last executing test programs: 3.708347265s ago: executing program 0 (id=267): mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x21c0, 0x103) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x108843, 0x98) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x68, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xf, 0x0, 0x8, 0x0, 0x5c4, 0x1, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x5}]}}}]}, 0x98}}, 0x20000000) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000740)) r10 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r10, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040e05070b20"], 0x8) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r9, @ANYRES16=r7], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r2, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x48a, 0x0, 0xb}, {0xa41, 0x0, 0x5}]}) r12 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x0, &(0x7f0000000b40)=0x0) ioctl$XFS_IOC_GETVERSION(r11, 0x80087601, &(0x7f00000000c0)) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000b80)={0x2e, 0x7f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c00)=@new_dev={0x2, 0xcb6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, &(0x7f0000000c40)=0x0) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) r19 = dup(r18) r20 = syz_io_uring_setup(0x627b, &(0x7f0000000380)={0x0, 0xa29, 0x8, 0x2, 0x2be}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) syz_ublk_setup_queues(r19, r17, &(0x7f0000000c80)={0x0, 0x1, 0x0, 0xffffffff, 0x255, 0x0, r20}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x100032b0, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x0, 0x2, 0x100ab, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x200, 0x0, 0x3e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x1000002, 0x250}}], 0x1, &(0x7f0000000f80)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r16, '\x00', {0x3, 0x653, 0x0, 0x0}}, 0x0) ioctl$sock_SIOCBRADDBR(r19, 0x89a0, &(0x7f0000000100)='ip_vti0\x00') 3.581280971s ago: executing program 3 (id=270): syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = open$dir(&(0x7f00000002c0)='./dev/vhci\x00', 0x2000, 0x21) openat(r0, &(0x7f00000003c0)='./dev/vhci\x00', 0x4000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/vhci\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002640)={0x2020, 0x0, 0x0}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) removexattr(&(0x7f0000000280)='./dev/vhci\x00', &(0x7f0000000380)=@known='user.incfs.metadata\x00') r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0xfffffffffffffdd3, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) write$FUSE_INIT(r1, &(0x7f0000000300)={0x50, 0x0, r2, {0x7, 0x2d, 0x3, 0x4008004, 0xfffd, 0x3, 0xbc, 0x1, 0x0, 0x0, 0x100, 0x6}}, 0x50) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x40005) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000700)='\b\x00', 0x2}, {&(0x7f0000000740)="2d0000008058", 0x6}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1f0, 0x138, 0x1, 0x0, 0x200, 0x0, 0x0, @by_dev={r4}, [@crypt={0x0, 0x10, 0x0, 0xb8, 'crypt\x00', {'aes-cbc-elephant:sha256', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '4096', 0x20, {@ram_num={'1:', 0x0}, 0x20, '0'}, ' 1 sector_size:1024'}}]}) 2.772518339s ago: executing program 0 (id=286): mount$afs(&(0x7f0000000340), &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x14800, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000500)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syz_tun\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x0]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x400c850) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000006c0)={@multicast1, @remote, @local}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007", @ANYRESDEC=r4, @ANYRES32=r0, @ANYRES64=r0], 0x25c}}, 0x0) 2.688456948s ago: executing program 0 (id=289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0x1, @any, 0x0, 0x8}}}, 0xe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xd, 0xf}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xd, 0xf}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.022655885s ago: executing program 0 (id=299): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9c10, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1f0, 0x138, 0x1, 0x0, 0x200, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x10, 0x0, 0xb8, 'crypt\x00', {'aes-cbc-elephant:sha256', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '4096', 0x20, {@ram_num={'1:', 0x0}, 0x20, '0'}, ' 1 sector_size:1024'}}]}) (fail_nth: 7) 1.951524726s ago: executing program 0 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delroute={0x1c, 0x1a, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x800}}, 0x1c}}, 0x800) accept(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000340)=0x80) r1 = syz_open_dev$video(&(0x7f0000000040), 0xfffffffffffff000, 0x101040) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x24000840, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x1}}}}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @local}, &(0x7f0000000200)=0xc) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) 1.889326303s ago: executing program 0 (id=301): r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000500)={0x0, [[0xff7ffffe, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffbf, 0x13, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x20010, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x8c7, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='0', 0x1) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000780), 0xa0201, 0x0) write$dsp(r2, &(0x7f00000007c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.639586649s ago: executing program 1 (id=308): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9c10, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1f0, 0x138, 0x1, 0x0, 0x200, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x10, 0x0, 0xb8, 'crypt\x00', {'aes-cbc-elephant:sha256', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '4096', 0x20, {@ram_num={'1:', 0x0}, 0x20, '0'}, ' 1 sector_size:1024'}}]}) (fail_nth: 8) 1.558767381s ago: executing program 1 (id=309): openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c3040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r1, &(0x7f0000000140)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='0', 0x1) socket(0x1e, 0x4, 0x0) unshare(0x62040200) r3 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x104) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r7 = fanotify_init(0x1, 0x0) write$P9_RSYMLINK(r7, &(0x7f0000000000)={0x14, 0x11, 0x0, {0x0, 0x2, 0xfffffff7ffffffff}}, 0x47) write$P9_RVERSION(r4, &(0x7f00000009c0)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)=[0x5], &(0x7f0000000ac0)=[0x2], 0x0, 0x1, 0x1}}, 0x40) creat(&(0x7f0000000b00)='./file0\x00', 0x2a) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) 1.378646491s ago: executing program 1 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newsa={0xf0, 0x1a, 0x800, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x7, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x489d}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}}, 0xf0}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/mtrr\x00', 0x8442, 0x20) ioctl(r0, 0x40104d07, &(0x7f0000000540)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='e:\fV', 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000260029002dbd7000f9ffffff100000000d005e008bf589870100122afe000000"], 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) 1.310894489s ago: executing program 1 (id=313): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000000c0)={&(0x7f0000000100)=[r1, r1], 0x0, 0x2}) close(r0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000380), 0x0) syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@random="180c281d3358", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000500)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.177789819s ago: executing program 2 (id=316): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x88, 0x1e, 0x21, 0x70bd2b, 0x0, {0x2a}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x69, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2mb:\x8e_\xaa\x9b\xc7\x80\xc3\x91\xe7\xfe\xf3S\xa6\xffg\xbe\x1d\xc1!q\x8a\xbb\xa1\xc6\xb3r#W\x98\xe7:\xf2\x92!\xc8\xfdi\xd2}\xf2\x88\x87\x11M\x1e\b\xf2\xa6\x14\xcf\x9d\xbeX\x9a&?\x98\xe4o\xec\xb2\x1fA.CX\x8f-\x88\xcf\x05\x14\xa1n\x9e\xc3F\xf1\x9ft\f\xe4]'}]}, 0x88}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022000cb", @ANYRES32=r3, @ANYBLOB="0800010000002000080009000700200008000200ffffffff08000900060000000800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x74, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.16984753s ago: executing program 1 (id=317): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000040)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f0000000080)="0802110095010802113f00000800", 0xe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x112}) connect$bt_rfcomm(r0, &(0x7f0000000b40)={0x1f, @none, 0x11}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) shutdown(r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r3, &(0x7f0000000040)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) write(r3, &(0x7f0000000080)="0802110095010802113f00000800", 0xe) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x112}) (async) connect$bt_rfcomm(r0, &(0x7f0000000b40)={0x1f, @none, 0x11}, 0xa) (async) 1.102540544s ago: executing program 2 (id=318): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x69e, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfcff}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00fbff00000090000000000a"], 0x1c}}, 0x8000) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x102, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f000001f700)={0x0, 0x0, &(0x7f000001f740)={&(0x7f000001f780)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c0007800800064001"], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f000001f800)={0x0, 0x0, &(0x7f000001f840)={&(0x7f000001f880)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 970.433517ms ago: executing program 2 (id=319): setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES8=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x8c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x70bd27, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 969.460823ms ago: executing program 1 (id=320): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502", @ANYBLOB="c1"], 0x0) (async, rerun: 64) open(&(0x7f0000000140)='./dev/ttyUSB0\x00', 0xc002, 0x2) (async, rerun: 64) r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_io_uring_setup(0xefd, &(0x7f0000019200)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000019340)=0x0, &(0x7f0000019380)=0x0, &(0x7f00000193c0)=0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x4c5f6fd8d24aaa0e, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0xf, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7f, 0xff, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x80, 0xa, 0x6, 0x20, 0x6}, 0x2a, &(0x7f0000000200)={0x5, 0xf, 0x2a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x8, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "15c474d56429110917aa5532eef2fce3"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x0, 