last executing test programs: 5.130185507s ago: executing program 1 (id=293): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 5.130051122s ago: executing program 1 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fe400fa0704"], 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x205f) 4.609407885s ago: executing program 1 (id=298): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_usb_connect$uac3(0x2, 0xba, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x763, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x5, 0xa0, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x1, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x19, 0x401}, [@cluster_info_segment={0x6, 0x20, 0x2150d40ad49340ab, 0xa6, 0xd1}, @processing_unit={0x9, 0x24, 0x9, 0x1, 0x3, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x1, 0xd4, {0xa, 0x25, 0x25, 0x5, 0x19, 0x76}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x100, 0x1, 0xab, "c6a6cb"}, @as_header={0x17, 0x24, 0x1, 0xc, 0xab, 0x7, 0x1, 0xc, 0xf, 0x2, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0xb, {0xa, 0x25, 0x25, 0xa08e, 0x75, 0x800}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x3, 0x8, 0x80, 0xff, 0x4}, 0x48, &(0x7f0000000200)={0x5, 0xf, 0x48, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "63e63e9783ac0787595a384e0ea12b40"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "f379ce65f0d960536146bb3ef28ad7bb"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "c44670d0228dcc9a77175d1d1ad81167"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x9, 0xce}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x380a}}, {0x5a, &(0x7f00000002c0)=@string={0x5a, 0x3, "e34122a1029d10ebd3b08f9e62f29039d9b56bfc34b9189c42976866c082e5f9336c44109c973e56e4b1bfdd2fd8a6d3a887e0e8c8fc6ab6ac874fe5c6099f1df6a215fe6c5df486c99a4ecd1ecd5ac529ee6dbf559a228e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c63}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x90, &(0x7f00000004c0)=@string={0x90, 0x3, "07941a86916480a48f091e41a5ced8ca7c1886636471fd74cc3a73b609f0690f232a490ac95ea454dfda7763b7c1a3730847e4820e13d4e03d42b3f1d4073ff7b76b3abe8b9c1e823652e9d5944ac367342c7002bc6df58719b817c741f9edd9019c745262cd6a6824351251dfa5857a72c4d5f8330e39deb3fb2666b4dbe916e0ae6e379beee276bccbfe385242"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x20, 0x22, 0xba, {0xba, 0x7, "2b8c8e40ed2970cd36c741dac1a41255834205f34872a77b114c3e45c0efa0b08aaa913b50cb581877c1610078635f94710e20ce650947c402d51ead45009dd308c281f81190b834009c39971de9cd83235c14b28af0baac5dc255a5c3bc4a07d4bb8134c7bf936e9a6c60c5c7929630267b911dda0c5075844864da51cbce358978734b73c5ee0033eecd9c960f0196e2c4af53ff398e82e15715732f98b9d142418da0a637b48b0019beed5104619cba321b79f999a2cd"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000000740)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "670504eecae20809edb1d0ba48428cc4"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x62, 0x6, 0xfc, 0x6, 0x5}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x4f, 0x8, "a59d0a43", "f70cfa21"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x60, 0x3, 0x64, 0x9, 0x0, 0x8}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000840)={0x0, 0x14, 0xa2, "afe71eb509cf3d7c99955327209ac01f1f9051561194c0f453086ea179898c9afc796b432af09cb8ecea7446e353617600e2be34ab2f92d886a4a3a69f43a215be9f7ab93bf5df1295dad43f0abd81f51af259d94b5d325ed967e09b8162cad59144231a07d88dc1369acf19cea019205207d795c61c5fc224983a3f70a5bdff97c969d3865b8aa32c697704c5b72f18fab00fce4c6e37e7e36414887cebb6940cf6"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x10, 0x1, [0xf00]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "b8ef"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b40)={0x40, 0x17, 0x6}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "78db"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000c80)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0xc0045b0f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000130009002abd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="06470000ba7e030008000a00", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xc00088d}, 0x24068000) syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x8200) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) 2.349820271s ago: executing program 1 (id=311): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x40080) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001440)={0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, 0x0) 2.349577537s ago: executing program 1 (id=312): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000011000000001c0012000c000100626f6e64"], 0x3c}}, 0x800) r3 = socket(0x1, 0x803, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0xcc, @mcast1, 0xffffffff}, {0xa, 0x4e23, 0x8ae5, @remote, 0x1}, r5, 0x8}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) 2.21001918s ago: executing program 3 (id=314): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x21}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgroups(0x1, &(0x7f0000002b40)=[r0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e"], 0xf0}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000004b40)=[{&(0x7f00000038c0)="f786dc76b5c5d4d54ecb5d3ba8c53283418c497b161f308bb4dc1233d63f1686ea29499c533794807186af1c8e1f09dbde7c11889816330fc68952915efe2e4d872186047baf1abf5572d1ce62e2fe8d9b90ea601ec41e2a547faecb9d9b792f609a5ea91a5808277ac27bcc0420b749d6265bbdf25fa63ddb2f0838ca97a933be7ab81fe7ff6a431984ef1fd79f1a0d6930bdef19d443eece712ebf8c2247a3524ae8f058961516c9a95d4df9f97a84e857509521c854e0d28091460077f08e696421dd1cb78b3987e349939b3a556635a9aaf37bb9663c8a4c570c0b9575bb70f5af40bcf8b16f0df798c05ee95ec124593f3f0782efe6c6ff8b9ac2da2ff718f3120042989863b72411a688f1185a08ebe89416809ea97694db2ce21050fe28cb61da34975a1ba5dbbc55ce36fecd7e0c71792a84d88e5f62e7cdfdd1727c658d633f1e962214c7f70a97a0154283d6287f7a4392c1a8457f126c9d485979be7ac39c6ae8e95eeabe0c661b090bbec58b32fea360a73ace4b62d09a86e12a1c9b8cff160dfa4477dc71a16321c20b00ed3df761d1ca73d07169bd22720afe4298ebe3f289049c1c6960cbe1cbb68a107fac0519309f63428f032009a0a29a3dc374d061bef66536ed4f3c3e9d4d22f75a6543a7960040a996ba9c393c8449ba2fc6f8781a0ccccde91c4b5ae949a107c5b352ee1339d4367c2dd49f3494cc909fa6b4b8af8e4da2ae7bf96d5535ad386964b66fe4388af6e118c19d7e9f174cbde94d92f5ef7d003238856b5183b487596800775c2825cdc03a6962a2d52a48c776839c29df177aff27335fd52870bc5df3fae1c62c985c0ba2297a935c390ab29e353f18671073a3bbba31d0cb9a0608f6d9bc9b749e3afcf1e2a5328ff6e80f27863538e119c07d67f1efa462c0a72d242415491cc0cdca6ed09f926f4a2c86f1b8a67c9020e6a13fcca02100a68e2df90aa710b3591cca35fe665bfb17246f29c65e21571a26bd5b0841c1ea79c19881672f07fcd1943e261ad3e8d10b9db0794c4311d91ac498b6923c544aee7a771fe0ccbb08da3efba8a86ea28d9becf0b60ce80429027e94c926cd19b87c23e035c87d0c9061ce33f57b705de39f115947806dfa1ec06d3f75b4fbf2e5d4c1f7b16507f9317aca573f431ae10cf3a9369925f829cb361c65819953c164f98388077d058c0fa6160699e90d8fcd4063ce5d36927a2ae3bd6db12a1b93ed6524f247b5b5dec1dea44fcf9dcb82cef46667e22a7116b61a7af752bf19a3000d035989520a0ec6407ba74b65c26220c74e0a6d42bb385de4b7d7610ee5e2164573ac01354b6824d6a0f80edd15fa9bbe2151ca64f3916f9d18283051077219c1a3576ecc27065b2665898df68f23ec06144d9897742a4c74ae05df893b96f3d2f9daa8da1e0d85aa8b2e56d90547538d87665b1169d15825449ec68a74252c9d1b98f6cf3c88686c9182b4d3c770b4f54097b096867372c64f1d6f3319be80dbf9779cee166e3ac85728dcaff0803c9f0487ef298013c5ff63e6a39a2c648214b95d89883832fe02b2493a21cde88df499293dc02c94dab15591ff063f423d05a9c784cd1bcb0520c5d52f4ea9baaa3a220e40daaaa55bc111dcd53bee4e36554ece675a879a3c83dbb461b562eece49d579dd267cea25413fa3dbaa3aead2dc2442054e09e7d1baef5a01dca1421b20f812e1414db27898795bb23fade095a1c6172b87ff682faa9a090bd683976802d0cbdda404081f1ca4cd7a7d9af1e393343971aee191ea193e1cd67f1baae02059eb934e57ae2d6b4bcbfaf7fa05eee1ba817102211d2b75ef7a9c2de56f3c510d445f54f194a28e2aec8af694b2ea758ec1ffe09e834506047537431bebc91d8b73c3e0fff089fe610dba18033b6fb6172367bce588ee04fb0b8f123cbaff6f056f69728c62347c967c70083a8665b1d5cff1bbccbcf6a8e54a0d706423e24f5ef047f2c7398b72603a892b408f8e6b31d37447d3dc1f2519501ff01cfb42df8ce7f3608453d058e95d4db576c6e851d1dcf6e3b28b913c47d88de83a072b35ab827897c933cb8e27a1851c6f8fa7401240c7971f0f901ce849f87ec17bd5fb08a9429d9eb682aaa2ecc9247984a46b5b5a1de8b3cb499bc4ef323ddfbab8329ea17b2ce73f76a2f1a02abb6131f053cc5a20deb77c85cd635aa80ff296c40f3384e5659391ba439e20cba49ffe30dfa87c10875b4dba0817b8e21a1980b9ffc22759730aeaf7f40ce4fe73d90fbdc3f8334de2ed859b142cb8e7bf6057c8f61d7234d18e3ead33a2c296033768581a07fc3ea5faf4cec6fe4b4f3879ef7ca5498665782e3e8345c5557e272ee5fedbc6fbde5e610102e39b3cea7aab7c2e92f321fdf45b99db830bbceb4c549f10fb3c16702c93825583a2237e1b9d03bb827b0e9d23788c3de6ce47dfcd2b770dd4fc304f9362ce54906457ef2ed71acaca4e521b723c7ad1a1f9bd85e7ccf7d123ca7004ca37da395e5f03a12c1348cd7ae538809ad3d90c893f9f996d28b197dd74a3f08514b8f966fcf37dccfd7c51e965ae9b6e913014ff28169a55f087378a275f0ce5cdc33b554da9f64f3b080101ab862015907b695ed592357d0bfd14ee3834d63b05f5043611e2631a1db92f17ae8b82a5901af0e6e027afe2c54e3983778e7556eeb9b39dad3fef7b7274ba655f675130399c83f9b38942e4eb63640a67486704fb744587bafd999a13f8028a4e89dbde4fea0063f05555eeb61b3346b55adee37d4a9dd68e9ace2706540e156aa688fc8ec7ffecff132cb9a102b591516dc969e06e352331dbb744f00dc66bc5442317cdee40b4cbee8230bd6585fc9ec39aee4e5ba0eaf218ada1e30fd75e0bbdd1881d083223bbacb817f3fc999e57db1c322564155362cd88d47553e74260ed3bb9b9df4721078210ed5ca5bd64292d45bb7d214dfd4821945bd1c68240346afcaa9b506edd4116ce70d3e0745c5bc96fd3e1d9162e4d08cf1437c42fb28fb461bd7b7b98f6d73c9dc54c0e0dfc71cf6a3a2116e854418837a178895d6c085df308e7a9fc51be79e48f79a35462e170efac7df3a49bb196a35b64a4622732c1bc72eff269516cb97072a9d1bbfbbe9c6cc963eaff2d1bd815b5457e1150b8ea2c6c212b7d4098249e06905e6f1612a94b82f15d8efd384f4ca5a81ea8fe18b6e5f8a863b4fa79b003e629efe98c67a4a28419cfd1dbf0b5682eacecf7781d9cb7f6882adeaba7dd650241f30b14747bea640b738bd5473ac8561bae7e15adf4ff94bf634be39a419ab44b8228e373b0809d870e6fab78f6b0e707266f0bb6449f82354ec346bbcd096153a2e94cb138343484d5aecde1e342e2b8a15a5995dc6342aced6256cde776f7c6cfa2a3558039757675e195e954089b429ef773aa0d3dfb6b3615116adbde2829b01485cc1442c1cc23fe49fbb5c81f977ba4ffe801857f27e6527a2de613af5879939a5b08fcc168f3297a33cfd48d2cd9e86a864141fce454d1df55cbbada037e0189df2d401a25d5c92a8088a0107a4ac3ce7e63d9851e745741877a3337080d290f467fbae16deeeb6ff7124a16de2c7a37164283f26e1933c23145a31e49e032add3fc7f354026016d4676056b56500975bafc77792c0a5f8ae873f46a58d140cf82775edf02f4867dbf52868bc111eded2796c74e8cc8c23b99fa266e4d8c230ecf5033eeded538b65f696fec712b01f50a83c1523cb7f96a799afb35de523fb235b20f89a6c241c52456bbeb4aad1202909039f254bd96e817fa416540ff0221a0f0c8bb1db9335e33ff37afeeabf048efc9bede113a004060ca269c000cd800c857d566583e149f83fdfb4b74872b224ebdc5783c00e900b6d195209c39d55a39f17c6313cca812688c6c326361eb09e6d33628c3222787a364181ab4cfada53e6d0f5679c31008d72bd698dc6a355bd002f2aad4d73f57286784f4e79a2738d4820ce6dc6e474e9a46fbe99d5a31eb98ff68a160bd669a92e47c96c9c5671b1f067f69d6ba0898da34189d8800cf588668700743b6efff2dc338af7aab9d5592ca1ae11d5ea4b3f00228d35b450541aa8746bb18bc81e093c46bb1df7c407570f5e8cdc5c78c40a442f017e45d67eda63446ceecf2a6dc06bf0a066d739185b3112ec100c4690fdfc8e2498cb00bb8664072fe09e0ffef2c3c618b52d8f8a28124fd43b4c007e124a3acde3d5a656edc2b9a8254bb95e287f9f4c21a162b81a387323ced1e96d354bf6dd7be93ad806877ece89928de13ed46b595e277e6b71e2994034bc26b233d6c84b09558ce96a7c4ec363dcb3e3defebda2f116f059163cdc45a9dfd517327fcf5b1cdd004ae7a167ff03aae4e9c195420ff679fe41018d8198e772ae8e72232f5f7e08d93e57ef98b9ddd2dfc8f130d6c21aab11016d8414adef52e26e71278d917dcf4e3b49815bc89fb5120d5f9942172b48df3d83d29bc87e1192ac8569930c101e9f1fb72e86e15d7255275b498ac48e8252ce965051448c3736f652e8d4acc185b60b81b7b5fbb8ac3ff030906372fd5afbeda09992f50d442965f589b29d2b653ce032543763afaad2a817b1fd88b307d0c9b20ebb441449680b93942e43f702d19bb12dd7a87fa8306adce9624add7c0b44d70303209a1cd86111225f6a441d3c0d681dc07a53e4b02cced630984bc6d5996ee7d2b4574526bc23aeb364eb63c92534e2945015b87fe0844bc1d91eaa32a3e9ff77992bce3c1b6298687846052a9cae34f00ddb09eb28c4b3b4caac68e33d1528d500561ed36d4bbe9a5498ce00ce019caeb1eb535854e4f966cc1b1042db736a4fc99f7429fbb1cf47dbecce5788bd8a6cb1d4448b3bdadd32ff98768041101f15145d0e0bd2caacd353449b87eb252d60c57ffb2739d29673dc577b6b0f383365c7d192e77f00532da9275dbf068615055480d55232a24c44d084ef7c83ef80e103b0187eecfc46b37bde8986bb3cf66baa133ea728779434952b201b2cccd419e7b4c6392e676b1dfb15ee2791b8ee22f3ceaa0bcb24d74b0487d3a7541fa7e20bc65452d266f9a4146df22db35c288ff7f010935f2bb2fad5165e1be35db8165321ff15b53c7b194db25982392b68bdf12bb9af6affdde1c69fb470ac7f377524c9f1cc2eff9d0ebe2039424da963fc38ed0a02b25bf9518b6b8917170aedd24881c06a8ad4b44473a91b6b2a8cdb694364846dfb90f3df3e55eb1f69163f13442472d30d6f0a2ca10871a4e820a8d8f2f73cc70d13a16eee0e559cf57f39cb4018525998515027e19ba5a6a480940c057ce3904708427a58e1f68b42e921ed73762381d79c354854ef240f23a276623e86154fca26870b420e21482d0b8e4ae7d15a350a115c40f61ad13bace472cfc293e4b669cecade0b5601dbd82b4bd33037f8000144e7646669b4b3d9b8571b81a6990c7a946472672c4ebbdfb2077c9431582c36e35a06e1d7f7e9dd013560860b6269f2aeaec5f6b9cdae593c3e99580df42ac09d4f3835e3cbc1e8ba4fb1d9197a1e8af520254a74f5c2b1257c18538e13c626610f6e4cff34be5c09af4de80101b0eed6969d632debcf4519f4749511a09fc084096c15438077bd9e064cfe5e1f9ba7b113d4d919ebbeca0105b92f11da9a02bbbdf5f7ac0f23ae821debb69360b74e91c82c42f1de812a1ed05dab89a6ef4216502e6727398f38cd45d3b1c8016f5ca4cf24e0cb7f652f42c78acf3c81f81a6709ea5fdd861c7d4", 0x1000}, {&(0x7f00000048c0)="ae3088417908528987175e063d05a4aa1558b53b6ccfc73f559151851ed30a054058a2ab24d89b7f955e648936aa95adbaa1575f8b157d050e0b2f", 0x3b}, {&(0x7f0000004900)="db18fd2d880a3cb27ef3211f324b6a11b2d154c3490c15dbc99dbe4e16f57476f2267f219cf5fa7d843b0098b2fd190ac4b782d7c5c8574a944933c92a91ee9b57418642162e1e96be4749b1b181c0410027fe716c6ed69ffe45fcca014eabdd7e", 0x61}, {&(0x7f0000004980)="10b8f9e75d00bd9c42ce6f5133b06e01a3e8b34cfd1f5026c29682e0d4e9639149cf60c1d396180c3263e8c64667d870dfb8c02e64bd55e5d090e058813c22fe7928045e59e744236a29577e09a0834ab0ece66d1702d62705795c81bba81fc038f0bbbd5e7f8b57a7b8ba715bc6c1d4ca0e567c876b44e282a70f7dc5fb784f5d26c09374555fbe457f183caa416778761c6e785eea72d6509fb09dcd7e0e0e9efac8fcc99de8238d00577010582ea17e291f00c2e0a034d90092970edb10a02ae6f9c3bc7ffedb0b98aa31a9f5a50021b04471c4ebd74bd64e838ac3de21139e6e0e9f70070d1f8726b265", 0xec}, {&(0x7f0000004a80)="08058563be04dbc7c84f8294174a60de24109658c2ff6ae1d6b095129473ff394798198ced6abb3d79bace736b6ec44810e9533bb5a0a56fac52d5ee44650cca9ff4afdf56a5a38963f1f2fddca5c677f37fcc222904", 0x56}, {&(0x7f0000004b00)="da213027a1d2562bfa82699b20ad1f4b9e", 0x11}], 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5b}, 0x1, 0x0, 0x0, 0x800}, 0x2000c804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003880), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 1.9199701s ago: executing program 1 (id=318): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 1.919523329s ago: executing program 2 (id=319): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000440)={0x27, 0x0, 0x20, 0x3, 0x4, 0x2, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x2b}, 0x60) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/xfrm_stat\x00') close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000100)) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f0000000340)=0x20, 0x80000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffed3, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r3], 0x7e}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0x0, 0x1f8, 0x6, 0xffffffffefffff15, 0x3, 0x4, 0x2, 0x5]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xb, &(0x7f00000004c0), &(0x7f0000001540)=0x4) r10 = openat(r3, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x3, 0xdd) write(r10, &(0x7f0000000180)="338707a5a70e99bd177595d6680b783eebcc10988a6d60e624f48199b34c642ad5f5bee07e40f3cd21f5fa855ea96d4e6528443dad", 0x35) 1.809991809s ago: executing program 2 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x9, 0x5, 0x2c, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x8000, 0x80, 0x6}}) setns(0xc9, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newnexthop={0x28, 0x68, 0x10, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x3, 0x0, 0x1}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004002}, 0xc008000) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x48, 0x48, 0x400, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x38, 0x0, r1, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x27d29c3512042600}, 0x8810) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x3, &(0x7f0000000380)="e742a933f37ff726a51f1fb1010f93e96a837b8e11d417e6e3310bf49eea1fce838e98f50839bb743e63989194db03e84f2142edad4ac17451f607214b1f357bba9e2928cad039eb1deebd41e71d789bc1bac9e1f17d276ddd7fc1c9685ecee004c924c7df313107c7a2143cb413c0ecbbfe35daa22587eabc97d6548ba84ac5332650ca66edf4453b227ca7ff03de968b419779071b9fb5e2418fe35d3100149b") r7 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002500)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002540)={0x10000100, &(0x7f00000001c0), &(0x7f0000000380), &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/9, 0x9, &(0x7f0000000440)=""/62, &(0x7f00000024c0)=[r6, r7, r8], 0x3, {r9}}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.59115187s ago: executing program 2 (id=324): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.590723654s ago: executing program 2 (id=325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r2, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x40000000}) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f00000001c0)={r3, r4, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r6, 0x0, 0x9, 0x10, 0x80, 0xfffffff9, {0x4, 0x3, 0x0, 0x800, 0x1000, 0xf1af, 0x0, 0xffff, 0x4d, 0x89, 0x6, 0x400, 0x6, 0xe, "4a370679b67f08004e4ee7795bc54006545bbd8b738e9c39578765df6d00"}}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001800010025bd0967b859f8a9de7000fcdbdf250000000000aa201595fa5d106347a2d3e18b1e600100000000000000000000000000024e2200004e2200090a0020055e00"/84, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d36c000000ff010000000000000000000000000001c0ab0000000000000200000000000000080000000000000000000000000000000200000000000000453d000000000000ffff000000000000a00b000000000000180d00000000000008000000000000000600000000000000090000000000000064080000480f00000100000026bd70000535000002000506100000000000000003000000000000000c0015005607350040000000"], 