C0] ? _raw_spin_unlock+0x28/0x50 [ 57.750411][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 57.752082][ C0] __irq_exit_rcu+0x16a/0x210 [ 57.754109][ C0] irq_exit_rcu+0x9/0x30 [ 57.755810][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 57.757740][ C0] [ 57.758806][ C0] [ 57.759981][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.762075][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 57.764046][ C0] Code: 48 94 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 57 1a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 57.770742][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000202 [ 57.772833][ C0] RAX: 00000000000cd807 RBX: ffffffff8ea91580 RCX: ffffffff8bd16185 [ 57.775566][ C0] RDX: 0000000000000001 RSI: ffffffff8e38c98a RDI: ffffffff8c623580 [ 57.778554][ C0] RBP: fffffbfff1d522b0 R08: 0000000000000001 R09: ffffed100d4867bd [ 57.781220][ C0] R10: ffff88806a433deb R11: 0000000000000001 R12: 0000000000000000 [ 57.783957][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 57.787334][ C0] ? ct_kernel_exit+0x125/0x180 [ 57.788853][ C0] default_idle+0x9/0x10 [ 57.790536][ C0] default_idle_call+0x6c/0xb0 [ 57.792167][ C0] do_idle+0x3ae/0x5b0 [ 57.793621][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 57.795919][ C0] ? __pfx_do_idle+0x10/0x10 [ 57.797355][ C0] ? do_idle+0x10/0x5b0 [ 57.799019][ C0] cpu_startup_entry+0x4f/0x60 [ 57.800781][ C0] rest_init+0x2d3/0x2e0 [ 57.802141][ C0] ? __pfx_rest_init+0x10/0x10 [ 57.804018][ C0] ? __pfx_kernel_init+0x10/0x10 [ 57.805840][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 57.807667][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 57.809745][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 57.811504][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 57.813676][ C0] start_kernel+0x48e/0x490 [ 57.815248][ C0] x86_64_start_reservations+0x24/0x30 [ 57.817137][ C0] x86_64_start_kernel+0x12b/0x130 [ 57.819140][ C0] common_startup_64+0x13e/0x158 [ 57.820707][ C0] [ 57.822662][ C0] Kernel Offset: disabled [ 57.824144][ C0] Rebooting in 86400 seconds..