0x225}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41e}}, {0xa3, &(0x7f0000000280)=@string={0xa3, 0x3, "4eb6dd145b07c5307090de60604b790b82979ddf6a47d131ab410d815c34ba33b428cd25d2cfa82df36a7cc6773ac709f2d2a00fa6cd32e77c82f9b0b54621616f8e29e81b63f5ef2cb2887097d4a918ca8df1835dd3e60ca37aeb39d50e361695a82d8485f1d6dc2686fafb4e5bec8078caaf712d453e3fc632867c6332edb793351bc8b054ba23c2a662ddcd2636ed6488db4448d1278706259dc5063e0544dc"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c0a}}]}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000019400)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000019480)={0x0, 0x0, 0x0}, 0x0, 0x40000122}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x1000, 0x7) (async) mount(&(0x7f0000000ac0)=@filename='ubi:0\x00', &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='ubifs\x00', 0x0, 0x0) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000010c0)='ubi:0\x00', &(0x7f0000001100), &(0x7f0000001140)=@v2={0x2000000, [{0xa, 0x8}, {0x2, 0x8}]}, 0x14, 0x2) mount(&(0x7f0000000980)=@loop={'/dev/loop', 0x0}, &(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='btrfs\x00', 0x0, &(0x7f0000000a40)='acl') (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x6, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x1000, 0x3, 0x6, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1fd, 0x8000, 0x3ff, 0x3, 0xd, 0xeeec, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xa, 0x4, 0x200002, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0xa, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x1, 0x800, 0xffff, 0x0, 0x96, 0xfffffffd, 0x101, 0xfffffffd, 0x2, 0xffffffff, 0x10, 0x3, 0x379, 0x9, 0xc, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x7, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x179, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x2, 0x8, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x0, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0xfffffff6, 0x5, 0xf, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x8, 0x7ff, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7fffffff, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xb, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) r6 = syz_open_dev$vbi(&(0x7f0000000b80), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000bc0)={0x0, @bt={0xf01, 0x480, 0x1, 0x7, 0xd59f82, 0x19f2, 0x3f, 0x9ef, 0x3, 0x4, 0x2800, 0x2800, 0x3, 0xce, 0x4, 0x1a, {0x8, 0xfffffff7}, 0xd0, 0xd}}) (async, rerun: 64) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001040)={r8, &(0x7f0000001080)="9606182f"}, 0x20) (async) ioctl$UI_DEV_CREATE(r5, 0x5501) (async) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/196, 0xc4}], 0x1, &(0x7f0000000dc0)=""/101, 0x65}, 0x20102) (async) readv(r5, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/134, 0x86}], 0x1) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000194c0), r0) 967.905442ms ago: executing program 2 (id=321): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}}, 0x24}}, 0x4040004) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x4ae60) (async) r5 = syz_open_dev$hidraw(&(0x7f0000000640), 0x0, 0xaa001) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000680)) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000400)={0xfffffffffffffbf7, 0x1, 0x5, 0x0, 0x4, 0x7ffe, '\x00', 0xbd, 0x56, 0xc0, 0xfa, 0x9, 0x1}) (async) ppoll(&(0x7f0000000440)=[{r4, 0x4060}], 0x1, 0x0, 0x0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0c8}, 0x4008001) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace$poke(0x5, r7, &(0x7f00000006c0), 0x9) (async) getpgid(r7) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000500), 0x4) getpgid(0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000540)={0x2, &(0x7f0000000580)=[{0x8, 0x0, 0xff, 0x8}, {0x5, 0x4, 0x7, 0x7}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x4247f000) 331.937843ms ago: executing program 3 (id=322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="516c2a46a3d290a6d3b5f8f7526062b76e66a52a2284cd0f4f5879ec5266d74ebf898ffab38982ffdd6e6c989391094978f10391a0c0b92213dbe7128bab8ada9817e1385a76", 0x46}, {&(0x7f0000000240)="0375cfa1a24adcaf2bc2d86890c86c7d3846b7640ffbb8fa6f8077c169d6d5b82679a60c2b919fd127857947d081327597bbf8e2d8d993f9d3229dce003044bcb12c1097fecb756ca2106dae4733b3a23df0f23ebb7763f7db174a9c7950ba3fda0ecc19c0c8a919cae0334a90f1188f1cf61dd4caa8e1a13b21f316435207a7ea52b56adafc1b72410bb83bcbc45d5c9f33c2c57b754a114ec97881d5430ef0b55113809e0b3ae8d1363bf1a58f7deb703d1c91e84566c0ea4cadbd7408362fc0b1d50a903ea8f5e96612156955aa42b7e337", 0xd3}], 0x2, 0xa) setns(0xc9, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@phonet, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100100}, 0x4) 331.64124ms ago: executing program 3 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000f8ffffffffffffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7030000080000547d03000000000000850000003300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 262.635432ms ago: executing program 3 (id=324): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb09143e, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 64) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9c10, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) write(r1, &(0x7f0000000480)="8b402dc6bcb3f35cd98fcca9e7fd50fdf91ae8c433c874a4f9e492d9fd9b337e834679094d0d7977d2cdf37a8ec74f55a7a27f85ea9f904d1d3702ed87d9ee3ee6eaf67800fc288d1df87c5282404139f12019e0f219c5fd5ebe16723101080891a9bcd3e7552f99180a4138a6850952006886491b1ace909f3754243fee3beb76d9c0777d9a40697d661797e6fd0225660f7dfd43861944d6678c786067bdd142a311eb34d7846001ff001d4a314712a9997faea5e9651661d37e8b0af7b6d2c34330c5e76d3c257b3ee4ddd5ac3efcaffc4e8f", 0xd4) (async) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x1f8, 0x138, 0x1, 0x0, 0x28a00, 0x0, 0x0, @by_dev={r2}, [@crypt={0x0, 0x10, 0x0, 0xc0, 'crypt\x00', {'capi:rfc7539(chacha20,poly1305)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 1 sector_size:1024'}}]}) (async, rerun: 64) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0x2) (async) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000440)='./dm1\x00', 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r3, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) syz_fuse_handle_req(r3, &(0x7f0000002700)="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", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000004a40)={0x2020}, 0x2020) (async) write$FUSE_INIT(r3, &(0x7f0000004800)={0x50, 0x0, r4, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000004880)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r6, 0xa64c000) write$FUSE_STATX(r6, &(0x7f00000048c0)={0x130, 0x0, r4, {0x6, 0x200000, 0x0, '\x00', {0x100, 0x35b, 0x16, 0x8, r5, 0x0, 0xc000, '\x00', 0x1, 0x40e, 0xac7, 0x46f71f04, {0x9, 0x1}, {0x4, 0xf}, {0x86e0, 0xffff}, {0x9, 0x7e}, 0xc0, 0xd8, 0x6, 0xfffffff9}}}, 0x130) ioctl$CDROMVOLCTRL(r6, 0x530a, &(0x7f0000004a00)={0x8, 0xf9, 0x9, 0xd}) ioctl$TCFLSH(r0, 0x800455ca, 0x4) 182.507959ms ago: executing program 3 (id=325): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]}) ppoll(&(0x7f0000000400)=[{r0, 0x80}], 0x1, &(0x7f0000000440), 0x0, 0x0) (async) socket(0x10, 0x802, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(r1, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x2a0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f00000002c0)}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_newrule={0x6c, 0x20, 0x400, 0x70bd2c, 0x25dfdbfd, {0xa, 0x10, 0x20, 0xb, 0xd, 0x0, 0x0, 0x4, 0x10001}, [@FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x6c}}, 0x0) (async) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) preadv(r4, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2) 182.186048ms ago: executing program 3 (id=326): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x0, 0x0, @any, 0x0, @none, 0x2}}}}, 0x14) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 72.049952ms ago: executing program 2 (id=327): r0 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xfffffffffffffe51, 0x80800) syncfs(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) truncate(&(0x7f0000000340)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x4000000040003e4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x8800, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d7072656665373cf43fc1484c292c00"]) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0x4, 0x7, 0x7, 0x80000000}, 0x10) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000001c0)=0x40000) mkdirat(r2, &(0x7f0000000380)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x80) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xfffffffffffffe51, 0x80800) (async) syncfs(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) (async) truncate(&(0x7f0000000340)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x5) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) (async) write(r2, &(0x7f0000000300)='1', 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x4000000040003e4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x8800, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d7072656665373cf43fc1484c292c00"]) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0x4, 0x7, 0x7, 0x80000000}, 0x10) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000001c0)=0x40000) (async) mkdirat(r2, &(0x7f0000000380)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x80) (async) 0s ago: executing program 2 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20010085}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40071}, 0x20009005) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20010085}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40071}, 0x20009005) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a00000408000c400000000708000540000000020900030073797a320000000008000a40fffffffc0400128011100b400000000003b5080040b60000ec50140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a00000408000c400000000708000540000000020900030073797a320000000008000a40fffffffc0400128011100b400000000003b5080040b60000ec50140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5b22427c1000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a30000000004000f8ff020a010400000000000000000200000a0900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000006c000000060a010400000000007a30000000000900020073797a30000000004000048020000180070001006374000014000280080001400000010108000240000000001c0001800b00010071756575650000000c0002800600014000000000140000001100010000000000000000000200000a00"/244], 0xf4}}, 0x1) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r4, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f00000001c0)=@t={0x81, 0x5, 0x6, 0x0, @generic=0xfffffffe}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f00000001c0)=@t={0x81, 0x5, 0x6, 0x0, @generic=0xfffffffe}) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x1000, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x1000, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000009c0), 0x141103, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000a00), 0x2, 0x141102) writev(r6, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2) (async) writev(r6, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000ac0), 