0x104}}, 0x0) r7 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x13, 0x1, 0x0, "268100ba7af98100000000f8f6ed0c65599e2603a6a7030000000000950200"}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x200000000) syz_usb_connect(0x5, 0x942, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x11, 0x2, 0x89, 0x20, 0x13d3, 0xccd, 0x37f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x930, 0x3, 0x5, 0x2, 0x50, 0xe0, "", [{{0x9, 0x4, 0x98, 0x0, 0x6, 0xab, 0x1c, 0x1, 0x9, [], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0xf7, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x89, 0x731a}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xc0, 0x5}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x30, 0x14, 0x8, [@generic={0xaf, 0x22, "cbfe33d7d0869caa986c6ca4d09fcc6ffb94ef296ab30a1d2e650ea47dcc0cea78c51f3a4f6a40fba0cf31eb19e1d1b527ec5e2d59ea7b25f8ece6711eda841b7e422dbb46b3ea3971ff91703029ef01d3c79760ee24cbef666d0d8bc1dc3edf50c6bf01d203af80d61c1bc92674dc4555180c236d79e4cb5b8b7596e576eff5ebef4185023ffc2c0419ade1b6d1d3bca02328f9ce8363549dd31d01ebdbba1c72a58ce8b7a3999bff2a7f8765"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x9, 0xe, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x75, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x43, 0x1}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x4, 0x7, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x83, 0x6, 0x3}}]}}, {{0x9, 0x4, 0xf2, 0x3, 0x10, 0xad, 0xc, 0x6a, 0x9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x6, 0x895, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xc2}]}, @generic={0x14, 0x21, "5cd7b0bb3ec1fa4becba99f5d5e330499ec2"}], [{{0x9, 0x5, 0x9, 0x8, 0x200, 0x2, 0x1, 0xd, [@generic={0x16, 0xe, "f5ccb7fbd0ace481a25fbfe32094755817032758"}, @generic={0xd6, 0xf, "ceb1cc73be7da9602255c19fbdea992b4e0e00ecfe1e43985413ddb869675eecf7b1b0b67e6d0822188922ecf0b20ba7ee63e49f2d2f035a3bc7a6490f1b432326362dfd736782fe63bfe5da16689fb19ade0921143be7d52c308775df9741fec4b464db3155da2e6da1f082ec7b8ad1f1ddb022634b21fbd8171da0f41213b85a39512a8c0815e8cff19a6793879dc452b9bc72e18efc2e49362a52182bfe5df8a65ac5cddc6fc9bbc660cb49fcb9cc5d3d3f346688f12e9b09062326e1f32efe6c7d40fed6f30bf5675361728dc416b0e8fb70"}]}}, {{0x9, 0x5, 0x3, 0x1e, 0x40, 0x1, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x5, 0x1, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0x27, 0x8, [@generic={0xbe, 0x7, "9975c5fc326f2f48e214b590192bf9bcb8c5d41ede46b43d89648a55a7c01dc12ab875db82def0ca4749c6d9da9f1b4b72bee56a7a1da7f0796958ca0b6a4d0bd7c20a5dccc7059cda6f928dbcc260251e66f674478979465b4fa6e5be41861c3c9d11dfa42b79d6c59e133df9a85872e9aa4e3a78018b5b0d8f3c4b8ea9b816804f5c0c2d12798ed3c73f00e73d614298470d2866ca6bedb0c2cdc1e989d2376558f489baa88b909fa2a74e936dcdad06333109050fa1e65aabdc62"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x9, 0x6, 0x2f, [@generic={0x61, 0xf, "6b0847b2571d1fea2972ac32599622bd18c218c2ecf91f595b26fcfd116c0d71459ff7b7b95d51454ce8b14972a287cbdbaf3b26cdf7366868a02e3c6f31430aa5bcef59bccf174a8439da628ce90011cc19bed940e4ce39038206e1090965"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0xf44e}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xe5, 0x3, 0x81, [@generic={0xff, 0x22, "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"}, @generic={0x8f, 0x1, "b159155c485f386beb533ded026d18515c01173a398c825f58b3b68d07e8fe605e738586dc913adca64305a4afcdee4e9d9a734dcabe8e7ea472d3b8f9189f3e89c86f929434fe9dcbf3a950e93de3ba76d9f7a158b375a2e9499beeace8412e599735dc7f22f950184bdef8c41dba0ff3e189e9694e815ab0dba917d165e79330a301bee98ac81a37497263d4"}]}}, {{0x9, 0x5, 0x4, 0x18, 0x200, 0x1, 0xbd, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x81, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2a, 0x400}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x8, 0x9, 0x8}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x0, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x3}, @generic={0x5e, 0x22, "c9e7da5aa75d615468d6cf4fc38c63bc86aa97b8654c009657c2792772c677302108db7bb704bf95d24702f6ebb89d739347f84180f667f5ac033a0f5a0fa483cc6e5990cde1581a41201a1fe8cc41e8417dbea2980a7e3f9a8145be"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x3, 0x2, 0xff}}, {{0x9, 0x5, 0xc, 0x1, 0x0, 0x3, 0x9, 0x1, [@generic={0x49, 0x31, "4ee28e779bdee8c95f655d024124d8e7c2f3bf00cbbd687d7d544ee11ee9182af2974590e769359963860229b9196d5c6ddf250f46896698b247ba785ab028331663c7329e00ff"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0xb, 0x10, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf2, 0x3}, @generic={0xb9, 0xe31cf05face1085f, "89e38e5c33ecb1b8f0a5a72e30271bf7fe8d020b40e5675623b184d362f1d80064f701bd9a3fe3ee25b5c5ef480f7cba82e95404b6f09d61f8a3e32ae2df16a97393f6e7641fc3989a3036df1731f063c90dbd3ff318767f9fde4ded1c65c5911e2c7a6998ec8abee1fd3705bfbecf8efd39f0817bc4a5ef9623d10cd7b472df749f7fd3aad043fcfa9b185ea0e53c74ecadafffbd378e6d43d05c8f085fc02aaea001fa3c3264a0500320d172e41707f9444e033a3297"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x6, 0x1, 0x1}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x7, 0xa2, 0x3, [@generic={0x9, 0xd, "9ac095cd534f4b"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x44c, 0xff, 0xc}}]}}, {{0x9, 0x4, 0xc, 0xf9, 0x9, 0xe0, 0xe4, 0xbf, 0x4, [@uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x6, 0x9, "ee"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7, 0x3, "", '<'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x5, 0x50, "39f0ba"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x8, 0x7, 0x0, 0x9}]}], [{{0x9, 0x5, 0x1, 0x1, 0x8, 0x2, 0x4, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xe, 0x28, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1}, @generic={0x74, 0xa, "75fd4798f70d69b9c4f3f5722d6a13d0fb0cca30e5f11447be6a5d379fac8161ba07a60d589376c49322b33886051049ae67ce12493668810ff1051dca5666efee02cd23362d77251f0c89fd3f2ef6d4592721999c3feec55a8d399db1e8e09cccfb4e0bf5b3747b7ffd2c101ccebc02a034"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x1, 0xd3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x38, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xf9, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x5}, @generic={0xc6, 0xf, "8fc46a7ce5af686bf20ac1165e3ddcabbd66bdb5d062829d8a1431d9951a2344dfb5501a265ba176b009dd7b8cb62ef5719a0c3ce01d52a0a505ca5c8a9bb23023de13bc81d891530a5b8217e69c1078497220cac7a47bf45b1188cc74cb72c3c9be249afb793200b083d021738295fd3a6c2aad87a9925057cf94b8fcbbca41bfcaf9471e14b85d06fe125f9c0fbee62cac39068d48b7dc50c6109b0b037f25f69407c61c4dbd43e6a75d2b54d92b8097fcb248b33599c68e781412fe452a4de6c7b5d5"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x0, 0x8, 0xfa, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3d}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x29, 0x8}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x8, 0xc, 0x7f}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x4, 0x5}}, {{0x9, 0x5, 0x81, 0x0, 0x8, 0x3, 0x7, 0xa}}, {{0x9, 0x5, 0x7, 0x3, 0x0, 0x81, 0x0, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xa1}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x250, 0x7, 0x4, 0x5, 0xff, 0x1}, 0x5, &(0x7f0000000fc0)={0x5, 0xf, 0x5}, 0x2, [{0x5d, &(0x7f0000001000)=@string={0x5d, 0x3, "af11b052ec0b85da1f6567be2c02aa7ca69cdf662302639406a8c5fd45eec1a7b3dc0d3ee8ef88e5089cbc57d5a1c2fb914dc5eee492269185448cd3ffdb993766a3ce3bd669115d0dea22c2826de37d9eb7e64a09f3d03834e1c5"}}, {0xac, &(0x7f0000001080)=@string={0xac, 0x3, "a557130cb1114667ace3ddaf995e5cf5611ca2ffb8f10cbeeb48676c067b7204429fe63a848b204d564dfc1839725b4aee6ab42a0d680d8c055e71e42014ec49462eb93ca68f78daf978e1812fb2b582869c57a50b04458e61c3d943b8ba0eb0db73a87d5dd2adf4fd6cbf756a3a1e93277f8a145c412668bfd9837185f380cee6c4f207038b1ec429aaac648792ed77cceb4d2544374f4d3b96ad4b4f83ed2f16d63e16eec839b7b7cf"}}]}) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0x604, 0x0) 1.490582416s ago: executing program 0 (id=328): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0008000c000025231eb8a00635f9000040000d000000000000"], 0x0, 0x26}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0xb40, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 968.41342ms ago: executing program 3 (id=329): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff97}, 0xfffffdef}], 0x4000095, 0x0) 600.847367ms ago: executing program 0 (id=330): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast1, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000100)=0xffffffffffffff88) 505.537821ms ago: executing program 0 (id=331): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setregid(0x0, 0xee01) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"5555fcd9d6aa47d2604e8e804a32cc67", 0x0, 0x0, {0x9, 0x2}, {0xb13c}, 0x0, [0xe, 0x2, 0x8, 0x8, 0x0, 0x4, 0x9, 0x80c3, 0x61, 0x917, 0x1, 0x0, 0x4, 0xfffffffffffffff8, 0x7, 0x5]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000880)={{r1}, r2, 0x10, @inherit={0x70, &(0x7f00000001c0)={0x1, 0x5, 0x4, 0x8000000000000000, {0x20, 0x2, 0x8, 0xffffffffffffffff, 0xc}, [0x80000001, 0xed7, 0x8, 0x7ff, 0x100000001]}}, @subvolid=0x5}) (async) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000840)) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000000)={0xf0, 0x3, 0x5b, 0x8000000000000000}) get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000027c0), 0x4) 505.362357ms ago: executing program 0 (id=332): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x69e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfcff}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0xf413, 0x401, 0x7, 0x9, 0x1, 0x9, 0x5, 0x2, 0x8, 0xe2, 0x5, 0x7, 0x2}, {0xc414, 0x6ee4, 0x7f, 0x8, 0x0, 0xf9, 0x0, 0xa, 0x6, 0x8, 0x0, 0x80, 0x2575}, {0x9, 0x9, 0xf7, 0xd, 0x16, 0x0, 0x5, 0x4, 0x6, 0x7, 0x5, 0x2, 0x200}], 0x8}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000200)='./file0/file1\x00') 504.398492ms ago: executing program 3 (id=333): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 389.246728ms ago: executing program 3 (id=334): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0x3e0e, 0x400, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c7, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x20, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107525, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x6, 0xb55, 0x100104, 0x0}}, &(0x7f0000001fc0)) 389.115969ms ago: executing program 3 (id=335): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x4008, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x700}, 0x50) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x631df, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) 340.137664ms ago: executing program 0 (id=336): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000091c3a503010228bd7000fedbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @empty}, 0x2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)='batadv_slave_0\x00', 0x0, 0x56f, 0x100}) r3 = syz_io_uring_setup(0x780, &(0x7f0000000440)={0x0, 0xb9d6, 0x8, 0x1, 0x224, 0x0, r1}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f00000005c0)) r4 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xb9c7, 0x10, 0x3, 0x800000c3, 0x0, r3}, &(0x7f0000000380)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x21, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}], 0x2}, 0x604c, 0x8800}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000400000005000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="020000b901"], 0x48}, 0x1, 0x0, 0x0, 0x8008}, 0x40) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {0xfff3, 0x5}, {0xffe0, 0xe}}}, 0x24}}, 0x800) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r11 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x1612c0) ioctl$VIDIOC_S_PARM(r11, 0xc0cc5616, &(0x7f0000000180)={0x1, @raw_data="1a52e12fa8112c4a6122487f9d0233f2526608cb77b71d3e11bd843bb54fd3db3129d12c83747982e5ecc83adaec3687b00d129e0c4009d463c76d27e6a35ed3e367b2bef9cc4ea6886dc06fb85285e573bdba78fcb2e220239da6b8bf5037b359db06448f000b162e4c50826d332e03caca326bf85a6758614cbf2c45ce5d04b1d7ef5416c8fd105371154ebb295888e3a52795f6e7f0f20cc47b1e38624cbc0d973be394b5ca6627ed02595149a3051a3eea398278de9d55896c51a3dc73224074da34ab936d54"}) 339.749416ms ago: executing program 3 (id=337): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x21}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgroups(0x1, &(0x7f0000002b40)=[r0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e"], 0xf0}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000004b40)=[{&(0x7f00000038c0)="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", 0x1000}, {&(0x7f00000048c0)="ae3088417908528987175e063d05a4aa1558b53b6ccfc73f559151851ed30a054058a2ab24d89b7f955e648936aa95adbaa1575f8b157d050e0b2f", 0x3b}, {&(0x7f0000004900)="db18fd2d880a3cb27ef3211f324b6a11b2d154c3490c15dbc99dbe4e16f57476f2267f219cf5fa7d843b0098b2fd190ac4b782d7c5c8574a944933c92a91ee9b57418642162e1e96be4749b1b181c0410027fe716c6ed69ffe45fcca014eabdd7e", 0x61}, {&(0x7f0000004980)="10b8f9e75d00bd9c42ce6f5133b06e01a3e8b34cfd1f5026c29682e0d4e9639149cf60c1d396180c3263e8c64667d870dfb8c02e64bd55e5d090e058813c22fe7928045e59e744236a29577e09a0834ab0ece66d1702d62705795c81bba81fc038f0bbbd5e7f8b57a7b8ba715bc6c1d4ca0e567c876b44e282a70f7dc5fb784f5d26c09374555fbe457f183caa416778761c6e785eea72d6509fb09dcd7e0e0e9efac8fcc99de8238d00577010582ea17e291f00c2e0a034d90092970edb10a02ae6f9c3bc7ffedb0b98aa31a9f5a50021b04471c4ebd74bd64e838ac3de21139e6e0e9f70070d1f8726b265", 0xec}, {&(0x7f0000004a80)="08058563be04dbc7c84f8294174a60de24109658c2ff6ae1d6b095129473ff394798198ced6abb3d79bace736b6ec44810e9533bb5a0a56fac52d5ee44650cca9ff4afdf56a5a38963f1f2fddca5c677f37fcc222904", 0x56}, {&(0x7f0000004b00)="da213027a1d2562bfa82699b20ad1f4b9e", 0x11}], 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5b}, 0x1, 0x0, 0x0, 0x800}, 0x2000c804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003880), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 220.737055ms ago: executing program 0 (id=338): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0008000c000025231eb8a00635f9000040000d000000000000"], 0x0, 0x26}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0xb40, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 542.107µs ago: executing program 2 (id=339): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) getsockname(r1, 0x0, &(0x7f0000000540)) 0s ago: executing program 2 (id=340): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91101f000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x3f, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)={0x28, r3, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x14014) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0xb8, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x54, 0xac, "8c7f52c95a9ab085e04a8f0712354b77185fef292865bdd1af8c10f51e6ac5815df21733446c134b803348206c0f34a3a1b3d89b7acc66d2d8779ed42cea61da8f9d9db30197212cb6e29f8908d8c0fc"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffffc, 0x4}}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0c0000000a17"], 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) (async) close(0xffffffffffffffff) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91101f000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc}, 0x94) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x3f, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)={0x28, r3, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x14014) (async) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0xb8, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x54, 0xac, "8c7f52c95a9ab085e04a8f0712354b77185fef292865bdd1af8c10f51e6ac5815df21733446c134b803348206c0f34a3a1b3d89b7acc66d2d8779ed42cea61da8f9d9db30197212cb6e29f8908d8c0fc"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffffc, 0x4}}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000) (async) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0c0000000a17"], 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) kernel console output (not intermixed with test programs): issive=1 [ 43.300701][ T5721] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.130516][ T5717] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.433297][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 48.433315][ T43] audit: type=1400 audit(1790446641.770:158): avc: denied { execmem } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.645512][ T43] audit: type=1400 audit(1790446641.990:159): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.654300][ T43] audit: type=1400 audit(1790446641.990:160): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.654330][ T43] audit: type=1400 audit(1790446641.990:161): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.654350][ T43] audit: type=1400 audit(1790446642.000:162): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[3743]" dev="sockfs" ino=3743 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.691607][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.692425][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.693562][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.693577][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.697407][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.697588][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.697741][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.700013][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.701592][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.702621][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.703157][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.703223][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.703301][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.704212][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.704503][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.705487][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.705714][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.706369][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.706676][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.707538][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.712192][ T43] audit: type=1400 audit(1790446642.060:163): avc: denied { read } for pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.712217][ T43] audit: type=1400 audit(1790446642.060:164): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.732549][ T43] audit: type=1400 audit(1790446642.080:165): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.737691][ T43] audit: type=1400 audit(1790446642.090:166): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.756733][ T43] audit: type=1400 audit(1790446642.100:167): avc: denied { sys_module } for pid=5729 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.228960][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.229053][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.229117][ T5736] bridge_slave_0: entered allmulticast mode [ 49.230034][ T5736] bridge_slave_0: entered promiscuous mode [ 49.232724][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.232763][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.232934][ T5736] bridge_slave_1: entered allmulticast mode [ 49.233734][ T5736] bridge_slave_1: entered promiscuous mode [ 49.297934][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.299544][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.340545][ T5736] team0: Port device team_slave_0 added [ 49.354869][ T5736] team0: Port device team_slave_1 added [ 49.432275][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.432293][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.432312][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.446967][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.446982][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.446999][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.550583][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.550659][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.550954][ T5728] bridge_slave_0: entered allmulticast mode [ 49.552139][ T5728] bridge_slave_0: entered promiscuous mode [ 49.565023][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.565104][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.565199][ T5729] bridge_slave_0: entered allmulticast mode [ 49.566815][ T5729] bridge_slave_0: entered promiscuous mode [ 49.584247][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.584325][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.584426][ T5728] bridge_slave_1: entered allmulticast mode [ 49.585778][ T5728] bridge_slave_1: entered promiscuous mode [ 49.592542][ T5736] hsr_slave_0: entered promiscuous mode [ 49.593408][ T5736] hsr_slave_1: entered promiscuous mode [ 49.596271][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.596340][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.596633][ T5729] bridge_slave_1: entered allmulticast mode [ 49.598129][ T5729] bridge_slave_1: entered promiscuous mode [ 49.670744][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.691412][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.693852][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.714834][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.714880][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.714943][ T5734] bridge_slave_0: entered allmulticast mode [ 49.715964][ T5734] bridge_slave_0: entered promiscuous mode [ 49.719132][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.719217][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.719373][ T5734] bridge_slave_1: entered allmulticast mode [ 49.720143][ T5734] bridge_slave_1: entered promiscuous mode [ 49.722462][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.759421][ T5728] team0: Port device team_slave_0 added [ 49.761708][ T5729] team0: Port device team_slave_0 added [ 49.775111][ T5729] team0: Port device team_slave_1 added [ 49.776661][ T5728] team0: Port device team_slave_1 added [ 49.779913][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.812928][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.829789][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.829804][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.829824][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.853149][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.853165][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.853184][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.855277][ T5734] team0: Port device team_slave_0 added [ 49.868126][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.868141][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.868160][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.884130][ T5734] team0: Port device team_slave_1 added [ 49.884639][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.884648][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.884661][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.956724][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.956740][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.956759][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.958809][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.958823][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.958843][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.964399][ T5728] hsr_slave_0: entered promiscuous mode [ 49.965630][ T5728] hsr_slave_1: entered promiscuous mode [ 49.966239][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 49.966304][ T5728] Cannot create hsr debugfs directory [ 49.970968][ T5729] hsr_slave_0: entered promiscuous mode [ 49.971462][ T5729] hsr_slave_1: entered promiscuous mode [ 49.971783][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 49.971794][ T5729] Cannot create hsr debugfs directory [ 50.079760][ T5734] hsr_slave_0: entered promiscuous mode [ 50.080542][ T5734] hsr_slave_1: entered promiscuous mode [ 50.080905][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 50.080917][ T5734] Cannot create hsr debugfs directory [ 50.118087][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.123358][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.148689][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.151802][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.173106][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.177642][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.218764][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.224144][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.381397][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.383741][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.385025][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.388884][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.389526][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.393809][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.394437][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.398326][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.469831][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.474442][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.475113][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.479858][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.494021][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.496811][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.498157][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.502574][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.540346][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.590851][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.594411][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.595021][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.598852][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.601507][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.605520][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.611540][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.613910][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.618590][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.636509][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.636635][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.661346][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.661427][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.668086][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.709934][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.731064][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.731149][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.747926][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.747972][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.768303][ T5090] Bluetooth: hci0: command tx timeout [ 50.771524][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.777254][ T5090] Bluetooth: hci3: command tx timeout [ 50.777463][ T5090] Bluetooth: hci2: command tx timeout [ 50.777526][ T5090] Bluetooth: hci1: command tx timeout [ 50.810783][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.831511][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.831588][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.839095][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.839178][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.854868][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.893083][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.902319][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.902365][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.912395][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.912472][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.968602][ T5734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.073218][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.131474][ T5736] veth0_vlan: entered promiscuous mode [ 51.140278][ T5736] veth1_vlan: entered promiscuous mode [ 51.163288][ T5736] veth0_macvtap: entered promiscuous mode [ 51.166926][ T5736] veth1_macvtap: entered promiscuous mode [ 51.183897][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.194646][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.196258][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.244266][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.303870][ T5729] veth0_vlan: entered promiscuous mode [ 51.314930][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.314944][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.325229][ T5729] veth1_vlan: entered promiscuous mode [ 51.338102][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.362777][ T5728] veth0_vlan: entered promiscuous mode [ 51.364265][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.364283][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.381367][ T5729] veth0_macvtap: entered promiscuous mode [ 51.383183][ T5728] veth1_vlan: entered promiscuous mode [ 51.392274][ T5729] veth1_macvtap: entered promiscuous mode [ 51.412714][ T5736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.416771][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.424069][ T5734] veth0_vlan: entered promiscuous mode [ 51.438575][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.444563][ T5734] veth1_vlan: entered promiscuous mode [ 51.456051][ T5728] veth0_macvtap: entered promiscuous mode [ 51.479423][ T5728] veth1_macvtap: entered promiscuous mode [ 51.520110][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.532654][ T5734] veth0_macvtap: entered promiscuous mode [ 51.533021][ T5881] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 51.541135][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.541147][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.544461][ T5734] veth1_macvtap: entered promiscuous mode [ 51.549370][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.585999][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.586021][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.594276][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.597660][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.624422][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.660725][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.660744][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.687332][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.714924][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.714938][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.739735][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.739749][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.783345][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.783364][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.787433][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787473][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787501][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787529][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787557][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787584][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787611][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787639][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787667][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787695][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787722][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787751][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787779][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787806][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.853643][ T5887] FAULT_INJECTION: forcing a failure. [ 51.853643][ T5887] name failslab, interval 1, probability 0, space 0, times 0 [ 51.853674][ T5887] CPU: 2 UID: 0 PID: 5887 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 51.853696][ T5887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.853707][ T5887] Call Trace: [ 51.853714][ T5887] [ 51.853721][ T5887] dump_stack_lvl+0x100/0x190 [ 51.853755][ T5887] should_fail_ex.cold+0x5/0xa [ 51.853784][ T5887] should_failslab+0xc2/0x120 [ 51.853809][ T5887] kmem_cache_alloc_noprof+0x92/0x6a0 [ 51.853830][ T5887] ? __pfx_map_id_range_down+0x10/0x10 [ 51.853851][ T5887] ? rcu_is_watching+0x13/0xc0 [ 51.853872][ T5887] ? security_inode_alloc+0x3b/0x2c0 [ 51.853894][ T5887] security_inode_alloc+0x3b/0x2c0 [ 51.853923][ T5887] inode_init_always_gfp+0xc6f/0xfb0 [ 51.853953][ T5887] alloc_inode+0x8e/0x250 [ 51.853974][ T5887] sock_alloc+0x44/0x280 [ 51.854001][ T5887] ? security_socket_create+0x7f/0x250 [ 51.854022][ T5887] __sock_create+0xc2/0x860 [ 51.854045][ T5887] __sys_socket+0x14d/0x260 [ 51.854066][ T5887] ? __pfx___sys_socket+0x10/0x10 [ 51.854093][ T5887] __x64_sys_socket+0x72/0xb0 [ 51.854112][ T5887] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.854142][ T5887] do_syscall_64+0x123/0x790 [ 51.854162][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.854184][ T5887] RIP: 0033:0x7f9d8439e159 [ 51.854201][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.854220][ T5887] RSP: 002b:00007f9d85307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 51.854239][ T5887] RAX: ffffffffffffffda RBX: 00007f9d84625fa0 RCX: 0000qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. 7f9d8439e159 [ 51.854252][ T5887] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 51.854263][ T5887] RBP: 00007f9d8443506b R08: 0000000000000000 R09: 0000000000000000 [ 51.854274][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.854285][ T5887] R13: 00007f9d84626038 R14: 00007f9d84625fa0 R15: 00007ffd5556e538 [ 51.854310][ T5887] [ 51.854489][ T5887] socket: no more sockets [ 51.875458][ T5887] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 52.046808][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 52.067763][ T5899] capability: warning: `syz.2.10' uses 32-bit capabilities (legacy support in use) [ 52.439900][ T5916] FAULT_INJECTION: forcing a failure. [ 52.439900][ T5916] name failslab, interval 1, probability 0, space 0, times 0 [ 52.439931][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 52.439954][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.439964][ T5916] Call Trace: [ 52.439970][ T5916] [ 52.439979][ T5916] dump_stack_lvl+0x100/0x190 [ 52.440013][ T5916] should_fail_ex.cold+0x5/0xa [ 52.440049][ T5916] should_failslab+0xc2/0x120 [ 52.440075][ T5916] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 52.440101][ T5916] ? sock_alloc_inode+0x26/0x2c0 [ 52.440131][ T5916] ? __pfx_sock_alloc_inode+0x10/0x10 [ 52.440161][ T5916] sock_alloc_inode+0x26/0x2c0 [ 52.440188][ T5916] ? __pfx_sock_alloc_inode+0x10/0x10 [ 52.440215][ T5916] alloc_inode+0x68/0x250 [ 52.440237][ T5916] sock_alloc+0x44/0x280 [ 52.440262][ T5916] ? security_socket_create+0x7f/0x250 [ 52.440283][ T5916] __sock_create+0xc2/0x860 [ 52.440308][ T5916] __sys_socket+0x14d/0x260 [ 52.440329][ T5916] ? __pfx___sys_socket+0x10/0x10 [ 52.440356][ T5916] __x64_sys_socket+0x72/0xb0 [ 52.440376][ T5916] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.440406][ T5916] do_syscall_64+0x123/0x790 [ 52.440427][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.440445][ T5916] RIP: 0033:0x7fef4919e159 [ 52.440461][ T5916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.440478][ T5916] RSP: 002b:00007fef49fbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 52.440497][ T5916] RAX: ffffffffffffffda RBX: 00007fef49425fa0 RCX: 00007fef4919e159 [ 52.440509][ T5916] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 52.440519][ T5916] RBP: 00007fef4923506b R08: 0000000000000000 R09: 0000000000000000 [ 52.440531][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.440541][ T5916] R13: 00007fef49426038 R14: 00007fef49425fa0 R15: 00007ffe683d76f8 [ 52.440566][ T5916] [ 52.440576][ T5916] socket: no more sockets [ 52.443116][ T5916] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 52.493569][ T5919] sctp: [Deprecated]: syz.0.17 (pid 5919) Use of int in maxseg socket option. [ 52.493569][ T5919] Use struct sctp_assoc_value instead [ 52.619429][ T5925] program syz.2.20 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.848027][ T5740] Bluetooth: hci0: command tx timeout [ 52.848050][ T5740] Bluetooth: hci1: command tx timeout [ 52.848063][ T5740] Bluetooth: hci2: command tx timeout [ 52.848075][ T5740] Bluetooth: hci3: command tx timeout [ 52.959879][ T5935] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.036812][ T5939] FAULT_INJECTION: forcing a failure. [ 53.036812][ T5939] name failslab, interval 1, probability 0, space 0, times 0 [ 53.036907][ T5939] CPU: 3 UID: 0 PID: 5939 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(full) [ 53.036921][ T5939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.036927][ T5939] Call Trace: [ 53.036932][ T5939] [ 53.036937][ T5939] dump_stack_lvl+0x100/0x190 [ 53.036959][ T5939] should_fail_ex.cold+0x5/0xa [ 53.036977][ T5939] should_failslab+0xc2/0x120 [ 53.036993][ T5939] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 53.037008][ T5939] ? sock_alloc_inode+0x26/0x2c0 [ 53.037026][ T5939] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.037054][ T5939] sock_alloc_inode+0x26/0x2c0 [ 53.037074][ T5939] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.037092][ T5939] alloc_inode+0x68/0x250 [ 53.037104][ T5939] sock_alloc+0x44/0x280 [ 53.037120][ T5939] ? security_socket_create+0x7f/0x250 [ 53.037132][ T5939] __sock_create+0xc2/0x860 [ 53.037145][ T5939] __sys_socket+0x14d/0x260 [ 53.037156][ T5939] ? fput+0x7c/0x100 [ 53.037170][ T5939] ? __pfx___sys_socket+0x10/0x10 [ 53.037181][ T5939] ? ksys_write+0x1ac/0x250 [ 53.037192][ T5939] ? __pfx_ksys_write+0x10/0x10 [ 53.037207][ T5939] __x64_sys_socket+0x72/0xb0 [ 53.037218][ T5939] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.037235][ T5939] do_syscall_64+0x123/0x790 [ 53.037247][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.037259][ T5939] RIP: 0033:0x7f30ac79e159 [ 53.037268][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.037279][ T5939] RSP: 002b:00007f30ad6b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 53.037292][ T5939] RAX: ffffffffffffffda RBX: 00007f30aca25fa0 RCX: 00007f30ac79e159 [ 53.037299][ T5939] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 53.037307][ T5939] RBP: 00007f30ac83506b R08: 0000000000000000 R09: 0000000000000000 [ 53.037315][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.037322][ T5939] R13: 00007f30aca26038 R14: 00007f30aca25fa0 R15: 00007ffc9f8f2b78 [ 53.037336][ T5939] [ 53.037809][ T5939] socket: no more sockets [ 53.044031][ T5939] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 53.257218][ T5949] libceph: resolve '4' (ret=-3): failed [ 53.919257][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.919353][ T5941] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.924491][ T5941] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.928487][ T5941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.928646][ T5941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.932612][ T5941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.935959][ T5941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.935990][ T5941] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.940311][ T5941] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.949089][ T5941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.949164][ T5941] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.951632][ T5941] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.026700][ T43] kauditd_printk_skb: 88 callbacks suppressed [ 54.026712][ T43] audit: type=1400 audit(1790446647.370:256): avc: denied { create } for pid=5966 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 54.068346][ T5970] FAULT_INJECTION: forcing a failure. [ 54.068346][ T5970] name failslab, interval 1, probability 0, space 0, times 0 [ 54.068379][ T5970] CPU: 3 UID: 0 PID: 5970 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full) [ 54.068410][ T5970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.068422][ T5970] Call Trace: [ 54.068429][ T5970] [ 54.068438][ T5970] dump_stack_lvl+0x100/0x190 [ 54.068474][ T5970] should_fail_ex.cold+0x5/0xa [ 54.068505][ T5970] should_failslab+0xc2/0x120 [ 54.068533][ T5970] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.068555][ T5970] ? __pfx_map_id_range_down+0x10/0x10 [ 54.068578][ T5970] ? rcu_is_watching+0x13/0xc0 [ 54.068604][ T5970] ? security_inode_alloc+0x3b/0x2c0 [ 54.068628][ T5970] security_inode_alloc+0x3b/0x2c0 [ 54.068650][ T5970] inode_init_always_gfp+0xc6f/0xfb0 [ 54.068681][ T5970] alloc_inode+0x8e/0x250 [ 54.068701][ T5970] sock_alloc+0x44/0x280 [ 54.068726][ T5970] ? security_socket_create+0x7f/0x250 [ 54.068748][ T5970] __sock_create+0xc2/0x860 [ 54.068772][ T5970] __sys_socket+0x14d/0x260 [ 54.068794][ T5970] ? __pfx___sys_socket+0x10/0x10 [ 54.068860][ T5970] __x64_sys_socket+0x72/0xb0 [ 54.068882][ T5970] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.068915][ T5970] do_syscall_64+0x123/0x790 [ 54.068938][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.068958][ T5970] RIP: 0033:0x7fef4919e159 [ 54.068975][ T5970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.068994][ T5970] RSP: 002b:00007fef49fbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 54.069014][ T5970] RAX: ffffffffffffffda RBX: 00007fef49425fa0 RCX: 00007fef4919e159 [ 54.069028][ T5970] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 54.069040][ T5970] RBP: 00007fef4923506b R08: 0000000000000000 R09: 0000000000000000 [ 54.069053][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.069065][ T5970] R13: 00007fef49426038 R14: 00007fef49425fa0 R15: 00007ffe683d76f8 [ 54.069091][ T5970] [ 54.069144][ T5970] socket: no more sockets [ 54.071572][ T5970] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.073996][ T43] audit: type=1400 audit(1790446647.420:257): avc: denied { create } for pid=5966 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.074385][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 54.074452][ T5967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.074460][ T5967] IPv6: NLM_F_CREATE should be set when creating new route [ 54.074480][ T5967] IPv6: NLM_F_CREATE should be set when creating new route [ 54.076163][ T43] audit: type=1400 audit(1790446647.420:258): avc: denied { write } for pid=5966 comm="syz.2.33" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.076511][ T43] audit: type=1400 audit(1790446647.420:259): avc: denied { open } for pid=5966 comm="syz.2.33" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.076998][ T43] audit: type=1400 audit(1790446647.420:260): avc: denied { ioctl } for pid=5966 comm="syz.2.33" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.085770][ T5967] input: syz0 as /devices/virtual/input/input5 [ 54.117690][ T43] audit: type=1400 audit(1790446647.470:261): avc: denied { mmap_zero } for pid=5971 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 54.121307][ T43] audit: type=1400 audit(1790446647.470:262): avc: denied { ioctl } for pid=5971 comm="syz.3.35" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.143254][ T5972] syzkaller0: entered promiscuous mode [ 54.143273][ T5972] syzkaller0: entered allmulticast mode [ 54.145520][ T5972] syz_tun: entered allmulticast mode [ 54.146570][ T43] audit: type=1400 audit(1790446647.490:263): avc: denied { create } for pid=5971 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.147453][ T43] audit: type=1400 audit(1790446647.500:264): avc: denied { setopt } for pid=5971 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.147666][ T43] audit: type=1400 audit(1790446647.500:265): avc: denied { write } for pid=5971 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.168116][ T5971] syz_tun: left allmulticast mode [ 54.228662][ T5981] tipc: Trying to set illegal importance in message [ 54.267153][ T50] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 54.431430][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 54.431474][ T50] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 54.433157][ T50] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 54.433178][ T50] usb 6-1: config 142 has no interface number 0 [ 54.433208][ T50] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 54.433229][ T50] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 54.433247][ T50] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 54.433265][ T50] usb 6-1: config 142 interface 251 has no altsetting 0 [ 54.436007][ T50] usb 6-1: string descriptor 0 read error: -22 [ 54.436108][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.447254][ T5965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.447418][ T5965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.469788][ T50] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 54.478513][ T50] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 54.909599][ C1] usb 6-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 54.909639][ C1] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 54.909922][ C1] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 54.920762][ T6003] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 55.168125][ T5090] Bluetooth: hci0: command 0x0419 tx timeout [ 55.345278][ T6017] binder: 6016:6017 ioctl 4018620d 0 returned -22 [ 55.357595][ T6017] sda1: Can't mount, would change RO state [ 55.386646][ T50] usb 6-1: USB disconnect, device number 2 [ 55.396666][ T50] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 55.397008][ T50] cypress_m8 6-1:142.251: device disconnected [ 55.400997][ T6023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.50'. [ 55.401468][ T6023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.50'. [ 55.413392][ T6021] netlink: 56 bytes leftover after parsing attributes in process `syz.2.48'. [ 55.515019][ T6021] Zero length message leads to an empty skb [ 55.649128][ T6037] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 55.894011][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 55.894032][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 55.924005][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 55.924891][ T6052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=6052 comm=syz.1.61 [ 55.968732][ T5090] Bluetooth: hci2: command 0x0419 tx timeout [ 55.969112][ T5090] Bluetooth: hci1: command 0x0419 tx timeout [ 55.969139][ T5090] Bluetooth: hci3: command 0x0419 tx timeout [ 56.027325][ T6060] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 56.183818][ T6070] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 56.228327][ T6073] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 56.228343][ T6073] CIFS mount error: No usable UNC path provided in device string! [ 56.228343][ T6073] [ 56.228437][ T6073] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 56.235726][ T6073] use of bytesused == 0 is deprecated and will be removed in the future, [ 56.235735][ T6073] use the actual size instead. [ 56.442700][ T6086] ======================================================= [ 56.442700][ T6086] WARNING: The mand mount option has been deprecated and [ 56.442700][ T6086] and is ignored by this kernel. Remove the mand [ 56.442700][ T6086] option from the mount to silence this warning. [ 56.442700][ T6086] ======================================================= [ 56.443424][ T6086] jffs2: notice: (6086) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.983096][ T6089] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.248691][ T5740] Bluetooth: hci0: command 0x0419 tx timeout [ 57.249949][ T6011] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 58.047253][ T5740] Bluetooth: hci3: command 0x0419 tx timeout [ 58.047294][ T5740] Bluetooth: hci2: command 0x0419 tx timeout [ 58.047294][ T5090] Bluetooth: hci1: command 0x0419 tx timeout [ 58.073746][ T6115] xt_l2tp: missing protocol rule (udp|l2tpip) [ 58.109501][ T6118] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.218328][ T6075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.240359][ T43] kauditd_printk_skb: 62 callbacks suppressed [ 59.240378][ T43] audit: type=1400 audit(1790446652.590:328): avc: denied { read write } for pid=5728 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.240419][ T43] audit: type=1400 audit(1790446652.590:329): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.240459][ T43] audit: type=1400 audit(1790446652.590:330): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.254573][ T43] audit: type=1400 audit(1790446652.600:331): avc: denied { create } for pid=6130 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.257287][ T43] audit: type=1400 audit(1790446652.600:332): avc: denied { read } for pid=6130 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.271681][ T43] audit: type=1400 audit(1790446652.620:333): avc: denied { create } for pid=6132 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.271725][ T43] audit: type=1400 audit(1790446652.620:334): avc: denied { setopt } for pid=6132 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.271758][ T43] audit: type=1400 audit(1790446652.620:335): avc: denied { getopt } for pid=6132 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.271789][ T43] audit: type=1400 audit(1790446652.620:336): avc: denied { write } for pid=6132 comm="syz.3.87" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 59.271822][ T43] audit: type=1400 audit(1790446652.620:337): avc: denied { open } for pid=6132 comm="syz.3.87" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 59.300094][ T6137] netlink: 68 bytes leftover after parsing attributes in process `syz.0.89'. [ 59.301251][ T6133] overlayfs: invalid origin (0000) [ 59.327256][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 59.361065][ T6135] afs: Unknown parameter '01777777777777777777777' [ 59.368406][ T6135] syz.1.90 uses obsolete (PF_INET,SOCK_PACKET) [ 59.462847][ T6145] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.494536][ T6147] ip_tables: iptables: counters copy to user failed while replacing table [ 59.502261][ T6149] FAULT_INJECTION: forcing a failure. [ 59.502261][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 59.502281][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.1.94 Not tainted syzkaller #0 PREEMPT(full) [ 59.502293][ T6149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.502300][ T6149] Call Trace: [ 59.502304][ T6149] [ 59.502309][ T6149] dump_stack_lvl+0x100/0x190 [ 59.502335][ T6149] should_fail_ex.cold+0x5/0xa [ 59.502351][ T6149] should_failslab+0xc2/0x120 [ 59.502366][ T6149] __kmalloc_cache_noprof+0x91/0x6d0 [ 59.502383][ T6149] ? sget_fc+0x117/0x1f70 [ 59.502394][ T6149] ? sget_fc+0x1ba/0x1f70 [ 59.502407][ T6149] sget_fc+0x1ba/0x1f70 [ 59.502421][ T6149] ? __pfx_set_anon_super_fc+0x10/0x10 [ 59.502432][ T6149] ? __pfx_sget_fc+0x10/0x10 [ 59.502442][ T6149] ? refcount_dec_not_one+0x136/0x1c0 [ 59.502455][ T6149] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 59.502466][ T6149] ? __kasan_kmalloc+0xaa/0xb0 [ 59.502479][ T6149] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 59.502496][ T6149] ? __kasan_kmalloc+0xaa/0xb0 [ 59.502509][ T6149] ? __pfx_mqueue_fill_super+0x10/0x10 [ 59.502526][ T6149] get_tree_nodev+0x28/0x190 [ 59.502538][ T6149] mqueue_get_tree+0xf1/0x130 [ 59.502554][ T6149] vfs_get_tree+0x92/0x320 [ 59.502571][ T6149] fc_mount_longterm+0x1a/0x270 [ 59.502586][ T6149] mq_init_ns+0x482/0x820 [ 59.502598][ T6149] copy_ipcs+0x3dd/0x7e0 [ 59.502610][ T6149] create_new_namespaces+0x20a/0xac0 [ 59.502624][ T6149] ? security_capable+0x80/0x260 [ 59.502642][ T6149] unshare_nsproxy_namespaces+0xf2/0x220 [ 59.502656][ T6149] ksys_unshare+0x4a2/0xa70 [ 59.502670][ T6149] ? __pfx_ksys_unshare+0x10/0x10 [ 59.502683][ T6149] ? ksys_write+0x1ac/0x250 [ 59.502698][ T6149] __x64_sys_unshare+0x31/0x40 [ 59.502711][ T6149] do_syscall_64+0x123/0x790 [ 59.502722][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.502733][ T6149] RIP: 0033:0x7f30ac79e159 [ 59.502743][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.502753][ T6149] RSP: 002b:00007f30ad6b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 59.502764][ T6149] RAX: ffffffffffffffda RBX: 00007f30aca25fa0 RCX: 00007f30ac79e159 [ 59.502770][ T6149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 59.502777][ T6149] RBP: 00007f30ad6b9090 R08: 0000000000000000 R09: 0000000000000000 [ 59.502783][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.502789][ T6149] R13: 00007f30aca26038 R14: 00007f30aca25fa0 R15: 00007ffc9f8f2b78 [ 59.502802][ T6149] [ 59.526667][ T6152] futex_wake_op: syz.3.95 tries to shift op by 144; fix this program [ 59.526879][ T6152] futex_wake_op: syz.3.95 tries to shift op by 144; fix this program [ 59.626242][ T5735] Bluetooth: hci3: unexpected event for opcode 0x203b [ 59.662980][ T6165] netlink: 'syz.3.99': attribute type 2 has an invalid length. [ 59.662993][ T6165] netlink: 46 bytes leftover after parsing attributes in process `syz.3.99'. [ 59.824570][ T6179] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.885802][ T6186] openvswitch: netlink: IP tunnel dst address not specified [ 59.887519][ C2] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 59.887554][ C2] sr 2:0:0:0: [sr0] tag#23 CDB: Test Unit Ready [ 60.127791][ T5735] Bluetooth: hci1: command 0x0419 tx timeout [ 60.127831][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 60.280513][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.108'. [ 60.286039][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 60.407249][ T3273] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.516837][ T6209] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.566105][ T6217] xt_socket: unknown flags 0x58 [ 60.568387][ T3273] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 60.569243][ T3273] usb 8-1: config 50 has too many interfaces: 128, using maximum allowed: 32 [ 60.569256][ T3273] usb 8-1: config 50 has an invalid descriptor of length 254, skipping remainder of the config [ 60.569265][ T3273] usb 8-1: config 50 has 0 interfaces, different from the descriptor's value: 128 [ 60.569281][ T3273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.645248][ T6224] loop5: detected capacity change from 0 to 7 [ 60.650701][ T6224] loop5: p1 p3 p4 [ 60.650724][ T6224] loop5: partition table partially beyond EOD, truncated [ 60.651422][ T6224] loop5: p1 size 128 extends beyond EOD, truncated [ 60.655273][ T6224] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 60.709506][ T6230] block nbd0: NBD_DISCONNECT [ 60.715479][ T5733] udevd[5733]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 60.722709][ T5748] udevd[5748]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 60.724679][ T5742] udevd[5742]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 60.803443][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.806849][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.810392][ T6196] synth uevent: /bus/acpi: unknown uevent action string [ 60.814610][ T3273] usb 8-1: string descriptor 0 read error: -71 [ 60.820749][ T3273] usb 8-1: USB disconnect, device number 2 [ 60.853584][ T6234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.875209][ T6234] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 60.906497][ T6234] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 60.958234][ T5789] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.068149][ T5789] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.409153][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 61.466341][ T6239] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.829225][ T42] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.979258][ T42] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 61.980514][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.980558][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 61.980594][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 61.980629][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 61.980665][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 61.980689][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 61.980703][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 61.980727][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 61.980740][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 61.980752][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 61.981437][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 61.981489][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 61.981525][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.981537][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.981571][ T42] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 61.985999][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.986009][ T42] usb 8-1: Product: syz [ 61.986016][ T42] usb 8-1: Manufacturer: syz [ 61.986023][ T42] usb 8-1: SerialNumber: syz [ 61.994385][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.994438][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.994536][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.994583][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.994668][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.994717][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.994825][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.994872][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.994963][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.995011][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.995054][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.999758][ T42] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 62.001281][ T42] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 62.004934][ T42] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 62.006496][ T42] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 62.012379][ T42] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 62.042045][ T6251] FAULT_INJECTION: forcing a failure. [ 62.042045][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 62.042072][ T6251] CPU: 0 UID: 0 PID: 6251 Comm: syz.2.127 Not tainted syzkaller #0 PREEMPT(full) [ 62.042086][ T6251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.042093][ T6251] Call Trace: [ 62.042097][ T6251] [ 62.042102][ T6251] dump_stack_lvl+0x100/0x190 [ 62.042138][ T6251] should_fail_ex.cold+0x5/0xa [ 62.042156][ T6251] should_failslab+0xc2/0x120 [ 62.042176][ T6251] __kmalloc_cache_noprof+0x91/0x6d0 [ 62.042195][ T6251] ? kobject_uevent_env+0x263/0x18b0 [ 62.042218][ T6251] kobject_uevent_env+0x263/0x18b0 [ 62.042235][ T6251] ? lockdep_init_map_type+0x5c/0x250 [ 62.042251][ T6251] swnode_register+0x55d/0x750 [ 62.042266][ T6251] fwnode_create_software_node+0x1c8/0x3f0 [ 62.042282][ T6251] device_create_managed_software_node+0x103/0x270 [ 62.042298][ T6251] iommufd_test+0x3007/0x6600 [ 62.042315][ T6251] ? __lock_acquire+0x5c0/0x1f40 [ 62.042328][ T6251] ? __lock_acquire+0x5c0/0x1f40 [ 62.042340][ T6251] ? __pfx_iommufd_test+0x10/0x10 [ 62.042354][ T6251] ? tomoyo_path_number_perm+0x188/0x580 [ 62.042369][ T6251] ? lock_acquire+0x1d1/0x380 [ 62.042380][ T6251] ? __might_fault+0xc5/0x140 [ 62.042398][ T6251] ? find_held_lock+0x2b/0x80 [ 62.042413][ T6251] ? __might_fault+0xc5/0x140 [ 62.042437][ T6251] iommufd_fops_ioctl+0x358/0x520 [ 62.042453][ T6251] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 62.042469][ T6251] ? __fget_files+0x34/0x3d0 [ 62.042489][ T6251] ? selinux_file_ioctl+0x13b/0x290 [ 62.042502][ T6251] ? selinux_file_ioctl+0xb6/0x290 [ 62.042516][ T6251] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 62.042532][ T6251] __x64_sys_ioctl+0x18e/0x210 [ 62.042544][ T6251] do_syscall_64+0x123/0x790 [ 62.042556][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.042568][ T6251] RIP: 0033:0x7f9d8439e159 [ 62.042577][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.042588][ T6251] RSP: 002b:00007f9d852e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.042599][ T6251] RAX: ffffffffffffffda RBX: 00007f9d84626090 RCX: 00007f9d8439e159 [ 62.042606][ T6251] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 62.042613][ T6251] RBP: 00007f9d8443506b R08: 0000000000000000 R09: 0000000000000000 [ 62.042619][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.042626][ T6251] R13: 00007f9d84626128 R14: 00007f9d84626090 R15: 00007ffd5556e538 [ 62.042640][ T6251] [ 62.043163][ T6251] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 62.217911][ T5740] Bluetooth: hci1: command 0x0419 tx timeout [ 62.217910][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 62.222143][ T1040] usb 8-1: USB disconnect, device number 3 [ 62.387452][ T1040] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 62.398052][ T1040] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 62.401991][ T1040] keyspan 8-1:1.0: device disconnected [ 62.725146][ T6255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64559 sclass=netlink_route_socket pid=6255 comm=syz.1.129 [ 62.819322][ T6250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.819620][ T6250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.819836][ T6250] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.820003][ T6250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.880905][ T6264] tipc: Started in network mode [ 62.880917][ T6264] tipc: Node identity 4, cluster identity 4711 [ 62.880923][ T6264] tipc: Node number set to 4 [ 62.885231][ T6264] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 62.885268][ T6264] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.902511][ T6264] vhci_hcd vhci_hcd.0: Device attached [ 62.903317][ T6265] vhci_hcd: cannot find the pending unlink 6 [ 62.911606][ T6265] vhci_hcd: connection closed [ 62.927893][ T5789] vhci_hcd vhci_hcd.2: stop threads [ 62.928573][ T5789] vhci_hcd vhci_hcd.2: release socket [ 62.928594][ T5789] vhci_hcd vhci_hcd.2: disconnect device [ 63.026847][ T6276] FAULT_INJECTION: forcing a failure. [ 63.026847][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 63.026877][ T6276] CPU: 2 UID: 0 PID: 6276 Comm: syz.3.133 Not tainted syzkaller #0 PREEMPT(full) [ 63.026898][ T6276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.026910][ T6276] Call Trace: [ 63.026917][ T6276] [ 63.026925][ T6276] dump_stack_lvl+0x100/0x190 [ 63.026955][ T6276] should_fail_ex.cold+0x5/0xa [ 63.026982][ T6276] should_failslab+0xc2/0x120 [ 63.027007][ T6276] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 63.027030][ T6276] ? __kasan_kmalloc+0xaa/0xb0 [ 63.027068][ T6276] ? property_entries_dup.part.0+0x2e1/0x9f0 [ 63.027100][ T6276] kstrdup+0x51/0xe0 [ 63.027120][ T6276] property_entries_dup.part.0+0x2e1/0x9f0 [ 63.027147][ T6276] ? __pfx_dev_set_name+0x10/0x10 [ 63.027165][ T6276] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.027192][ T6276] fwnode_create_software_node+0xad/0x3f0 [ 63.027215][ T6276] device_create_managed_software_node+0x103/0x270 [ 63.027245][ T6276] iommufd_test+0x3007/0x6600 [ 63.027273][ T6276] ? __lock_acquire+0x5c0/0x1f40 [ 63.027294][ T6276] ? __lock_acquire+0x5c0/0x1f40 [ 63.027314][ T6276] ? __pfx_iommufd_test+0x10/0x10 [ 63.027337][ T6276] ? tomoyo_path_number_perm+0x188/0x580 [ 63.027363][ T6276] ? lock_acquire+0x1d1/0x380 [ 63.027383][ T6276] ? __might_fault+0xc5/0x140 [ 63.027412][ T6276] ? find_held_lock+0x2b/0x80 [ 63.027440][ T6276] ? __might_fault+0xc5/0x140 [ 63.027486][ T6276] iommufd_fops_ioctl+0x358/0x520 [ 63.027517][ T6276] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 63.027543][ T6276] ? __fget_files+0x34/0x3d0 [ 63.027578][ T6276] ? selinux_file_ioctl+0x13b/0x290 [ 63.027600][ T6276] ? selinux_file_ioctl+0xb6/0x290 [ 63.027623][ T6276] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 63.027652][ T6276] __x64_sys_ioctl+0x18e/0x210 [ 63.027677][ T6276] do_syscall_64+0x123/0x790 [ 63.027699][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.027718][ T6276] RIP: 0033:0x7f22c739e159 [ 63.027737][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.027756][ T6276] RSP: 002b:00007f22c8198028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.027777][ T6276] RAX: ffffffffffffffda RBX: 00007f22c7625fa0 RCX: 00007f22c739e159 [ 63.027790][ T6276] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 63.027801][ T6276] RBP: 00007f22c743506b R08: 0000000000000000 R09: 0000000000000000 [ 63.027813][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.027826][ T6276] R13: 00007f22c7626038 R14: 00007f22c7625fa0 R15: 00007ffdd324d958 [ 63.027853][ T6276] [ 63.027999][ T6276] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 63.240686][ T6287] warning: `syz.1.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.260330][ T6287] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.312006][ T5735] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 63.312813][ T6289] Bluetooth: MGMT ver 1.23 [ 63.415736][ T6293] FAULT_INJECTION: forcing a failure. [ 63.415736][ T6293] name failslab, interval 1, probability 0, space 0, times 0 [ 63.415754][ T6293] CPU: 3 UID: 0 PID: 6293 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT(full) [ 63.415767][ T6293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.415774][ T6293] Call Trace: [ 63.415778][ T6293] [ 63.415782][ T6293] dump_stack_lvl+0x100/0x190 [ 63.415812][ T6293] should_fail_ex.cold+0x5/0xa [ 63.415830][ T6293] should_failslab+0xc2/0x120 [ 63.415850][ T6293] __kmalloc_noprof+0xfc/0x840 [ 63.415862][ T6293] ? __pfx_dynamic_dname+0x10/0x10 [ 63.415875][ T6293] ? tomoyo_encode2+0xfb/0x3c0 [ 63.415894][ T6293] tomoyo_encode2+0xfb/0x3c0 [ 63.415911][ T6293] tomoyo_encode+0x29/0x50 [ 63.415925][ T6293] tomoyo_realpath_from_path+0x18c/0x690 [ 63.415944][ T6293] tomoyo_path_number_perm+0x23c/0x580 [ 63.415957][ T6293] ? tomoyo_path_number_perm+0x22e/0x580 [ 63.415970][ T6293] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 63.415984][ T6293] ? __pfx_futex_wait+0x10/0x10 [ 63.415998][ T6293] ? __lock_acquire+0x5c0/0x1f40 [ 63.416017][ T6293] ? __fget_files+0x34/0x3d0 [ 63.416032][ T6293] ? find_held_lock+0x2b/0x80 [ 63.416048][ T6293] ? hook_file_ioctl_common+0x140/0x440 [ 63.416068][ T6293] ? __fget_files+0x21f/0x3d0 [ 63.416085][ T6293] security_file_ioctl+0xd3/0x230 [ 63.416099][ T6293] __x64_sys_ioctl+0xb7/0x210 [ 63.416112][ T6293] do_syscall_64+0x123/0x790 [ 63.416128][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.416140][ T6293] RIP: 0033:0x7fef4919e159 [ 63.416150][ T6293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.416161][ T6293] RSP: 002b:00007fef49fbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.416172][ T6293] RAX: ffffffffffffffda RBX: 00007fef49425fa0 RCX: 00007fef4919e159 [ 63.416180][ T6293] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000004 [ 63.416186][ T6293] RBP: 00007fef4923506b R08: 0000000000000000 R09: 0000000000000000 [ 63.416193][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.416200][ T6293] R13: 00007fef49426038 R14: 00007fef49425fa0 R15: 00007ffe683d76f8 [ 63.416215][ T6293] [ 63.416224][ T6293] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.510396][ T6297] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 63.723341][ T6322] FAULT_INJECTION: forcing a failure. [ 63.723341][ T6322] name failslab, interval 1, probability 0, space 0, times 0 [ 63.723356][ T6322] CPU: 3 UID: 0 PID: 6322 Comm: syz.0.149 Not tainted syzkaller #0 PREEMPT(full) [ 63.723370][ T6322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.723380][ T6322] Call Trace: [ 63.723384][ T6322] [ 63.723389][ T6322] dump_stack_lvl+0x100/0x190 [ 63.723411][ T6322] should_fail_ex.cold+0x5/0xa [ 63.723429][ T6322] should_failslab+0xc2/0x120 [ 63.723446][ T6322] __kmalloc_cache_noprof+0x91/0x6d0 [ 63.723465][ T6322] ? kobject_uevent_env+0x263/0x18b0 [ 63.723484][ T6322] kobject_uevent_env+0x263/0x18b0 [ 63.723501][ T6322] ? rcu_is_watching+0x13/0xc0 [ 63.723519][ T6322] gadget_bind_driver+0x773/0xbf0 [ 63.723542][ T6322] ? urbs_show+0x391/0x440 [ 63.723553][ T6322] ? __pfx_gadget_bind_driver+0x10/0x10 [ 63.723568][ T6322] really_probe+0x241/0xa60 [ 63.723586][ T6322] __driver_probe_device+0x210/0x460 [ 63.723601][ T6322] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.723621][ T6322] driver_probe_device+0x4a/0x140 [ 63.723636][ T6322] __driver_attach+0x21f/0x5b0 [ 63.723652][ T6322] ? __pfx___driver_attach+0x10/0x10 [ 63.723667][ T6322] bus_for_each_dev+0x13e/0x1d0 [ 63.723679][ T6322] ? __pfx_bus_for_each_dev+0x10/0x10 [ 63.723689][ T6322] ? bus_add_driver+0x2b5/0x5b0 [ 63.723705][ T6322] bus_add_driver+0x305/0x5b0 [ 63.723719][ T6322] driver_register+0x1e2/0x360 [ 63.723733][ T6322] ? rcu_is_watching+0x13/0xc0 [ 63.723749][ T6322] usb_gadget_register_driver_owner+0x132/0x210 [ 63.723764][ T6322] raw_ioctl+0x1a85/0x2b80 [ 63.723779][ T6322] ? __pfx_raw_ioctl+0x10/0x10 [ 63.723791][ T6322] ? selinux_file_ioctl+0x13b/0x290 [ 63.723805][ T6322] ? selinux_file_ioctl+0xb6/0x290 [ 63.723820][ T6322] ? __pfx_raw_ioctl+0x10/0x10 [ 63.723832][ T6322] __x64_sys_ioctl+0x18e/0x210 [ 63.723846][ T6322] do_syscall_64+0x123/0x790 [ 63.723857][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.723869][ T6322] RIP: 0033:0x7fef4919ddeb [ 63.723885][ T6322] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 63.723897][ T6322] RSP: 002b:00007fef49fbaf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.723910][ T6322] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fef4919ddeb [ 63.723918][ T6322] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 63.723926][ T6322] RBP: 00007fef49fbbfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 63.723934][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.723941][ T6322] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000000 [ 63.723957][ T6322] [ 63.899636][ T6326] FAULT_INJECTION: forcing a failure. [ 63.899636][ T6326] name failslab, interval 1, probability 0, space 0, times 0 [ 63.899667][ T6326] CPU: 1 UID: 0 PID: 6326 Comm: syz.1.151 Not tainted syzkaller #0 PREEMPT(full) [ 63.899689][ T6326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.899700][ T6326] Call Trace: [ 63.899707][ T6326] [ 63.899714][ T6326] dump_stack_lvl+0x100/0x190 [ 63.899750][ T6326] should_fail_ex.cold+0x5/0xa [ 63.899780][ T6326] should_failslab+0xc2/0x120 [ 63.899808][ T6326] __kmalloc_cache_noprof+0x91/0x6d0 [ 63.899842][ T6326] ? security_load_policy+0x113/0x1080 [ 63.899902][ T6326] security_load_policy+0x113/0x1080 [ 63.899930][ T6326] ? irqentry_exit+0x24d/0xa10 [ 63.899956][ T6326] ? __pfx___mutex_lock+0x10/0x10 [ 63.899981][ T6326] ? __pfx_security_load_policy+0x10/0x10 [ 63.900028][ T6326] sel_write_load+0x28f/0x560 [ 63.900049][ T6326] ? __pfx_sel_write_load+0x10/0x10 [ 63.900076][ T6326] vfs_write+0x2aa/0x1050 [ 63.900097][ T6326] ? __pfx_sel_write_load+0x10/0x10 [ 63.900116][ T6326] ? lock_acquire+0x1d1/0x380 [ 63.900135][ T6326] ? __fget_files+0x34/0x3d0 [ 63.900159][ T6326] ? __pfx_vfs_write+0x10/0x10 [ 63.900176][ T6326] ? find_held_lock+0x2b/0x80 [ 63.900202][ T6326] ? __fget_files+0x215/0x3d0 [ 63.900230][ T6326] ? __fget_files+0x21f/0x3d0 [ 63.900259][ T6326] ksys_write+0x12a/0x250 [ 63.900279][ T6326] ? __pfx_ksys_write+0x10/0x10 [ 63.900306][ T6326] do_syscall_64+0x123/0x790 [ 63.900326][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.900346][ T6326] RIP: 0033:0x7f30ac79e159 [ 63.900362][ T6326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.900379][ T6326] RSP: 002b:00007f30ad6b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.900398][ T6326] RAX: ffffffffffffffda RBX: 00007f30aca25fa0 RCX: 00007f30ac79e159 [ 63.900410][ T6326] RDX: 000000000002fde0 RSI: 0000200000000000 RDI: 0000000000000003 [ 63.900421][ T6326] RBP: 00007f30ad6b9090 R08: 0000000000000000 R09: 0000000000000000 [ 63.900432][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.900442][ T6326] R13: 00007f30aca26038 R14: 00007f30aca25fa0 R15: 00007ffc9f8f2b78 [ 63.900467][ T6326] [ 63.901605][ T6326] SELinux: failed to load policy [ 63.978132][ T6201] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.097226][ T50] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 64.127435][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 64.127718][ T6330] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 64.141282][ T6201] usb 5-1: Using ep0 maxpacket: 32 [ 64.143396][ T6201] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 64.144242][ T6201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.144254][ T6201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.144280][ T6201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.145804][ T6201] usb 5-1: config 0 descriptor?? [ 