0x77, 0x111b01) syz_open_dev$usbfs(&(0x7f0000000b00), 0x206, 0x20182) (async) syz_open_dev$usbfs(&(0x7f0000000b00), 0x206, 0x20182) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:15754' (ED25519) to the list of known hosts. [ 40.039452][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 40.039467][ T42] audit: type=1400 audit(1793348024.550:138): avc: denied { name_bind } for pid=5767 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.070974][ T42] audit: type=1400 audit(1793348024.580:139): avc: denied { execute } for pid=5768 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.071774][ T42] audit: type=1400 audit(1793348024.580:140): avc: denied { execute_no_trans } for pid=5768 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.435420][ T42] audit: type=1400 audit(1793348026.940:141): avc: denied { mounton } for pid=5768 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.439122][ T42] audit: type=1400 audit(1793348026.940:142): avc: denied { mount } for pid=5768 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.440025][ T5768] cgroup: Unknown subsys name 'net' [ 42.454077][ T42] audit: type=1400 audit(1793348026.960:143): avc: denied { unmount } for pid=5768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.553099][ T5768] cgroup: Unknown subsys name 'cpuset' [ 42.557611][ T5768] cgroup: Unknown subsys name 'rlimit' [ 42.702134][ T42] audit: type=1400 audit(1793348027.210:144): avc: denied { setattr } for pid=5768 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.702636][ T42] audit: type=1400 audit(1793348027.210:145): avc: denied { create } for pid=5768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.702869][ T42] audit: type=1400 audit(1793348027.210:146): avc: denied { write } for pid=5768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.703189][ T42] audit: type=1400 audit(1793348027.210:147): avc: denied { read } for pid=5768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.758073][ T5773] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.522819][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.352592][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 47.352605][ T42] audit: type=1400 audit(1793348031.860:154): avc: denied { execmem } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.575806][ T42] audit: type=1400 audit(1793348032.080:155): avc: denied { create } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.575856][ T42] audit: type=1400 audit(1793348032.080:156): avc: denied { read write } for pid=5779 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.576190][ T42] audit: type=1400 audit(1793348032.080:157): avc: denied { open } for pid=5779 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.587447][ T42] audit: type=1400 audit(1793348032.090:158): avc: denied { ioctl } for pid=5779 comm="syz-executor" path="socket:[1584]" dev="sockfs" ino=1584 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.599469][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.600745][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.601645][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.604122][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.604735][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.617365][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.619645][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.620417][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.621141][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.621857][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.622358][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.622570][ T42] audit: type=1400 audit(1793348032.120:159): avc: denied { read } for pid=5779 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.622613][ T42] audit: type=1400 audit(1793348032.120:160): avc: denied { open } for pid=5779 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.622648][ T42] audit: type=1400 audit(1793348032.120:161): avc: denied { mounton } for pid=5779 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.622682][ T42] audit: type=1400 audit(1793348032.130:162): avc: denied { module_request } for pid=5779 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.623484][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.625261][ T69] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.630830][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.631970][ T42] audit: type=1400 audit(1793348032.140:163): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.636044][ T69] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.663482][ T69] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.664895][ T69] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.665331][ T69] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.666289][ T69] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.666987][ T69] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.856254][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.858518][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.865832][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.870145][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.893375][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.938971][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.004773][ T5779] infiniband rxe0: set active [ 48.005124][ T81] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.005513][ T5779] infiniband rxe0: added rxe_eth0 [ 48.014891][ T5779] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 48.014912][ T5779] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 48.014932][ T5779] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 48.033578][ T5779] RDS/IB: rxe0: added [ 48.033947][ T5779] smc: adding ib device rxe0 with port count 1 [ 48.034037][ T5779] smc: ib device rxe0 port 1 has no pnetid [ 48.056989][ T81] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.080143][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.210970][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.299845][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.299924][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.300014][ T5792] bridge_slave_0: entered allmulticast mode [ 48.301385][ T5792] bridge_slave_0: entered promiscuous mode [ 48.304466][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.304551][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.304796][ T5792] bridge_slave_1: entered allmulticast mode [ 48.305934][ T5792] bridge_slave_1: entered promiscuous mode [ 48.308586][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.355948][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.366449][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.366492][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.366545][ T5783] bridge_slave_0: entered allmulticast mode [ 48.368096][ T5783] bridge_slave_0: entered promiscuous mode [ 48.370211][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.370333][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.370418][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.370467][ T5783] bridge_slave_1: entered allmulticast mode [ 48.371268][ T5783] bridge_slave_1: entered promiscuous mode [ 48.396277][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.408566][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.414555][ T5792] team0: Port device team_slave_0 added [ 48.435700][ T5792] team0: Port device team_slave_1 added [ 48.436574][ T5783] team0: Port device team_slave_0 added [ 48.455892][ T5783] team0: Port device team_slave_1 added [ 48.492840][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.492852][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.492864][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.493599][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.497345][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.497353][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.497365][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.498253][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.498260][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.498272][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.503554][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.503629][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.503757][ T5782] bridge_slave_0: entered allmulticast mode [ 48.504980][ T5782] bridge_slave_0: entered promiscuous mode [ 48.507660][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.507673][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.507692][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.529579][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.529621][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.529673][ T5782] bridge_slave_1: entered allmulticast mode [ 48.530507][ T5782] bridge_slave_1: entered promiscuous mode [ 48.572199][ T5783] hsr_slave_0: entered promiscuous mode [ 48.572738][ T5783] hsr_slave_1: entered promiscuous mode [ 48.596685][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.602513][ T5792] hsr_slave_0: entered promiscuous mode [ 48.602962][ T5792] hsr_slave_1: entered promiscuous mode [ 48.603266][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 48.603644][ T5792] Cannot create hsr debugfs directory [ 48.616430][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.690001][ T5782] team0: Port device team_slave_0 added [ 48.691603][ T5782] team0: Port device team_slave_1 added [ 48.750989][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.751005][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.751023][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.772532][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.772547][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.772565][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.860551][ T5782] hsr_slave_0: entered promiscuous mode [ 48.861059][ T5782] hsr_slave_1: entered promiscuous mode [ 48.862214][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 48.862241][ T5782] Cannot create hsr debugfs directory [ 49.018218][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.018306][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.018360][ T5779] bridge_slave_0: entered allmulticast mode [ 49.019383][ T5779] bridge_slave_0: entered promiscuous mode [ 49.020517][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.024512][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.024907][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.029068][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.039994][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.040087][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.040178][ T5779] bridge_slave_1: entered allmulticast mode [ 49.041193][ T5779] bridge_slave_1: entered promiscuous mode [ 49.049019][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.051706][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.052210][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.055376][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.077341][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.095314][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.135087][ T5779] team0: Port device team_slave_0 added [ 49.136495][ T5779] team0: Port device team_slave_1 added [ 49.154925][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.157746][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.159606][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.159618][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.159636][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.166256][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.169108][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.169808][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.169817][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.169829][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.181437][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.189715][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.209479][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.213000][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.222728][ T5779] hsr_slave_0: entered promiscuous mode [ 49.223161][ T5779] hsr_slave_1: entered promiscuous mode [ 49.223471][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 49.223482][ T5779] Cannot create hsr debugfs directory [ 49.273476][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.275705][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.276244][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.277882][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.278498][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.282929][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.286636][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.290737][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.387512][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.431013][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.434228][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.438798][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.438904][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.458217][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.458320][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.485193][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.490684][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.491515][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.496252][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.505571][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.510231][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.511351][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.516074][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.520016][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.524990][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.547802][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.547865][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.571494][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.571606][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.589427][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.603847][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.603932][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.630516][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.630597][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.640254][ T69] Bluetooth: hci1: command tx timeout [ 49.640446][ T69] Bluetooth: hci0: command tx timeout [ 49.728961][ T5141] Bluetooth: hci3: command tx timeout [ 49.729973][ T5141] Bluetooth: hci2: command tx timeout [ 49.742348][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.755276][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.768379][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.768426][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.776520][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.776570][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.910648][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.960149][ T5783] veth0_vlan: entered promiscuous mode [ 49.967800][ T5783] veth1_vlan: entered promiscuous mode [ 49.988350][ T5783] veth0_macvtap: entered promiscuous mode [ 49.993086][ T5783] veth1_macvtap: entered promiscuous mode [ 50.010747][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.020685][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.026257][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.046277][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.133635][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.136961][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.136979][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.144778][ T5792] veth0_vlan: entered promiscuous mode [ 50.149035][ T5779] veth0_vlan: entered promiscuous mode [ 50.166999][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.167014][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.168255][ T5792] veth1_vlan: entered promiscuous mode [ 50.170687][ T5779] veth1_vlan: entered promiscuous mode [ 50.179629][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.179896][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.179917][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.179935][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.213453][ T5779] veth0_macvtap: entered promiscuous mode [ 50.220437][ T5792] veth0_macvtap: entered promiscuous mode [ 50.228233][ T5792] veth1_macvtap: entered promiscuous mode [ 50.229678][ T5779] veth1_macvtap: entered promiscuous mode [ 50.232493][ T5782] veth0_vlan: entered promiscuous mode [ 50.239931][ T5782] veth1_vlan: entered promiscuous mode [ 50.247753][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.257090][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.263355][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.265282][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.284982][ T5783] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.330279][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.330296][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.335323][ T5782] veth0_macvtap: entered promiscuous mode [ 50.347946][ T5782] veth1_macvtap: entered promiscuous mode [ 50.359234][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.359261][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.390616][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.391774][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.391785][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.416801][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.417201][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.417215][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.446118][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.446138][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.504239][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.504252][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.521610][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.521879][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.522193][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.522457][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.522663][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.522920][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.537442][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.537460][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.569052][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.570084][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.570112][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.570139][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.672706][ T5948] raw_sendmsg: syz.1.2 forgot to set AF_INET. Fix it! [ 50.677767][ T5948] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.677788][ T5948] overlayfs: failed to set xattr on upper [ 50.677795][ T5948] overlayfs: ...falling back to redirect_dir=nofollow. [ 50.677801][ T5948] overlayfs: ...falling back to index=off. [ 50.677807][ T5948] overlayfs: ...falling back to uuid=null. [ 50.677812][ T5948] overlayfs: ...falling back to xino=off. [ 50.731448][ T5951] jffs2: notice: (5951) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.734885][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'. [ 50.799091][ T5962] ip_tables: iptables: counters copy to user failed while replacing table [ 50.916464][ T5972] nvme nvme0: failed to connect socket: -111 [ 50.932263][ T5972] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.933995][ T5972] CUSE: unknown device info "" [ 50.934003][ T5972] CUSE: unknown device info "" [ 50.934007][ T5972] CUSE: unknown device info "" [ 50.934011][ T5972] CUSE: unknown device info "" [ 50.934015][ T5972] CUSE: unknown device info "" [ 50.934019][ T5972] CUSE: unknown device info "" [ 50.934023][ T5972] CUSE: unknown device info "" [ 50.934026][ T5972] CUSE: DEVNAME unspecified [ 50.934804][ T5972] CUSE: unknown device info "" [ 50.934810][ T5972] CUSE: unknown device info "" [ 50.934814][ T5972] CUSE: unknown device info "" [ 50.934818][ T5972] CUSE: unknown device info "" [ 50.934821][ T5972] CUSE: zero length info key specified [ 51.145701][ T5991] netlink: 'syz.0.16': attribute type 49 has an invalid length. [ 51.152335][ T5991] bond0: (slave bond_slave_0): Releasing backup interface [ 51.202646][ T5991] bond_slave_0: entered promiscuous mode [ 51.202668][ T5991] bond_slave_0: entered allmulticast mode [ 51.585346][ T6029] FAULT_INJECTION: forcing a failure. [ 51.585346][ T6029] name failslab, interval 1, probability 0, space 0, times 1 [ 51.585374][ T6029] CPU: 2 UID: 0 PID: 6029 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 51.585387][ T6029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.585400][ T6029] Call Trace: [ 51.585409][ T6029] [ 51.585414][ T6029] dump_stack_lvl+0x100/0x190 [ 51.585438][ T6029] should_fail_ex.cold+0x5/0xa [ 51.585461][ T6029] should_failslab+0xc2/0x120 [ 51.585473][ T6029] kmem_cache_alloc_noprof+0x92/0x6a0 [ 51.585495][ T6029] ? __kernfs_new_node+0xd2/0xa10 [ 51.585522][ T6029] __kernfs_new_node+0xd2/0xa10 [ 51.585544][ T6029] ? __pfx___kernfs_new_node+0x10/0x10 [ 51.585564][ T6029] ? lock_acquire+0x1d1/0x380 [ 51.585584][ T6029] ? kernfs_root+0x23/0x2a0 [ 51.585599][ T6029] ? find_held_lock+0x2b/0x80 [ 51.585615][ T6029] ? kernfs_root+0xee/0x2a0 [ 51.585629][ T6029] ? kernfs_root+0xee/0x2a0 [ 51.585651][ T6029] kernfs_new_node+0x194/0x200 [ 51.585675][ T6029] ? __pfx_kernfs_new_node+0x10/0x10 [ 51.585699][ T6029] ? kernfs_add_one+0x213/0xb40 [ 51.585719][ T6029] __kernfs_create_file+0x53/0x350 [ 51.585737][ T6029] sysfs_add_file_mode_ns+0x207/0x3c0 [ 51.585755][ T6029] internal_create_group+0x593/0xfb0 [ 51.585779][ T6029] ? __pfx_internal_create_group+0x10/0x10 [ 51.585802][ T6029] ? kernfs_create_link+0x1f1/0x280 [ 51.585826][ T6029] internal_create_groups+0x9d/0x150 [ 51.585858][ T6029] device_add+0xf60/0x1970 [ 51.585893][ T6029] ? __pfx_device_add+0x10/0x10 [ 51.585915][ T6029] ? lockdep_init_map_type+0x5c/0x250 [ 51.585949][ T6029] ? __init_waitqueue_head+0xca/0x150 [ 51.585985][ T6029] netdev_register_kobject+0x1df/0x410 [ 51.586020][ T6029] register_netdevice+0x1313/0x26b0 [ 51.586044][ T6029] ? __pfx_register_netdevice+0x10/0x10 [ 51.586063][ T6029] ? dev_addr_mod+0x14f/0x2c0 [ 51.586086][ T6029] __tun_chr_ioctl+0x1e6e/0x4940 [ 51.586125][ T6029] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 51.586143][ T6029] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 51.586171][ T6029] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 51.586190][ T6029] ? __fget_files+0x34/0x3d0 [ 51.586211][ T6029] ? selinux_file_ioctl+0x1e0/0x290 [ 51.586232][ T6029] ? selinux_file_ioctl+0x1e7/0x290 [ 51.586253][ T6029] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 51.586268][ T6029] __x64_sys_ioctl+0x18e/0x210 [ 51.586290][ T6029] do_syscall_64+0x123/0x790 [ 51.586303][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.586320][ T6029] RIP: 0033:0x7fd6f879f559 [ 51.586330][ T6029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.586346][ T6029] RSP: 002b:00007fd6f96e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.586365][ T6029] RAX: ffffffffffffffda RBX: 00007fd6f8a25fa0 RCX: 00007fd6f879f559 [ 51.586373][ T6029] RDX: 0000200000000ac0 RSI: 00000000400454ca RDI: 000000000000000b [ 51.586381][ T6029] RBP: 00007fd6f8836b20 R08: 0000000000000000 R09: 0000000000000000 [ 51.586393][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.586405][ T6029] R13: 00007fd6f8a26038 R14: 00007fd6f8a25fa0 R15: 00007ffdb957b7a8 [ 51.586421][ T6029] [ 51.719067][ T5141] Bluetooth: hci0: command tx timeout [ 51.719097][ T5141] Bluetooth: hci1: command tx timeout [ 51.799295][ T5141] Bluetooth: hci2: command tx timeout [ 51.808871][ T5141] Bluetooth: hci3: command tx timeout [ 51.905633][ T6041] bridge_slave_0: invalid flags given to default FDB implementation [ 51.945290][ T6044] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22) [ 51.945647][ T6044] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 51.950343][ T6046] Zero length message leads to an empty skb [ 51.973218][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 51.973239][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31'. [ 52.018875][ T4588] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.037918][ T6050] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 52.044672][ T6050] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 52.168976][ T4588] usb 7-1: Using ep0 maxpacket: 32 [ 52.171010][ T4588] usb 7-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 52.172845][ T4588] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.172864][ T4588] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 52.172893][ T4588] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.177437][ T4588] usb 7-1: config 0 descriptor?? [ 52.239123][ T6057] mmap: syz.3.36 (6057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.358800][ T42] kauditd_printk_skb: 1550 callbacks suppressed [ 52.358814][ T42] audit: type=1326 audit(1793348036.870:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.0.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f879f559 code=0x50000 [ 52.358836][ T42] audit: type=1326 audit(1793348036.870:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.0.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f879f559 code=0x50000 [ 52.361089][ T42] audit: type=1326 audit(1793348036.870:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.0.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f879f559 code=0x50000 [ 52.361132][ T42] audit: type=1326 audit(1793348036.870:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.0.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f879f559 code=0x50000 [ 52.361172][ T42] audit: type=1326 audit(1793348036.870:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.0.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f879f559 code=0x50000 [ 52.361204][ T42] audit: type=1326 audit(1793348036.870:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.0.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f879f559 code=0x50000 [ 52.361239][ T42] audit: type=1326 audit(1793348036.870:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.0.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f879f559 code=0x50000 [ 52.361274][ T42] audit: type=1326 audit(1793348036.870:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.0.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f879f559 code=0x50000 [ 52.361306][ T42] audit: type=1326 audit(1793348036.870:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.0.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f879f559 code=0x50000 [ 52.361340][ T42] audit: type=1326 audit(1793348036.870:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.0.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f879f559 code=0x50000 [ 52.516447][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 53.398119][ T6078] netlink: 'syz.3.41': attribute type 11 has an invalid length. [ 53.412780][ T6078] netlink: 'syz.3.41': attribute type 11 has an invalid length. [ 53.535129][ T64] IPVS: starting estimator thread 0... [ 53.535442][ T6092] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 53.618829][ T6093] IPVS: using max 46 ests per chain, 110400 per kthread [ 53.799881][ T5141] Bluetooth: hci1: command tx timeout [ 53.879173][ T5141] Bluetooth: hci3: command tx timeout [ 53.879214][ T5141] Bluetooth: hci2: command tx timeout [ 53.960706][ T5141] Bluetooth: hci0: command tx timeout [ 54.579850][ T6112] Bluetooth: MGMT ver 1.23 [ 54.580753][ T6112] Bluetooth: hci0: unsupported parameter 5134 [ 54.580768][ T6112] Bluetooth: hci0: unsupported parameter 1280 [ 54.580779][ T6112] Bluetooth: hci0: unsupported parameter 5134 [ 54.580787][ T6112] Bluetooth: hci0: unsupported parameter 1280 [ 54.583059][ T6112] ======================================================= [ 54.583059][ T6112] WARNING: The mand mount option has been deprecated and [ 54.583059][ T6112] and is ignored by this kernel. Remove the mand [ 54.583059][ T6112] option from the mount to silence this warning. [ 54.583059][ T6112] ======================================================= [ 54.583624][ T6112] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 54.583639][ T6112] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 54.583653][ T6112] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 54.742487][ T5869] usb 7-1: USB disconnect, device number 2 [ 54.928864][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 55.059239][ T9] usb 6-1: device descriptor read/64, error -71 [ 55.118813][ T5869] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.268900][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 55.271534][ T5869] usb 7-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 55.273005][ T5869] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 55.273025][ T5869] usb 7-1: config 0 has no interface number 0 [ 55.273054][ T5869] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 55.273073][ T5869] usb 7-1: config 0 interface 196 has no altsetting 0 [ 55.275012][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.275031][ T5869] usb 7-1: Product: syz [ 55.275044][ T5869] usb 7-1: Manufacturer: syz [ 55.275055][ T5869] usb 7-1: SerialNumber: syz [ 55.276383][ T5869] usb 7-1: config 0 descriptor?? [ 55.276829][ T6122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.277632][ T6124] capability: warning: `syz.0.53' uses 32-bit capabilities (legacy support in use) [ 55.308936][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 55.438841][ T9] usb 6-1: device descriptor read/64, error -71 [ 55.523852][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.59'. [ 55.549460][ T9] usb usb6-port1: attempt power cycle [ 55.594615][ T6148] device-mapper: table: 248:1: integrity: Bitmap mode can be only used with internal hash (-EINVAL) [ 55.594631][ T6148] device-mapper: ioctl: error adding target to table [ 55.722074][ T6153] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 55.722088][ T6153] netlink: 244 bytes leftover after parsing attributes in process `syz.3.64'. [ 55.722436][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 55.888757][ T5141] Bluetooth: hci1: command tx timeout [ 55.898871][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 55.919975][ T9] usb 6-1: device descriptor read/8, error -71 [ 55.961477][ T69] Bluetooth: hci2: command tx timeout [ 55.961520][ T5141] Bluetooth: hci3: command tx timeout [ 56.065747][ T5869] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 56.111605][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 56.169881][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 56.207047][ T9] usb 6-1: device descriptor read/8, error -71 [ 56.309918][ T9] usb usb6-port1: unable to enumerate USB device [ 56.492835][ T5869] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 56.500577][ T5869] usb 7-1: USB disconnect, device number 3 [ 56.651847][ T5869] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 57.164489][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.76'. [ 57.190298][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.76'. [ 57.190316][ T6200] nbd: nbd64 already in use [ 57.276263][ T5789] udevd[5789]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 57.376002][ T42] kauditd_printk_skb: 28958 callbacks suppressed [ 57.376017][ T42] audit: type=1400 audit(1793348041.880:30682): avc: denied { setopt } for pid=6211 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.376041][ T42] audit: type=1400 audit(1793348041.880:30683): avc: denied { read write } for pid=6211 comm="syz.2.79" name="video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.378050][ T42] audit: type=1400 audit(1793348041.880:30684): avc: denied { open } for pid=6211 comm="syz.2.79" path="/dev/video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.378077][ T42] audit: type=1400 audit(1793348041.880:30685): avc: denied { ioctl } for pid=6211 comm="syz.2.79" path="/dev/video3" dev="devtmpfs" ino=956 ioctlcmd=0xc058560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.378096][ T42] audit: type=1400 audit(1793348041.880:30686): avc: denied { read } for pid=6211 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.378850][ T42] audit: type=1400 audit(1793348041.880:30687): avc: denied { bind } for pid=6211 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.379230][ T42] audit: type=1400 audit(1793348041.880:30688): avc: denied { write } for pid=6211 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.383018][ T6215] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 57.383609][ T42] audit: type=1400 audit(1793348041.890:30689): avc: denied { mounton } for pid=6211 comm="syz.2.79" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 57.478229][ T42] audit: type=1400 audit(1793348041.980:30690): avc: denied { listen } for pid=6226 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.502678][ T42] audit: type=1400 audit(1793348042.010:30691): avc: denied { shutdown } for pid=6226 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.582574][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 57.583431][ T6229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6229 comm=syz.3.83 [ 57.872241][ T6249] evm: overlay not supported [ 57.916624][ T6251] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 57.916651][ T6251] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 58.219085][ T41] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.279156][ T6291] bridge_slave_1: left allmulticast mode [ 58.279183][ T6291] bridge_slave_1: left promiscuous mode [ 