64.277917][ T50] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 64.279128][ T50] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 64.279149][ T50] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 64.279165][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 64.279255][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.279274][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 64.279296][ T50] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.279341][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.284388][ T50] usb 8-1: config 0 descriptor?? [ 64.285829][ T6324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 64.308384][ T43] kauditd_printk_skb: 58 callbacks suppressed [ 64.308395][ T43] audit: type=1400 audit(1790446657.660:396): avc: denied { mount } for pid=6335 comm="syz.2.155" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 64.501975][ T50] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 64.505988][ T43] audit: type=1400 audit(1790446657.850:397): avc: denied { read write } for pid=6323 comm="syz.3.150" name="lp0" dev="devtmpfs" ino=2874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 64.506033][ T43] audit: type=1400 audit(1790446657.850:398): avc: denied { open } for pid=6323 comm="syz.3.150" path="/dev/usb/lp0" dev="devtmpfs" ino=2874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 64.507032][ C1] usblp0: nonzero read bulk status received: -71 [ 64.507846][ T6324] usblp0: error -71 reading from printer [ 64.508411][ C1] usblp0: nonzero read bulk status received: -71 [ 64.516641][ T42] usb 8-1: USB disconnect, device number 4 [ 64.528650][ T42] usblp0: removed [ 64.556065][ T43] audit: type=1400 audit(1790446657.900:399): avc: denied { create } for pid=6321 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.556930][ T43] audit: type=1400 audit(1790446657.900:400): avc: denied { shutdown } for pid=6321 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.558497][ T43] audit: type=1400 audit(1790446657.910:401): avc: denied { prog_load } for pid=6321 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.560424][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.149'. [ 64.560467][ T6322] net_ratelimit: 111 callbacks suppressed [ 64.560478][ T6322] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 64.570285][ T6201] usbhid 5-1:0.0: can't add hid device: -71 [ 64.570392][ T6201] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 64.576208][ T6201] usb 5-1: USB disconnect, device number 2 [ 64.753773][ T43] audit: type=1400 audit(1790446658.100:402): avc: denied { ioctl } for pid=6340 comm="syz.1.156" path="socket:[13522]" dev="sockfs" ino=13522 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.754536][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 64.773375][ T6341] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 64.774046][ T3273] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 64.781586][ T6341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.844762][ T43] audit: type=1400 audit(1790446658.190:403): avc: denied { map_create } for pid=6340 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.848251][ T5735] Bluetooth: hci3: command 0x0419 tx timeout [ 64.848280][ T5735] Bluetooth: hci1: command 0x0419 tx timeout [ 65.066309][ T6350] random: crng reseeded on system resumption [ 65.066920][ T43] audit: type=1400 audit(1790446658.410:404): avc: denied { write } for pid=6349 comm="syz.3.158" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 65.066960][ T43] audit: type=1400 audit(1790446658.410:405): avc: denied { ioctl } for pid=6349 comm="syz.3.158" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 65.213725][ T5740] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7 [ 65.214312][ T5740] Bluetooth: hci1: unexpected event for opcode 0x042d [ 65.617354][ T3273] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.748439][ T6369] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.758400][ T3273] usb 7-1: device descriptor read/64, error -71 [ 65.861456][ T6373] bridge0: port 2(bridge_slave_1) entered listening state [ 65.869680][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.886211][ T6384] netlink: 72 bytes leftover after parsing attributes in process `syz.3.168'. [ 65.892692][ T74] IPVS: starting estimator thread 0... [ 65.909697][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 65.916465][ T6387] IPv6: sit1: Disabled Multicast RS [ 65.920680][ T6387] sit1: entered allmulticast mode [ 65.928229][ T6387] nfs: Unknown parameter 'pro ' [ 65.987631][ T6385] IPVS: using max 29 ests per chain, 69600 per kthread [ 66.007652][ T3273] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.047711][ T6397] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.137769][ T3273] usb 7-1: device descriptor read/64, error -71 [ 66.170355][ T6402] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 66.232694][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.232747][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.257641][ T3273] usb usb7-port1: attempt power cycle [ 66.282863][ T6402] pci_bus 0000:01: busn_res: [bus 01] is released [ 66.405212][ T6408] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.618925][ T3273] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.637607][ T3273] usb 7-1: device descriptor read/8, error -71 [ 66.887218][ T3273] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 66.909030][ T3273] usb 7-1: device descriptor read/8, error -71 [ 66.929722][ T5735] Bluetooth: hci3: command 0x0419 tx timeout [ 67.017563][ T3273] usb usb7-port1: unable to enumerate USB device [ 67.142034][ T6458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.192'. [ 67.197374][ T5740] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 67.272219][ T5740] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 67.483369][ T6441] syz.0.184 (6441): drop_caches: 2 [ 67.549892][ T6465] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 67.558349][ T6465] team0: Port device veth0 added [ 67.918410][ T6482] 9p: Could not find request transport: [ 68.453794][ T6500] Bluetooth: ISO socket layer initialized [ 68.468896][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 68.526888][ T6504] capability: warning: `syz.2.210' uses deprecated v2 capabilities in a way that may be insecure [ 68.586213][ T6502] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 68.638186][ T10] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 68.639155][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.639212][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.650254][ T10] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 68.650446][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 68.650513][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 68.652664][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 68.652740][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 68.654332][ T10] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 68.656385][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 68.656461][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 68.660459][ T10] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 68.807881][ T5740] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 69.009395][ T5740] Bluetooth: hci3: command 0x0419 tx timeout [ 69.081376][ T6484] netlink: 44 bytes leftover after parsing attributes in process `syz.0.200'. [ 69.103051][ T851] usb 8-1: USB disconnect, device number 5 [ 69.107921][ T851] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 69.157842][ T851] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 69.158233][ T851] keyspan 8-1:1.0: device disconnected [ 69.337280][ T43] kauditd_printk_skb: 54 callbacks suppressed [ 69.337292][ T43] audit: type=1400 audit(1790446662.680:460): avc: denied { write } for pid=6519 comm="syz.1.216" name="usb_gadget" dev="configfs" ino=2527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.338673][ T43] audit: type=1400 audit(1790446662.690:461): avc: denied { write } for pid=6519 comm="syz.1.216" name="configs" dev="configfs" ino=12185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.399135][ T43] audit: type=1400 audit(1790446662.750:462): avc: denied { write } for pid=6519 comm="syz.1.216" name="c.1" dev="configfs" ino=12189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.399485][ T43] audit: type=1400 audit(1790446662.750:463): avc: denied { create } for pid=6519 comm="syz.1.216" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 69.567282][ C3] net_ratelimit: 5902 callbacks suppressed [ 69.760442][ T6524] overlayfs: missing 'lowerdir' [ 69.773221][ T43] audit: type=1400 audit(1790446663.120:464): avc: denied { bind } for pid=6523 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.777409][ T43] audit: type=1400 audit(1790446663.130:465): avc: denied { getopt } for pid=6523 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.984098][ T6540] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 70.018198][ T43] audit: type=1400 audit(1790446663.370:466): avc: denied { create } for pid=6541 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.027879][ T43] audit: type=1400 audit(1790446663.380:467): avc: denied { write } for pid=6541 comm="syz.3.226" path="socket:[13142]" dev="sockfs" ino=13142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.107293][ T42] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 70.257876][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 70.264837][ T42] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 70.268766][ T42] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 70.269092][ T42] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 70.269323][ T42] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.269374][ T42] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 70.276952][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.276962][ T42] usb 7-1: Product: syz [ 70.277301][ T42] usb 7-1: Manufacturer: syz [ 70.277310][ T42] usb 7-1: SerialNumber: syz [ 70.326729][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 70.327796][ T851] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 70.363289][ T42] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input7 [ 70.381546][ T43] audit: type=1400 audit(1790446663.730:468): avc: denied { read } for pid=5127 comm="acpid" name="mouse2" dev="devtmpfs" ino=2890 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.382718][ T43] audit: type=1400 audit(1790446663.730:469): avc: denied { open } for pid=5127 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2890 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.480213][ T851] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 70.484429][ T851] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.484934][ T851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.537810][ T42] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 70.538716][ T42] (id 0x00) [ 70.587804][ T851] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 70.589655][ T851] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 70.590061][ T851] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 70.597169][ T42] rc_core: IR keymap rc-imon-pad not found [ 70.597178][ T42] Registered IR keymap rc-empty [ 70.597456][ T42] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 70.597509][ T42] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 70.685886][ T851] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 70.686402][ T851] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 70.743510][ T851] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 70.771720][ T851] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 70.774234][ T851] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 70.776349][ T42] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 70.817956][ T42] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input8 [ 70.838556][ T851] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 70.921745][ T42] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:6> initialized [ 71.025264][ T42] usb 6-1: USB disconnect, device number 3 [ 71.056037][ T42] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 71.083034][ T42] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 71.086948][ T42] keyspan 6-1:1.0: device disconnected [ 71.108877][ T6566] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 71.297745][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 71.345605][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.345653][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.355342][ T2359] cfg80211: failed to load regulatory.db [ 71.719481][ T6599] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 71.897386][ T42] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.049414][ T42] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 72.050234][ T42] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.050251][ T42] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 72.050263][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.051849][ T42] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.051859][ T42] usb 6-1: Product: syz [ 72.051867][ T42] usb 6-1: Manufacturer: syz [ 72.051874][ T42] usb 6-1: SerialNumber: syz [ 72.055581][ T42] usb 6-1: config 0 descriptor?? [ 72.069699][ T42] usb 6-1: selecting invalid altsetting 0 [ 72.303206][ T42] usb 6-1: USB disconnect, device number 4 [ 72.321600][ T6606] nfs: Unknown parameter 'proo' [ 72.420135][ T6567] udevd[6567]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.471380][ T6603] syz.0.245 (6603): drop_caches: 2 [ 72.588884][ T6617] process 'syz.3.250' launched '/dev/fd/9' with NULL argv: empty string added [ 72.924755][ T6620] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 73.116615][ T6624] FAULT_INJECTION: forcing a failure. [ 73.116615][ T6624] name failslab, interval 1, probability 0, space 0, times 0 [ 73.116641][ T6624] CPU: 0 UID: 0 PID: 6624 Comm: syz.0.253 Not tainted syzkaller #0 PREEMPT(full) [ 73.116657][ T6624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.116665][ T6624] Call Trace: [ 73.116670][ T6624] [ 73.116676][ T6624] dump_stack_lvl+0x100/0x190 [ 73.116697][ T6624] should_fail_ex.cold+0x5/0xa [ 73.116715][ T6624] should_failslab+0xc2/0x120 [ 73.116763][ T6624] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 73.116781][ T6624] ? kstrdup_const+0x63/0x80 [ 73.116795][ T6624] kstrdup+0x51/0xe0 [ 73.116807][ T6624] kstrdup_const+0x63/0x80 [ 73.116819][ T6624] __kernfs_new_node+0x9b/0xa10 [ 73.116840][ T6624] ? __pfx___kernfs_new_node+0x10/0x10 [ 73.116859][ T6624] ? lock_acquire+0x1d1/0x380 [ 73.116871][ T6624] ? kernfs_root+0x23/0x2a0 [ 73.116887][ T6624] ? find_held_lock+0x2b/0x80 [ 73.116904][ T6624] ? kernfs_root+0xee/0x2a0 [ 73.116921][ T6624] ? kernfs_root+0xee/0x2a0 [ 73.116941][ T6624] kernfs_create_dir_ns+0xa6/0x2b0 [ 73.116960][ T6624] sysfs_create_dir_ns+0x13a/0x2b0 [ 73.116977][ T6624] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 73.116998][ T6624] ? find_held_lock+0x2b/0x80 [ 73.117015][ T6624] ? kobject_add_internal+0x25f/0x930 [ 73.117030][ T6624] ? kobject_add_internal+0x25f/0x930 [ 73.117048][ T6624] kobject_add_internal+0x2c8/0x930 [ 73.117066][ T6624] kobject_init_and_add+0x121/0x180 [ 73.117082][ T6624] ? __pfx_kobject_init_and_add+0x10/0x10 [ 73.117100][ T6624] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 73.117119][ T6624] ? lockdep_init_map_type+0x5c/0x250 [ 73.117134][ T6624] swnode_register+0x5c9/0x750 [ 73.117151][ T6624] fwnode_create_software_node+0x1c8/0x3f0 [ 73.117167][ T6624] device_create_managed_software_node+0x103/0x270 [ 73.117184][ T6624] iommufd_test+0x3007/0x6600 [ 73.117200][ T6624] ? __lock_acquire+0x5c0/0x1f40 [ 73.117213][ T6624] ? __lock_acquire+0x5c0/0x1f40 [ 73.117226][ T6624] ? __pfx_iommufd_test+0x10/0x10 [ 73.117240][ T6624] ? tomoyo_path_number_perm+0x188/0x580 [ 73.117256][ T6624] ? lock_acquire+0x1d1/0x380 [ 73.117268][ T6624] ? __might_fault+0xc5/0x140 [ 73.117285][ T6624] ? find_held_lock+0x2b/0x80 [ 73.117301][ T6624] ? __might_fault+0xc5/0x140 [ 73.117323][ T6624] iommufd_fops_ioctl+0x358/0x520 [ 73.117340][ T6624] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 73.117355][ T6624] ? __fget_files+0x34/0x3d0 [ 73.117375][ T6624] ? selinux_file_ioctl+0x13b/0x290 [ 73.117389][ T6624] ? selinux_file_ioctl+0xb6/0x290 [ 73.117403][ T6624] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 73.117420][ T6624] __x64_sys_ioctl+0x18e/0x210 [ 73.117434][ T6624] do_syscall_64+0x123/0x790 [ 73.117446][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.117458][ T6624] RIP: 0033:0x7fef4919e159 [ 73.117469][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.117481][ T6624] RSP: 002b:00007fef49fbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.117496][ T6624] RAX: ffffffffffffffda RBX: 00007fef49425fa0 RCX: 00007fef4919e159 [ 73.117504][ T6624] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 73.117512][ T6624] RBP: 00007fef4923506b R08: 0000000000000000 R09: 0000000000000000 [ 73.117519][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.117528][ T6624] R13: 00007fef49426038 R14: 00007fef49425fa0 R15: 00007ffe683d76f8 [ 73.117544][ T6624] [ 73.118194][ T6624] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 73.118265][ T6624] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 73.207251][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 73.358384][ T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 73.359198][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.359235][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.363507][ T10] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 73.363662][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 73.363737][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 73.366704][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 73.366746][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 73.367976][ T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 73.369802][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 73.369844][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 73.371523][ T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 