58.279397][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.285700][ T6291] bridge_slave_0: left allmulticast mode [ 58.285717][ T6291] bridge_slave_0: left promiscuous mode [ 58.286864][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.331153][ T6295] netlink: 'syz.2.98': attribute type 1 has an invalid length. [ 58.332186][ T6296] openvswitch: netlink: IP tunnel dst address not specified [ 58.332285][ T6296] openvswitch: netlink: IP tunnel dst address not specified [ 58.332366][ T6296] openvswitch: netlink: IP tunnel dst address not specified [ 58.332445][ T6296] openvswitch: netlink: IP tunnel dst address not specified [ 58.332522][ T6296] openvswitch: netlink: IP tunnel dst address not specified [ 58.332603][ T6296] openvswitch: netlink: IP tunnel dst address not specified [ 58.332680][ T6296] openvswitch: netlink: IP tunnel dst address not specified [ 58.332757][ T6296] openvswitch: netlink: IP tunnel dst address not specified [ 58.332833][ T6296] openvswitch: netlink: IP tunnel dst address not specified [ 58.332910][ T6296] openvswitch: netlink: IP tunnel dst address not specified [ 58.349407][ T41] usb 8-1: device descriptor read/64, error -71 [ 58.369802][ T6302] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 58.369816][ T6302] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.372533][ T6302] vhci_hcd vhci_hcd.0: Device attached [ 58.377102][ T6302] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 58.377124][ T6302] CIFS mount error: No usable UNC path provided in device string! [ 58.377124][ T6302] [ 58.377215][ T6302] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 58.377358][ T6304] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 58.379313][ T5883] vhci_hcd vhci_hcd.2: stop threads [ 58.379331][ T5883] vhci_hcd vhci_hcd.2: release socket [ 58.379344][ T5883] vhci_hcd vhci_hcd.2: disconnect device [ 58.474498][ T6312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6312 comm=syz.0.99 [ 58.546980][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 58.588778][ T41] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.608891][ T6292] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 58.728828][ T41] usb 8-1: device descriptor read/64, error -71 [ 58.760539][ T6292] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.761062][ T6292] usb 7-1: config 0 has no interfaces? [ 58.761079][ T6292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.762709][ T6292] usb 7-1: config 0 descriptor?? [ 58.839262][ T41] usb usb8-port1: attempt power cycle [ 58.964577][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.966688][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.967184][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.967358][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.967803][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.967995][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.968378][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.968546][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.973494][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.973702][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.983368][ T9] usb 7-1: USB disconnect, device number 4 [ 59.178837][ T41] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 59.199465][ T41] usb 8-1: device descriptor read/8, error -71 [ 59.346095][ T6320] pim6reg: entered allmulticast mode [ 59.351623][ T6322] IPVS: ip_vs_add_dest(): server weight less than zero [ 59.351786][ T37] IPVS: starting estimator thread 0... [ 59.351881][ T6320] netlink: 'syz.0.104': attribute type 4 has an invalid length. [ 59.438870][ T6323] IPVS: using max 45 ests per chain, 108000 per kthread [ 59.448902][ T41] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 59.455797][ T6329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.469184][ T41] usb 8-1: device descriptor read/8, error -71 [ 59.503961][ T66] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.549884][ T6335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.589933][ T41] usb usb8-port1: unable to enumerate USB device [ 59.626214][ T6335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.701209][ T6335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.753695][ T6335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.868857][ T5883] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.888828][ T5883] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.888852][ T5883] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.888869][ T5883] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.331371][ T6347] CUSE: unknown device info "" [ 60.331383][ T6347] CUSE: unknown device info "" [ 60.331387][ T6347] CUSE: unknown device info "" [ 60.331391][ T6347] CUSE: unknown device info "" [ 60.331394][ T6347] CUSE: zero length info key specified [ 60.447145][ T6351] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 60.447168][ T6351] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 60.447190][ T6351] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 60.471192][ T6351] netlink: 14 bytes leftover after parsing attributes in process `syz.2.114'. [ 60.477702][ T6351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.490723][ T6351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.494430][ T79] smbdirect: ib_dev[syz1] removed [ 60.494608][ T6351] bond0 (unregistering): Released all slaves [ 60.513331][ T5891] infiniband syz1: ib_query_port failed (-19) [ 61.107215][ T6386] xt_cluster: node mask cannot exceed total number of nodes [ 61.134068][ T6389] bond1 (unregistering): Released all slaves [ 61.398864][ T5141] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 61.398937][ T69] Bluetooth: hci0: command 0x0c3a tx timeout [ 61.414181][ T6397] syzkaller0: entered promiscuous mode [ 61.414195][ T6397] syzkaller0: entered allmulticast mode [ 61.428168][ T6399] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 61.428182][ T6399] nbd: error processing sock list [ 61.446336][ T6399] block nbd0: NBD_DISCONNECT [ 61.513430][ T6404] xt_cluster: node mask cannot exceed total number of nodes [ 61.633048][ T6411] netlink: 8216 bytes leftover after parsing attributes in process `syz.0.131'. [ 61.665715][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.665755][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.665787][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.665814][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.665840][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.665867][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.665894][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.665931][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.665969][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.665996][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666022][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666049][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666076][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666102][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666128][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666155][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666181][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666206][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666238][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666268][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666294][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666320][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666346][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666372][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666397][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666423][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666449][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666484][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666518][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666546][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666574][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666600][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666626][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666651][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666678][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666717][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666743][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666769][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666795][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666821][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666847][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666872][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666899][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666926][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666960][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.666995][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667021][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667051][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667078][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667104][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667130][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667156][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667182][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667209][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667281][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667309][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667335][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667361][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667387][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667412][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667440][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667466][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667525][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667557][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.667583][ T5141] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 61.708230][ T6416] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.708247][ T6416] overlayfs: failed to set xattr on upper [ 61.708250][ T6416] overlayfs: ...falling back to redirect_dir=nofollow. [ 61.708254][ T6416] overlayfs: ...falling back to index=off. [ 61.708258][ T6416] overlayfs: ...falling back to uuid=null. [ 61.708261][ T6416] overlayfs: ...falling back to xino=off. [ 61.729550][ T6414] netlink: 'syz.0.132': attribute type 49 has an invalid length. [ 61.729728][ T6414] netlink: 'syz.0.132': attribute type 49 has an invalid length. [ 61.729892][ T6414] netlink: 'syz.0.132': attribute type 49 has an invalid length. [ 61.730047][ T6414] netlink: 'syz.0.132': attribute type 49 has an invalid length. [ 61.730197][ T6414] netlink: 'syz.0.132': attribute type 49 has an invalid length. [ 61.730368][ T6414] netlink: 'syz.0.132': attribute type 49 has an invalid length. [ 61.730517][ T6414] netlink: 'syz.0.132': attribute type 49 has an invalid length. [ 62.424363][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 62.424390][ T42] audit: type=1400 audit(1793348046.930:30736): avc: denied { watch } for pid=6434 comm="syz.0.139" path="/48/control" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.444414][ T42] audit: type=1400 audit(1793348046.950:30737): avc: denied { create } for pid=6434 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.450588][ T42] audit: type=1400 audit(1793348046.950:30738): avc: denied { bind } for pid=6434 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.487306][ T42] audit: type=1400 audit(1793348046.990:30739): avc: denied { read write } for pid=6436 comm="syz.3.137" name="uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.487597][ T42] audit: type=1400 audit(1793348046.990:30740): avc: denied { open } for pid=6436 comm="syz.3.137" path="/dev/uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.515817][ T42] audit: type=1400 audit(1793348047.020:30741): avc: denied { setattr } for pid=6439 comm="syz.0.140" name="sr0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 62.517970][ T66] nintendo 0005:057E:2017.0002: hidraw1: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 62.607187][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 62.804834][ T42] audit: type=1400 audit(1793348047.310:30742): avc: denied { node_bind } for pid=6451 comm="syz.0.144" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 62.825708][ T42] audit: type=1400 audit(1793348047.330:30743): avc: denied { write } for pid=6449 comm="syz.1.143" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.826090][ T6450] random: crng reseeded on system resumption [ 62.826911][ T42] audit: type=1400 audit(1793348047.330:30744): avc: denied { open } for pid=6449 comm="syz.1.143" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.838212][ T6450] omfs: Invalid superblock (0) [ 62.851323][ T42] audit: type=1400 audit(1793348047.360:30745): avc: denied { write } for pid=6453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.035957][ T6472] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 63.035990][ T6472] overlayfs: overlapping lowerdir path [ 63.439669][ T9] wiimote 0005:057E:0306.0003: hidraw2: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 63.440815][ T9] wiimote 0005:057E:0306.0003: New device registered (Wiimote 1) [ 63.678852][ T29] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 63.683134][ T6487] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 63.684590][ T6487] bond1 (unregistering): Released all slaves [ 63.803997][ T6499] comedi comedi1: pc212e: a I/O base address must be specified [ 63.877219][ T6501] process 'syz.0.154' launched '/dev/fd/10' with NULL argv: empty string added [ 64.045858][ T5883] tipc: Subscription rejected, illegal request [ 64.099537][ T6509] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 64.100527][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 64.108032][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 64.108651][ T29] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 64.110131][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 64.110149][ T29] usb 6-1: can't read configurations, error -71 [ 64.113447][ T6483] wiimote 0005:057E:0306.0003: Device removed [ 64.519048][ T9] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) (1) [ 64.531155][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input6 [ 64.551896][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input7 [ 64.562202][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input5 [ 64.651319][ T6513] validate_nla: 58 callbacks suppressed [ 64.651332][ T6513] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 64.651339][ T6513] nbd: error processing sock list [ 64.733542][ T6517] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 65.629579][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 65.863626][ T6555] overlay: ./file1/file0 is not a directory [ 65.864924][ T6555] Format for deleting device is "id" (uint). [ 65.891257][ T6555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.962110][ T6555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.014187][ T6555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.080351][ T6555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.241963][ T6569] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 66.243346][ T6569] bond1 (unregistering): Released all slaves [ 66.282396][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 66.282416][ T6571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'. [ 66.678935][ T66] nintendo 0005:057E:2017.0002: Failed to get joycon info; ret=-110 [ 66.678990][ T66] nintendo 0005:057E:2017.0002: Failed to retrieve controller info; ret=-110 [ 66.678999][ T66] nintendo 0005:057E:2017.0002: Failed to initialize controller; ret=-110 [ 66.686769][ T66] nintendo 0005:057E:2017.0002: probe - fail = -110 [ 66.686834][ T66] nintendo 0005:057E:2017.0002: probe with driver nintendo failed with error -110 [ 66.768349][ T6589] gtp0: entered allmulticast mode [ 66.768956][ T6587] syz.3.185 uses obsolete (PF_INET,SOCK_PACKET) [ 66.849454][ T5936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.861815][ T6601] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 66.861827][ T6601] nbd: error processing sock list [ 67.018821][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 67.019582][ T5936] usb 5-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 67.022176][ T6608] netlink: 144 bytes leftover after parsing attributes in process `syz.3.191'. [ 67.022188][ T6608] tc_dump_action: action bad kind [ 67.022427][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 67.022447][ T5936] usb 5-1: Product: syz [ 67.022460][ T5936] usb 5-1: Manufacturer: syz [ 67.022472][ T5936] usb 5-1: SerialNumber: syz [ 67.030757][ T5936] usb 5-1: config 0 descriptor?? [ 67.110634][ T6292] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.282228][ T6619] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 67.284096][ T6292] usb 7-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 67.288466][ T6292] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.288485][ T6292] usb 7-1: Product: syz [ 67.288496][ T6292] usb 7-1: Manufacturer: syz [ 67.288506][ T6292] usb 7-1: SerialNumber: syz [ 67.337673][ T41] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 67.511945][ T81] usb 5-1: USB disconnect, device number 2 [ 67.542858][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 67.542882][ T42] audit: type=1400 audit(1793348052.050:30788): avc: denied { create } for pid=6598 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.542917][ T42] audit: type=1400 audit(1793348052.050:30789): avc: denied { setopt } for pid=6598 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.549780][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 67.579218][ T24] usb 7-1: USB disconnect, device number 5 [ 67.594104][ T6628] veth0_to_bond: entered allmulticast mode [ 67.603236][ T6628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6628 comm=syz.0.196 [ 67.638091][ T42] audit: type=1400 audit(1793348052.140:30790): avc: denied { write } for pid=6629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.658340][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 67.659044][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 67.665404][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 67.665539][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 67.692414][ T6632] ceph: No mds server is up or the cluster is laggy [ 67.698434][ T6641] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 67.707566][ T42] audit: type=1400 audit(1793348052.210:30791): avc: denied { write } for pid=6639 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.716190][ T42] audit: type=1400 audit(1793348052.220:30792): avc: denied { mount } for pid=6640 comm="syz.3.199" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.780560][ T42] audit: type=1400 audit(1793348052.290:30793): avc: denied { unmount } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.787869][ T42] audit: type=1400 audit(1793348052.290:30794): avc: denied { write } for pid=6643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.796990][ T42] audit: type=1400 audit(1793348052.310:30795): avc: denied { create } for pid=6647 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.798455][ T42] audit: type=1400 audit(1793348052.310:30796): avc: denied { write } for pid=6647 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.799717][ T42] audit: type=1400 audit(1793348052.310:30797): avc: denied { getopt } for pid=6647 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.839394][ T6660] kernel profiling enabled (shift: 9) [ 68.032541][ T66] libceph: connect (1)[c::]:6789 error -101 [ 68.032694][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 68.079511][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 68.079630][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 68.081458][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 68.081551][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 68.291068][ T66] libceph: connect (1)[c::]:6789 error -101 [ 68.291281][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 68.350035][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 68.350210][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 68.368861][ T41] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 68.369375][ T41] ath9k_htc: Failed to initialize the device [ 68.371741][ T24] usb 7-1: ath9k_htc: USB layer deinitialized [ 68.487548][ T6694] Console: switching to colour dummy device 80x25 [ 68.809392][ T66] libceph: connect (1)[c::]:6789 error -101 [ 68.809544][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 68.869148][ T41] libceph: connect (1)[c::]:6789 error -101 [ 68.869245][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 68.918920][ T69] Bluetooth: hci0: command 0x0c3a tx timeout [ 68.921275][ T5141] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 68.933290][ T6719] scsi_strcpy_devinfo: vendor string '4diΞ [ 68.933290][ T6719] wO۪J!+ 鷼uq!