73.563857][ T6600] imon:send_packet: task interrupted [ 73.563908][ T6600] imon:send_packet: packet tx failed (-512) [ 73.564459][ T6600] imon:vfd_write: send packet #5 failed [ 73.603548][ T6643] FAULT_INJECTION: forcing a failure. [ 73.603548][ T6643] name failslab, interval 1, probability 0, space 0, times 0 [ 73.603566][ T6643] CPU: 2 UID: 0 PID: 6643 Comm: syz.3.262 Not tainted syzkaller #0 PREEMPT(full) [ 73.603579][ T6643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.603586][ T6643] Call Trace: [ 73.603591][ T6643] [ 73.603596][ T6643] dump_stack_lvl+0x100/0x190 [ 73.603618][ T6643] should_fail_ex.cold+0x5/0xa [ 73.603635][ T6643] should_failslab+0xc2/0x120 [ 73.603652][ T6643] __kmalloc_noprof+0xfc/0x840 [ 73.603666][ T6643] ? kfree_const+0x5a/0x70 [ 73.603676][ T6643] ? property_entries_dup.part.0+0xd6/0x9f0 [ 73.603694][ T6643] property_entries_dup.part.0+0xd6/0x9f0 [ 73.603709][ T6643] ? dev_set_name+0xc7/0x100 [ 73.603720][ T6643] ? __pfx_dev_set_name+0x10/0x10 [ 73.603730][ T6643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.603746][ T6643] fwnode_create_software_node+0xad/0x3f0 [ 73.603762][ T6643] device_create_managed_software_node+0x103/0x270 [ 73.603780][ T6643] iommufd_test+0x3007/0x6600 [ 73.603796][ T6643] ? __lock_acquire+0x5c0/0x1f40 [ 73.603810][ T6643] ? __lock_acquire+0x5c0/0x1f40 [ 73.603822][ T6643] ? __pfx_iommufd_test+0x10/0x10 [ 73.603835][ T6643] ? tomoyo_path_number_perm+0x188/0x580 [ 73.603852][ T6643] ? lock_acquire+0x1d1/0x380 [ 73.603863][ T6643] ? __might_fault+0xc5/0x140 [ 73.603881][ T6643] ? find_held_lock+0x2b/0x80 [ 73.603897][ T6643] ? __might_fault+0xc5/0x140 [ 73.603920][ T6643] iommufd_fops_ioctl+0x358/0x520 [ 73.603937][ T6643] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 73.603952][ T6643] ? __fget_files+0x34/0x3d0 [ 73.603979][ T6643] ? selinux_file_ioctl+0x13b/0x290 [ 73.603993][ T6643] ? selinux_file_ioctl+0xb6/0x290 [ 73.604008][ T6643] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 73.604025][ T6643] __x64_sys_ioctl+0x18e/0x210 [ 73.604040][ T6643] do_syscall_64+0x123/0x790 [ 73.604053][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.604067][ T6643] RIP: 0033:0x7f22c739e159 [ 73.604077][ T6643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.604089][ T6643] RSP: 002b:00007f22c8198028 EFLAGS: 00000246 [ 73.604095][ T6643] ORIG_RAX: 0000000000000010 [ 73.604101][ T6643] RAX: ffffffffffffffda RBX: 00007f22c7625fa0 RCX: 00007f22c739e159 [ 73.604109][ T6643] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 73.604117][ T6643] RBP: 00007f22c743506b R08: 0000000000000000 R09: 0000000000000000 [ 73.604124][ T6643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.604132][ T6643] R13: 00007f22c7626038 R14: 00007f22c7625fa0 R15: 00007ffdd324d958 [ 73.604147][ T6643] [ 73.604154][ T6643] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 73.607990][ T6644] 0x000000000001-0x000000004001 : "" [ 73.647321][ T6644] ftl_cs: FTL header not found. [ 73.674137][ T3273] usb 7-1: USB disconnect, device number 6 [ 73.739114][ T1040] usb 6-1: USB disconnect, device number 5 [ 73.757647][ T1040] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 73.774377][ T1040] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 73.774995][ T1040] keyspan 6-1:1.0: device disconnected [ 73.919976][ T6656] FAULT_INJECTION: forcing a failure. [ 73.919976][ T6656] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.919999][ T6656] CPU: 2 UID: 0 PID: 6656 Comm: syz.0.267 Not tainted syzkaller #0 PREEMPT(full) [ 73.920036][ T6656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.920048][ T6656] Call Trace: [ 73.920055][ T6656] [ 73.920062][ T6656] dump_stack_lvl+0x100/0x190 [ 73.920093][ T6656] should_fail_ex.cold+0x5/0xa [ 73.920119][ T6656] _copy_from_user+0x2e/0xd0 [ 73.920149][ T6656] copy_msghdr_from_user+0x9f/0x4c0 [ 73.920169][ T6656] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 73.920192][ T6656] ? rcu_is_watching+0x13/0xc0 [ 73.920214][ T6656] ? ___sys_sendmsg+0x19d/0x1e0 [ 73.920228][ T6656] ? kfree+0x1e5/0x6d0 [ 73.920257][ T6656] ___sys_sendmsg+0x106/0x1e0 [ 73.920279][ T6656] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.920309][ T6656] ? __fget_files+0x34/0x3d0 [ 73.920341][ T6656] ? __pfx___might_resched+0x10/0x10 [ 73.920365][ T6656] __sys_sendmmsg+0x20c/0x440 [ 73.920393][ T6656] ? __pfx___sys_sendmmsg+0x10/0x10 [ 73.920416][ T6656] ? ksys_write+0x190/0x250 [ 73.920453][ T6656] ? fput+0x7c/0x100 [ 73.920477][ T6656] ? ksys_write+0x1ac/0x250 [ 73.920496][ T6656] ? __pfx_ksys_write+0x10/0x10 [ 73.920520][ T6656] __x64_sys_sendmmsg+0x9c/0x100 [ 73.920544][ T6656] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.920573][ T6656] do_syscall_64+0x123/0x790 [ 73.920592][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.920612][ T6656] RIP: 0033:0x7fef4919e159 [ 73.920627][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.920646][ T6656] RSP: 002b:00007fef49fbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 73.920664][ T6656] RAX: ffffffffffffffda RBX: 00007fef49425fa0 RCX: 00007fef4919e159 [ 73.920677][ T6656] RDX: 0000000000000007 RSI: 0000200000001340 RDI: 0000000000000003 [ 73.920689][ T6656] RBP: 00007fef49fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 73.920700][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.920711][ T6656] R13: 00007fef49426038 R14: 00007fef49425fa0 R15: 00007ffe683d76f8 [ 73.920756][ T6656] [ 74.024234][ T6664] FAULT_INJECTION: forcing a failure. [ 74.024234][ T6664] name failslab, interval 1, probability 0, space 0, times 0 [ 74.024260][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.3.271 Not tainted syzkaller #0 PREEMPT(full) [ 74.024283][ T6664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.024295][ T6664] Call Trace: [ 74.024301][ T6664] [ 74.024309][ T6664] dump_stack_lvl+0x100/0x190 [ 74.024342][ T6664] should_fail_ex.cold+0x5/0xa [ 74.024372][ T6664] should_failslab+0xc2/0x120 [ 74.024401][ T6664] __kmalloc_noprof+0xfc/0x840 [ 74.024450][ T6664] ? kfree_const+0x5a/0x70 [ 74.024471][ T6664] ? property_entries_dup.part.0+0xd6/0x9f0 [ 74.024502][ T6664] property_entries_dup.part.0+0xd6/0x9f0 [ 74.024528][ T6664] ? dev_set_name+0xc7/0x100 [ 74.024548][ T6664] ? __pfx_dev_set_name+0x10/0x10 [ 74.024567][ T6664] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.024595][ T6664] fwnode_create_software_node+0xad/0x3f0 [ 74.024622][ T6664] device_create_managed_software_node+0x103/0x270 [ 74.024650][ T6664] iommufd_test+0x3007/0x6600 [ 74.024676][ T6664] ? __lock_acquire+0x5c0/0x1f40 [ 74.024697][ T6664] ? __lock_acquire+0x5c0/0x1f40 [ 74.024716][ T6664] ? __pfx_iommufd_test+0x10/0x10 [ 74.024763][ T6664] ? tomoyo_path_number_perm+0x188/0x580 [ 74.024793][ T6664] ? lock_acquire+0x1d1/0x380 [ 74.024814][ T6664] ? __might_fault+0xc5/0x140 [ 74.024846][ T6664] ? find_held_lock+0x2b/0x80 [ 74.024876][ T6664] ? __might_fault+0xc5/0x140 [ 74.024920][ T6664] iommufd_fops_ioctl+0x358/0x520 [ 74.024949][ T6664] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 74.024975][ T6664] ? __fget_files+0x34/0x3d0 [ 74.025012][ T6664] ? selinux_file_ioctl+0x13b/0x290 [ 74.025036][ T6664] ? selinux_file_ioctl+0xb6/0x290 [ 74.025061][ T6664] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 74.025090][ T6664] __x64_sys_ioctl+0x18e/0x210 [ 74.025114][ T6664] do_syscall_64+0x123/0x790 [ 74.025135][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.025155][ T6664] RIP: 0033:0x7f22c739e159 [ 74.025172][ T6664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.025192][ T6664] RSP: 002b:00007f22c8198028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.025212][ T6664] RAX: ffffffffffffffda RBX: 00007f22c7625fa0 RCX: 00007f22c739e159 [ 74.025226][ T6664] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 74.025238][ T6664] RBP: 00007f22c743506b R08: 0000000000000000 R09: 0000000000000000 [ 74.025251][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.025264][ T6664] R13: 00007f22c7626038 R14: 00007f22c7625fa0 R15: 00007ffdd324d958 [ 74.025292][ T6664] [ 74.025393][ T6664] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 74.080278][ T6668] FAULT_INJECTION: forcing a failure. [ 74.080278][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 74.080296][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.3.273 Not tainted syzkaller #0 PREEMPT(full) [ 74.080311][ T6668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.080318][ T6668] Call Trace: [ 74.080322][ T6668] [ 74.080328][ T6668] dump_stack_lvl+0x100/0x190 [ 74.080354][ T6668] should_fail_ex.cold+0x5/0xa [ 74.080375][ T6668] should_failslab+0xc2/0x120 [ 74.080392][ T6668] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 74.080407][ T6668] ? lock_acquire+0x1d1/0x380 [ 74.080422][ T6668] ? cache_create_net+0x2b/0x1f0 [ 74.080436][ T6668] ? __pfx_nfsd_net_init+0x10/0x10 [ 74.080452][ T6668] kmemdup_noprof+0x29/0x60 [ 74.080464][ T6668] cache_create_net+0x2b/0x1f0 [ 74.080477][ T6668] ? __pfx_nfsd_net_init+0x10/0x10 [ 74.080493][ T6668] nfsd_export_init+0x62/0x250 [ 74.080510][ T6668] ? __pfx_nfsd_net_init+0x10/0x10 [ 74.080525][ T6668] nfsd_net_init+0x69/0x480 [ 74.080542][ T6668] ? __pfx_nfsd_net_init+0x10/0x10 [ 74.080558][ T6668] ops_init+0x1e2/0x5f0 [ 74.080577][ T6668] setup_net+0x118/0x3a0 [ 74.080593][ T6668] ? __pfx_setup_net+0x10/0x10 [ 74.080614][ T6668] copy_net_ns+0x345/0x7a0 [ 74.080632][ T6668] create_new_namespaces+0x3ea/0xac0 [ 74.080649][ T6668] unshare_nsproxy_namespaces+0xf2/0x220 [ 74.080664][ T6668] ksys_unshare+0x4a2/0xa70 [ 74.080678][ T6668] ? __pfx_ksys_unshare+0x10/0x10 [ 74.080699][ T6668] __x64_sys_unshare+0x31/0x40 [ 74.080712][ T6668] do_syscall_64+0x123/0x790 [ 74.080754][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.080774][ T6668] RIP: 0033:0x7f22c739e159 [ 74.080788][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.080803][ T6668] RSP: 002b:00007f22c8198028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 74.080815][ T6668] RAX: ffffffffffffffda RBX: 00007f22c7625fa0 RCX: 00007f22c739e159 [ 74.080824][ T6668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 74.080832][ T6668] RBP: 00007f22c743506b R08: 0000000000000000 R09: 0000000000000000 [ 74.080853][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.080861][ T6668] R13: 00007f22c7626038 R14: 00007f22c7625fa0 R15: 00007ffdd324d958 ** 154 printk messages dropped ** ** 5 printk messages dropped ** ** 154 printk messages dropped ** ** 195 printk messages dropped ** ** 196 printk messages dropped ** ** 201 printk messages dropped ** ** 181 printk messages dropped ** ** 178 printk messages dropped ** ** 203 printk messages dropped ** ** 173 printk messages dropped ** ** 251 printk messages dropped ** ** 205 printk messages dropped ** ** 189 printk messages dropped ** ** 136 printk messages dropped ** ** 132 printk messages dropped ** ** 126 printk messages dropped ** ** 176 printk messages dropped ** ** 165 printk messages dropped ** ** 166 printk messages dropped ** ** 178 printk messages dropped ** ** 172 printk messages dropped ** ** 125 printk messages dropped ** ** 132 printk messages dropped ** ** 134 printk messages dropped ** ** 139 printk messages dropped ** ** 30 printk messages dropped ** ** 12 printk messages dropped ** ** 3 printk messages dropped ** [ 74.579986][ T5810] net_ratelimit: 81 callbacks suppressed [ 74.686393][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 74.686404][ T43] audit: type=1400 audit(1790446668.030:495): avc: denied { setopt } for pid=6680 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.686875][ T43] audit: type=1400 audit(1790446668.030:496): avc: denied { getopt } for pid=6680 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.854694][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.280'. [ 74.854707][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 74.914914][ T43] audit: type=1400 audit(1790446668.260:497): avc: denied { read } for pid=6686 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.940354][ T6692] FAULT_INJECTION: forcing a failure. [ 74.940354][ T6692] name failslab, interval 1, probability 0, space 0, times 0 [ 74.940382][ T6692] CPU: 3 UID: 0 PID: 6692 Comm: syz.1.281 Not tainted syzkaller #0 PREEMPT(full) [ 74.940404][ T6692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.940416][ T6692] Call Trace: [ 74.940431][ T6692] [ 74.940441][ T6692] dump_stack_lvl+0x100/0x190 [ 74.940486][ T6692] should_fail_ex.cold+0x5/0xa [ 74.940514][ T6692] should_failslab+0xc2/0x120 [ 74.940547][ T6692] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 74.940574][ T6692] ? __kasan_kmalloc+0xaa/0xb0 [ 74.940598][ T6692] ? property_entries_dup.part.0+0x2e1/0x9f0 [ 74.940628][ T6692] kstrdup+0x51/0xe0 [ 74.940649][ T6692] property_entries_dup.part.0+0x2e1/0x9f0 [ 74.940677][ T6692] ? __pfx_dev_set_name+0x10/0x10 [ 74.940696][ T6692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.940753][ T6692] fwnode_create_software_node+0xad/0x3f0 [ 74.940782][ T6692] device_create_managed_software_node+0x103/0x270 [ 74.940814][ T6692] iommufd_test+0x3007/0x6600 [ 74.940841][ T6692] ? __lock_acquire+0x5c0/0x1f40 [ 74.940864][ T6692] ? __lock_acquire+0x5c0/0x1f40 [ 74.940886][ T6692] ? __pfx_iommufd_test+0x10/0x10 [ 74.940910][ T6692] ? tomoyo_path_number_perm+0x188/0x580 [ 74.940937][ T6692] ? lock_acquire+0x1d1/0x380 [ 74.940958][ T6692] ? __might_fault+0xc5/0x140 [ 74.940988][ T6692] ? find_held_lock+0x2b/0x80 [ 74.941016][ T6692] ? __might_fault+0xc5/0x140 [ 74.941075][ T6692] iommufd_fops_ioctl+0x358/0x520 [ 74.941103][ T6692] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 74.941128][ T6692] ? __fget_files+0x34/0x3d0 [ 74.941165][ T6692] ? selinux_file_ioctl+0x13b/0x290 [ 74.941188][ T6692] ? selinux_file_ioctl+0xb6/0x290 [ 74.941213][ T6692] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 74.941243][ T6692] __x64_sys_ioctl+0x18e/0x210 [ 74.941267][ T6692] do_syscall_64+0x123/0x790 [ 74.941295][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.941318][ T6692] RIP: 0033:0x7f30ac79e159 [ 74.941342][ T6692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.941363][ T6692] RSP: 002b:00007f30ad6b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.941385][ T6692] RAX: ffffffffffffffda RBX: 00007f30aca25fa0 RCX: 00007f30ac79e159 [ 74.941399][ T6692] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 74.941411][ T6692] RBP: 00007f30ac83506b R08: 0000000000000000 R09: 0000000000000000 [ 74.941423][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.941435][ T6692] R13: 00007f30aca26038 R14: 00007f30aca25fa0 R15: 00007ffc9f8f2b78 [ 74.941462][ T6692] [ 74.941524][ T6692] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 75.101859][ T6701] XFS (nullb0): Invalid superblock magic number [ 75.176235][ T6711] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 75.207624][ T6201] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 75.377498][ T6201] usb 7-1: Using ep0 maxpacket: 8 [ 75.385746][ T6201] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.392378][ T6201] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 75.393019][ T6201] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.393237][ T6201] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.393281][ T6201] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.393575][ T6201] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.393716][ T6201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.680969][ T6201] usb 7-1: usb_control_msg returned -32 [ 75.681646][ T6201] usbtmc 7-1:16.0: can't read capabilities [ 76.028139][ T6717] jffs2: notice: (6717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 76.033593][ T43] audit: type=1400 audit(1790446669.380:498): avc: denied { setattr } for pid=6716 comm="syz.3.288" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.082739][ T43] audit: type=1400 audit(1790446669.430:499): avc: denied { read write } for pid=6720 comm="syz.1.290" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 76.083052][ T43] audit: type=1400 audit(1790446669.430:500): avc: denied { open } for pid=6720 comm="syz.1.290" path="/66/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 76.199471][ T5740] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 76.200246][ T43] audit: type=1400 audit(1790446669.550:501): avc: denied { search } for pid=6731 comm="syz.1.294" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.201886][ T43] audit: type=1400 audit(1790446669.550:502): avc: denied { search } for pid=6731 comm="syz.1.294" name="events" dev="tracefs" ino=5800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.201913][ T43] audit: type=1400 audit(1790446669.550:503): avc: denied { search } for pid=6731 comm="syz.1.294" name="sched" dev="tracefs" ino=15734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.201934][ T43] audit: type=1400 audit(1790446669.550:504): avc: denied { search } for pid=6731 comm="syz.1.294" name="sched_switch" dev="tracefs" ino=15736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.377240][ T6201] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 76.557616][ T6201] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 76.558646][ T6201] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 76.558666][ T6201] usb 8-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 76.565106][ T6201] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.565121][ T6201] usb 8-1: Product: syz [ 76.565133][ T6201] usb 8-1: Manufacturer: syz [ 76.565145][ T6201] usb 8-1: SerialNumber: syz [ 76.683900][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.685320][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.686781][ T6756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.798992][ T6201] usb 8-1: USB disconnect, device number 6 [ 76.997241][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 77.167248][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 77.167945][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 77.168782][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 77.170325][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.170335][ T10] usb 6-1: Product: syz [ 77.170342][ T10] usb 6-1: Manufacturer: syz [ 77.170350][ T10] usb 6-1: SerialNumber: syz [ 77.173405][ T10] usb 6-1: config 0 descriptor?? [ 77.177763][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 77.177777][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 77.257184][ T6201] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 77.417593][ T6201] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.418466][ T6201] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.418480][ T6201] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.418490][ T6201] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.418520][ T6201] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 77.418534][ T6201] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59237, setting to 1024 [ 77.419682][ T6201] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.419692][ T6201] usb 8-1: Product: syz [ 77.419699][ T6201] usb 8-1: Manufacturer: syz [ 77.421688][ T6723] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 77.423630][ T6201] cdc_wdm 8-1:1.0: skipping garbage [ 77.423641][ T6201] cdc_wdm 8-1:1.0: skipping garbage [ 77.435800][ T6201] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 77.435816][ T6201] cdc_wdm 8-1:1.0: Unknown control protocol [ 77.625787][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.626775][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.628461][ T6723] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 77.633072][ T6201] usb 8-1: USB disconnect, device number 7 [ 77.931264][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.931677][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.001486][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 78.035729][ T6201] usb 7-1: USB disconnect, device number 7 [ 78.224015][ T1172] IPVS: starting estimator thread 0... [ 78.317494][ T6795] IPVS: using max 44 ests per chain, 105600 per kthread [ 78.379499][ T6802] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 78.406506][ T6800] bond2: (slave bridge2): making interface the new active one [ 78.406955][ T6800] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 78.408392][ T6763] team0: entered allmulticast mode [ 78.408409][ T6763] team_slave_0: entered allmulticast mode [ 78.408425][ T6763] team_slave_1: entered allmulticast mode [ 78.409034][ T6763] team0: Cannot enslave team device to itself [ 78.417727][ T10] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 78.417750][ T10] em28xx 6-1:0.0: board has no eeprom [ 78.477653][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 78.477675][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 78.478629][ T1040] em28xx 6-1:0.0: Binding DVB extension [ 78.499527][ T10] usb 6-1: USB disconnect, device number 6 [ 78.501305][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 78.529675][ T1040] em28xx 6-1:0.0: Registering input extension [ 78.530214][ T10] em28xx 6-1:0.0: Closing input extension [ 78.592536][ T10] em28xx: Freeing device [ 79.018406][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 79.287954][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 79.362020][ T6833] bond3: (slave sit2): The slave device specified does not support setting the MAC address [ 79.362538][ T6833] bond3: (slave sit2): Error -95 calling set_mac_address [ 79.398251][ T6551] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 79.506664][ T6841] tipc: Started in network mode [ 79.506678][ T6841] tipc: Node identity c6971c8d9f3b, cluster identity 4711 [ 79.506797][ T6841] tipc: Enabled bearer , priority 0 [ 79.539169][ T6844] trusted_key: encrypted_key: insufficient parameters specified [ 79.577726][ T6551] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 79.578590][ T6551] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.578624][ T6551] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.582733][ T6551] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 79.582839][ T6551] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 79.582875][ T6551] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 79.584028][ T6551] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 79.584068][ T6551] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 79.585000][ T6551] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 79.586136][ T6551] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 79.586176][ T6551] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 79.586975][ T6551] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 79.638474][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 79.659794][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 79.728644][ T6855] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 79.782614][ T6551] usb 8-1: USB disconnect, device number 8 [ 79.786703][ T6551] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 79.791670][ T25] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.793461][ T6551] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 79.793864][ T6551] keyspan 8-1:1.0: device disconnected [ 79.807146][ C1] net_ratelimit: 219 callbacks suppressed [ 79.807992][ T25] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.808082][ T25] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 79.808135][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.850261][ T25] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.850314][ T25] usb 6-1: Product: syz [ 79.850359][ T25] usb 6-1: Manufacturer: syz [ 79.850405][ T25] usb 6-1: SerialNumber: syz [ 79.956432][ T25] usb 6-1: config 0 descriptor?? [ 79.963486][ T6835] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 80.064173][ T25] usb 6-1: selecting invalid altsetting 0 [ 80.127487][ T851] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 80.292604][ T851] usb 7-1: Using ep0 maxpacket: 32 [ 80.293959][ T851] usb 7-1: New USB device found, idVendor=13d3, idProduct=0ccd, bcdDevice=37.f4 [ 80.294873][ T851] usb 7-1: config 5 has an invalid interface number: 152 but max is 2 [ 80.294893][ T851] usb 7-1: config 5 has an invalid interface number: 242 but max is 2 [ 80.294913][ T851] usb 7-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 80.294929][ T851] usb 7-1: config 5 has an invalid interface number: 12 but max is 2 [ 80.294948][ T851] usb 7-1: config 5 has no interface number 0 [ 80.294963][ T851] usb 7-1: config 5 has no interface number 1 [ 80.294976][ T851] usb 7-1: config 5 has no interface number 2 [ 80.295040][ T851] usb 7-1: config 5 interface 152 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 80.295093][ T851] usb 7-1: config 5 interface 152 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.295111][ T851] usb 7-1: config 5 interface 152 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 80.295157][ T851] usb 7-1: config 5 interface 242 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 80.295195][ T851] usb 7-1: config 5 interface 242 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 64 [ 80.295231][ T851] usb 7-1: config 5 interface 242 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 80.295264][ T851] usb 7-1: config 5 interface 242 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 80.295282][ T851] usb 7-1: config 5 interface 242 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 80.295300][ T851] usb 7-1: config 5 interface 242 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 80.295320][ T851] usb 7-1: config 5 interface 242 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 80.295338][ T851] usb 7-1: config 5 interface 242 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 80.295356][ T851] usb 7-1: config 5 interface 242 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 80.295381][ T851] usb 7-1: config 5 interface 242 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 1024 [ 80.295401][ T851] usb 7-1: config 5 interface 242 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 80.295420][ T851] usb 7-1: config 5 interface 242 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 80.295439][ T851] usb 7-1: config 5 interface 242 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 80.295458][ T851] usb 7-1: config 5 interface 242 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 80.295478][ T851] usb 7-1: config 5 interface 242 altsetting 3 endpoint 0xE has invalid maxpacket 1100, setting to 64 [ 80.295525][ T851] usb 7-1: config 5 interface 12 altsetting 249 has a duplicate endpoint with address 0x1, skipping [ 80.295545][ T851] usb 7-1: config 5 interface 12 altsetting 249 has a duplicate endpoint with address 0x8, skipping [ 80.295564][ T851] usb 7-1: config 5 interface 12 altsetting 249 has a duplicate endpoint with address 0xC, skipping [ 80.295583][ T851] usb 7-1: config 5 interface 12 altsetting 249 has a duplicate endpoint with address 0xF, skipping [ 80.295601][ T851] usb 7-1: config 5 interface 12 altsetting 249 has a duplicate endpoint with address 0x4, skipping [ 80.295621][ T851] usb 7-1: config 5 interface 12 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 80.295639][ T851] usb 7-1: config 5 interface 12 altsetting 249 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 80.295661][ T851] usb 7-1: config 5 interface 12 altsetting 249 has a duplicate endpoint with address 0x81, skipping [ 80.295681][ T851] usb 7-1: config 5 interface 12 altsetting 249 has a duplicate endpoint with address 0x7, skipping [ 80.295701][ T851] usb 7-1: config 5 interface 242 has no altsetting 0 [ 80.295716][ T851] usb 7-1: config 5 interface 12 has no altsetting 0 [ 80.340126][ T851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.340145][ T851] usb 7-1: Product: syz [ 80.340158][ T851] usb 7-1: Manufacturer: 垥ఓᆱ杆꿝庙ᱡﾢ브䣫汧笆Ѳ齂㫦讄䴠䵖᣼爹䩛櫮⪴栍谍帅ᐠ䧬⹆㲹辦磹臡눯芵鲆ꕗЋ蹅썡䏙몸뀎珛綨퉝泽疿㩪錞缧ᒊ䅜栦熃캀쓦߲謃쐞ꨩ撬銇短╍㝄䵏阻䮭荏⿭혖ᘾ죮뜹쾷 [ 80.340184][ T851] usb 7-1: SerialNumber: syz [ 80.501036][ T6201] tipc: Node number set to 1504451725 [ 80.752287][ T10] usb 6-1: USB disconnect, device number 7 [ 80.800968][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 80.800977][ T43] audit: type=1400 audit(1790446674.150:537): avc: denied { create } for pid=6867 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.805352][ T43] audit: type=1400 audit(1790446674.150:538): avc: denied { ioctl } for pid=6867 comm="syz.0.331" path="socket:[16586]" dev="sockfs" ino=16586 ioctlcmd=0x6f06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.805418][ T43] audit: type=1400 audit(1790446674.150:539): avc: denied { setopt } for pid=6867 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.826830][ T43] audit: type=1400 audit(1790446674.170:540): avc: denied { create } for pid=6870 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.838212][ T43] audit: type=1400 audit(1790446674.190:541): avc: denied { write } for pid=6870 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.844880][ T6871] netlink: 'syz.0.332': attribute type 16 has an invalid length. [ 80.844897][ T6871] netlink: 'syz.0.332': attribute type 17 has an invalid length. [ 80.846912][ T851] usb 7-1: USB disconnect, device number 8 [ 80.867737][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.869711][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.905799][ T6871] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 80.913541][ T6871] sit1: left allmulticast mode [ 80.915311][ T6871] tipc: Resetting bearer [ 80.915986][ T6871] tipc: Resetting bearer [ 80.917005][ T6871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.926371][ T6871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.967375][ T6879] bond1: entered promiscuous mode [ 80.991398][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 81.382184][ T43] audit: type=1400 audit(1790446674.730:542): avc: denied { read write } for pid=6892 comm="syz.2.340" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.382414][ T43] audit: type=1400 audit(1790446674.730:543): avc: denied { open } for pid=6892 comm="syz.2.340" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.403344][ T35] wacom 0003:056A:003F.0002: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 81.439297][ T10] No more buffers in queue [ 81.440493][ T6895] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006c: 0000 [#1] SMP KASAN NOPTI [ 81.445684][ T6895] KASAN: null-ptr-deref in range [0x0000000000000360-0x0000000000000367] [ 81.448396][ T6895] CPU: 2 UID: 0 PID: 6895 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT(full) [ 81.451229][ T6895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.454371][ T6895] RIP: 0010:wacom_report_numbered_buttons+0x37/0x210 [ 81.454814][ T43] audit: type=1400 audit(1790446674.800:544): avc: denied { read } for pid=5124 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 81.456443][ T43] audit: type=1400 audit(1790446674.800:545): avc: denied { search } for pid=5124 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.461341][ T43] audit: type=1400 audit(1790446674.810:546): avc: denied { write search } for pid=5124 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.467183][ T6551] raw-gadget.0 gadget.3: gadget resumed [ 81.467225][ T6551] dummy_hcd dummy_hcd.3: port status 0x00100503 has changes [ 81.480316][ T6895] Code: f5 53 48 89 fb 48 83 ec 10 48 89 3c 24 e8 a1 2a f1 f8 48 8d bb 60 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b7 01 00 00 48 8b 04 24 4c 8b a0 60 03 00 00 49 [ 81.486312][ T6895] RSP: 0018:ffffc90023acf9a0 EFLAGS: 00010206 [ 81.488217][ T6895] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 81.490681][ T6895] RDX: 000000000000006c RSI: ffffffff891b080f RDI: 0000000000000360 [ 81.493143][ T6895] RBP: 0000000000000008 R08: 0000000000000005 R09: 000000000000001f [ 81.495593][ T6895] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000000 [ 81.497887][ T6899] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id -639655152 [ 81.498039][ T35] nfc: nfc_urelease_event_work: portid -639655152 [ 81.503594][ T6895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.506235][ T6895] FS: 00007f9d852e66c0(0000) GS:ffff8880d5d52000(0000) knlGS:0000000000000000 [ 81.509060][ T6895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.511121][ T6895] CR2: 00007f9d852e5ff8 CR3: 000000005a203000 CR4: 0000000000352ef0 [ 81.513624][ T6895] Call Trace: [ 81.514705][ T6895] [ 81.515667][ T6895] wacom_intuos_irq+0x2f8/0x3430 [ 81.517271][ T6895] wacom_wac_irq+0x196b/0xab80 [ 81.518800][ T6895] ? lock_acquire+0x1d1/0x380 [ 81.520280][ T6895] ? __lock_acquire+0xe8b/0x1f40 [ 81.522035][ T6895] ? __pfx_wacom_wac_irq+0x10/0x10 [ 81.523962][ T6895] ? __lock_acquire+0x5c0/0x1f40 [ 81.525543][ T6895] wacom_raw_event+0x6bb/0xba0 [ 81.527055][ T6895] ? mark_held_locks+0x40/0x70 [ 81.528572][ T6895] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 81.530395][ T6895] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.532064][ T6895] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.533911][ T6895] __hid_input_report.constprop.0+0x319/0x470 [ 81.535859][ T6895] ? __pfx_wacom_raw_event+0x10/0x10 [ 81.537532][ T6895] uhid_char_write+0xb6b/0x10e0 [ 81.539076][ T6895] vfs_write+0x2aa/0x1050 [ 81.540451][ T6895] ? __pfx_uhid_char_write+0x10/0x10 [ 81.542111][ T6895] ? lock_acquire+0x1d1/0x380 [ 81.543597][ T6895] ? __fget_files+0x34/0x3d0 [ 81.545088][ T6895] ? __pfx_vfs_write+0x10/0x10 [ 81.546598][ T6895] ? find_held_lock+0x2b/0x80 [ 81.548108][ T6895] ? __fget_files+0x215/0x3d0 [ 81.549599][ T6895] ? __fget_files+0x215/0x3d0 [ 81.551100][ T6895] ? __fget_files+0x21f/0x3d0 [ 81.552604][ T6895] ksys_write+0x1f8/0x250 [ 81.553974][ T6895] ? __pfx_ksys_write+0x10/0x10 [ 81.555533][ T6895] do_syscall_64+0x123/0x790 [ 81.557011][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.558856][ T6895] RIP: 0033:0x7f9d8439e159 [ 81.560259][ T6895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.566217][ T6895] RSP: 002b:00007f9d852e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.567103][ C3] bridge0: port 2(bridge_slave_1) forward delay timer [ 81.567126][ C3] bridge0: port 2(bridge_slave_1) event 16 [ 81.567162][ C3] bridge0: br_fill_ifinfo event 16 port bridge_slave_1 master bridge0 [ 81.575487][ T6895] RAX: ffffffffffffffda RBX: 00007f9d84626090 RCX: 00007f9d8439e159 [ 81.577970][ T6895] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000007 [ 81.580416][ T6895] RBP: 00007f9d8443506b R08: 0000000000000000 R09: 0000000000000000 [ 81.583126][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.585554][ T6895] R13: 00007f9d84626128 R14: 00007f9d84626090 R15: 00007ffd5556e538 [ 81.588051][ T6895] [ 81.589065][ T6895] Modules linked in: [ 81.591644][ T6895] ---[ end trace 0000000000000000 ]--- [ 81.591785][ C2] nf_nat: Already setup manip DST for ct ffff888024e17080 (status bits 0x188) [ 81.596327][ C2] nf_nat: Already setup manip SRC for ct ffff888024e17080 (status bits 0x188) [ 81.599299][ C2] nf_nat: Already setup manip DST for ct ffff888024e16f00 (status bits 0x188) [ 81.602171][ C2] nf_nat: Already setup manip SRC for ct ffff888024e16f00 (status bits 0x188) [ 81.605172][ C2] nf_nat: Already setup manip DST for ct ffff888024e16f00 (status bits 0x188) [ 81.605191][ C2] nf_nat: Already setup manip SRC for ct ffff888024e16f00 (status bits 0x188) [ 81.606200][ T6895] RIP: 0010:wacom_report_numbered_buttons+0x37/0x210 [ 81.606226][ T6895] Code: f5 53 48 89 fb 48 83 ec 10 48 89 3c 24 e8 a1 2a f1 f8 48 8d bb 60 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b7 01 00 00 48 8b 04 24 4c 8b a0 60 03 00 00 49 [ 81.606238][ T6895] RSP: 0018:ffffc90023acf9a0 EFLAGS: 00010206 [ 81.606248][ T6895] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 81.606255][ T6895] RDX: 000000000000006c RSI: ffffffff891b080f RDI: 0000000000000360 [ 81.606262][ T6895] RBP: 0000000000000008 R08: 0000000000000005 R09: 000000000000001f [ 81.606269][ T6895] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000000 [ 81.606276][ T6895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.606282][ T6895] FS: 00007f9d852e66c0(0000) GS:ffff8880d5d52000(0000) knlGS:0000000000000000 [ 81.606312][ T6895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.606321][ T6895] CR2: 00007f9d852e5ff8 CR3: 000000005a203000 CR4: 0000000000352ef0 [ 81.606330][ T6895] Kernel panic - not syncing: Fatal exception [ 81.643818][ T6895] Kernel Offset: disabled [ 81.645209][ T6895] Rebooting in 86400 seconds..