>\,쩫-,܉\<CXʃ@*f;' is too long [ 68.933305][ T6719] scsi_strcpy_devinfo: model string '̑yoMuB`HAfxu9, lt [ 68.933305][ T6719] \}1dc# 6ڣgsZ' is too long [ 68.937393][ T6719] net_ratelimit: 26 callbacks suppressed [ 68.937404][ T6719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.991126][ T6723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.215'. [ 68.997603][ T6723] netlink: 100 bytes leftover after parsing attributes in process `syz.2.215'. [ 68.998644][ T6723] netlink: 84 bytes leftover after parsing attributes in process `syz.2.215'. [ 69.039008][ T6725] fuse: Bad value for 'user_id' [ 69.039027][ T6725] fuse: Bad value for 'user_id' [ 69.056320][ T6727] overlayfs: missing 'lowerdir' [ 69.139282][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 69.295170][ T6745] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.307216][ T6745] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.355656][ T6746] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 69.729495][ T41] libceph: connect (1)[c::]:6789 error -101 [ 69.729639][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 69.743351][ T6781] pimreg0: tun_chr_ioctl cmd 1074025676 [ 69.743370][ T6781] pimreg0: owner set to 0 [ 69.774237][ T6784] capability: warning: `syz.3.235' uses deprecated v2 capabilities in a way that may be insecure [ 69.800449][ T66] libceph: connect (1)[c::]:6789 error -101 [ 69.800961][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 69.817560][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 69.825258][ T6797] FAULT_INJECTION: forcing a failure. [ 69.825258][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 69.825275][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT(full) [ 69.825286][ T6797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.825303][ T6797] Call Trace: [ 69.825307][ T6797] [ 69.825312][ T6797] dump_stack_lvl+0x100/0x190 [ 69.825340][ T6797] should_fail_ex.cold+0x5/0xa [ 69.825356][ T6797] should_failslab+0xc2/0x120 [ 69.825372][ T6797] __kmalloc_noprof+0xfc/0x840 [ 69.825387][ T6797] ? rcu_is_watching+0x13/0xc0 [ 69.825398][ T6797] ? tomoyo_realpath_from_path+0xb6/0x690 [ 69.825412][ T6797] tomoyo_realpath_from_path+0xb6/0x690 [ 69.825426][ T6797] tomoyo_path_number_perm+0x23c/0x580 [ 69.825441][ T6797] ? tomoyo_path_number_perm+0x22e/0x580 [ 69.825456][ T6797] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 69.825476][ T6797] ? __lock_acquire+0x5c0/0x1f40 [ 69.825497][ T6797] ? __fget_files+0x34/0x3d0 [ 69.825509][ T6797] ? find_held_lock+0x2b/0x80 [ 69.825519][ T6797] ? hook_file_ioctl_common+0x140/0x440 [ 69.825534][ T6797] ? __fget_files+0x21f/0x3d0 [ 69.825549][ T6797] security_file_ioctl+0xd3/0x230 [ 69.825565][ T6797] __x64_sys_ioctl+0xb7/0x210 [ 69.825582][ T6797] do_syscall_64+0x123/0x790 [ 69.825624][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.825635][ T6797] RIP: 0033:0x7f786b99f559 [ 69.825652][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.825662][ T6797] RSP: 002b:00007f786c936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.825680][ T6797] RAX: ffffffffffffffda RBX: 00007f786bc25fa0 RCX: 00007f786b99f559 [ 69.825687][ T6797] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 69.825693][ T6797] RBP: 00007f786c936090 R08: 0000000000000000 R09: 0000000000000000 [ 69.825699][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.825705][ T6797] R13: 00007f786bc26038 R14: 00007f786bc25fa0 R15: 00007ffdb50222a8 [ 69.825719][ T6797] [ 69.825746][ T6797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.957776][ T6803] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 69.957793][ T6803] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.958588][ T6803] vhci_hcd vhci_hcd.0: Device attached [ 70.109530][ T6813] netlink: 'syz.2.241': attribute type 12 has an invalid length. [ 70.161695][ T6804] vhci_hcd: connection closed [ 70.163783][ T5883] vhci_hcd vhci_hcd.3: stop threads [ 70.164227][ T5883] vhci_hcd vhci_hcd.3: release socket [ 70.165342][ T5883] vhci_hcd vhci_hcd.3: disconnect device [ 70.208817][ T66] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 70.208876][ T66] usb 43-1: enqueue for inactive port 0 [ 70.221712][ T6817] ip_tables: iptables: counters copy to user failed while replacing table [ 70.280988][ T66] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 70.534415][ T6829] FAULT_INJECTION: forcing a failure. [ 70.534415][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 70.534452][ T6829] CPU: 3 UID: 0 PID: 6829 Comm: syz.2.246 Not tainted syzkaller #0 PREEMPT(full) [ 70.534473][ T6829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.534497][ T6829] Call Trace: [ 70.534505][ T6829] [ 70.534513][ T6829] dump_stack_lvl+0x100/0x190 [ 70.534558][ T6829] should_fail_ex.cold+0x5/0xa [ 70.534597][ T6829] should_failslab+0xc2/0x120 [ 70.534623][ T6829] __kmalloc_noprof+0xfc/0x840 [ 70.534650][ T6829] ? tomoyo_encode2+0xfb/0x3c0 [ 70.534672][ T6829] tomoyo_encode2+0xfb/0x3c0 [ 70.534694][ T6829] tomoyo_encode+0x29/0x50 [ 70.534713][ T6829] tomoyo_realpath_from_path+0x18c/0x690 [ 70.534738][ T6829] tomoyo_path_number_perm+0x23c/0x580 [ 70.534763][ T6829] ? tomoyo_path_number_perm+0x22e/0x580 [ 70.534790][ T6829] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.534826][ T6829] ? __lock_acquire+0x5c0/0x1f40 [ 70.534864][ T6829] ? __fget_files+0x34/0x3d0 [ 70.534886][ T6829] ? find_held_lock+0x2b/0x80 [ 70.534905][ T6829] ? hook_file_ioctl_common+0x140/0x440 [ 70.534934][ T6829] ? __fget_files+0x21f/0x3d0 [ 70.534959][ T6829] security_file_ioctl+0xd3/0x230 [ 70.534987][ T6829] __x64_sys_ioctl+0xb7/0x210 [ 70.535018][ T6829] do_syscall_64+0x123/0x790 [ 70.535060][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.535079][ T6829] RIP: 0033:0x7f786b99f559 [ 70.535106][ T6829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.535119][ T6829] RSP: 002b:00007f786c936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.535149][ T6829] RAX: ffffffffffffffda RBX: 00007f786bc25fa0 RCX: 00007f786b99f559 [ 70.535160][ T6829] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 70.535172][ T6829] RBP: 00007f786c936090 R08: 0000000000000000 R09: 0000000000000000 [ 70.535192][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.535202][ T6829] R13: 00007f786bc26038 R14: 00007f786bc25fa0 R15: 00007ffdb50222a8 [ 70.535228][ T6829] [ 70.535245][ T6829] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.643506][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6835 comm=syz.2.248 [ 70.676070][ T6835] veth0_to_bond: entered allmulticast mode [ 70.739900][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.251'. [ 70.740037][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.251'. [ 71.005305][ T6858] FAULT_INJECTION: forcing a failure. [ 71.005305][ T6858] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.005324][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.1.256 Not tainted syzkaller #0 PREEMPT(full) [ 71.005336][ T6858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.005342][ T6858] Call Trace: [ 71.005346][ T6858] [ 71.005350][ T6858] dump_stack_lvl+0x100/0x190 [ 71.005371][ T6858] should_fail_ex.cold+0x5/0xa [ 71.005388][ T6858] _copy_from_user+0x2e/0xd0 [ 71.005401][ T6858] ctl_ioctl+0xf3/0xcc0 [ 71.005426][ T6858] ? __pfx_ctl_ioctl+0x10/0x10 [ 71.005454][ T6858] ? selinux_file_ioctl+0x1e0/0x290 [ 71.005472][ T6858] dm_ctl_ioctl+0x22/0x30 [ 71.005484][ T6858] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 71.005498][ T6858] __x64_sys_ioctl+0x18e/0x210 [ 71.005515][ T6858] do_syscall_64+0x123/0x790 [ 71.005527][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.005538][ T6858] RIP: 0033:0x7f2e32d9f559 [ 71.005547][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.005557][ T6858] RSP: 002b:00007f2e33c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.005568][ T6858] RAX: ffffffffffffffda RBX: 00007f2e33025fa0 RCX: 00007f2e32d9f559 [ 71.005575][ T6858] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 71.005581][ T6858] RBP: 00007f2e33c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 71.005587][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.005592][ T6858] R13: 00007f2e33026038 R14: 00007f2e33025fa0 R15: 00007ffc971bac28 [ 71.005606][ T6858] [ 71.025361][ T6671] ceph: No mds server is up or the cluster is laggy [ 71.027485][ T6674] ceph: No mds server is up or the cluster is laggy [ 71.143870][ T6872] ./dev/sda1: Can't open blockdev [ 71.187704][ T6878] loop7: detected capacity change from 0 to 7 [ 71.198427][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.198502][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.200383][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.200420][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.202491][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.202525][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.203602][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.203645][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.203917][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.203948][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.204035][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.204063][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.204136][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.204163][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.204190][ T6878] ldm_validate_partition_table(): Disk read failed. [ 71.204291][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.204343][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.204428][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.204461][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.204536][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.204568][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.204672][ T6878] Dev loop7: unable to read RDB block 0 [ 71.205083][ T6878] loop7: unable to read partition table [ 71.205180][ T6878] loop7: partition table beyond EOD, truncated [ 71.205195][ T6878] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 71.328382][ T1450] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.328440][ T1450] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.369806][ T50] cfg80211: failed to load regulatory.db [ 71.418292][ T6894] FAULT_INJECTION: forcing a failure. [ 71.418292][ T6894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.418311][ T6894] CPU: 1 UID: 0 PID: 6894 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT(full) [ 71.418323][ T6894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.418329][ T6894] Call Trace: [ 71.418333][ T6894] [ 71.418338][ T6894] dump_stack_lvl+0x100/0x190 [ 71.418359][ T6894] should_fail_ex.cold+0x5/0xa [ 71.418376][ T6894] _copy_to_user+0x32/0xd0 [ 71.418389][ T6894] ctl_ioctl+0x17b/0xcc0 [ 71.418405][ T6894] ? __pfx_ctl_ioctl+0x10/0x10 [ 71.418433][ T6894] ? selinux_file_ioctl+0x1e0/0x290 [ 71.418451][ T6894] dm_ctl_ioctl+0x22/0x30 [ 71.418464][ T6894] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 71.418477][ T6894] __x64_sys_ioctl+0x18e/0x210 [ 71.418494][ T6894] do_syscall_64+0x123/0x790 [ 71.418506][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.418517][ T6894] RIP: 0033:0x7f786b99f559 [ 71.418526][ T6894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.418536][ T6894] RSP: 002b:00007f786c936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.418548][ T6894] RAX: ffffffffffffffda RBX: 00007f786bc25fa0 RCX: 00007f786b99f559 [ 71.418554][ T6894] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 71.418560][ T6894] RBP: 00007f786c936090 R08: 0000000000000000 R09: 0000000000000000 [ 71.418566][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.418572][ T6894] R13: 00007f786bc26038 R14: 00007f786bc25fa0 R15: 00007ffdb50222a8 [ 71.418585][ T6894] [ 71.421245][ T69] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1 [ 71.620675][ T6919] netlink: 256 bytes leftover after parsing attributes in process `syz.2.276'. [ 71.754116][ T6935] 9p: Bad value for 'aname' [ 71.766810][ T6936] xt_hashlimit: size too large, truncated to 1048576 [ 71.890222][ T6942] FAULT_INJECTION: forcing a failure. [ 71.890222][ T6942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.890241][ T6942] CPU: 1 UID: 0 PID: 6942 Comm: syz.2.281 Not tainted syzkaller #0 PREEMPT(full) [ 71.890254][ T6942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.890260][ T6942] Call Trace: [ 71.890264][ T6942] [ 71.890268][ T6942] dump_stack_lvl+0x100/0x190 [ 71.890291][ T6942] should_fail_ex.cold+0x5/0xa [ 71.890308][ T6942] _copy_from_user+0x2e/0xd0 [ 71.890321][ T6942] ctl_ioctl+0x289/0xcc0 [ 71.890336][ T6942] ? __pfx_table_load+0x10/0x10 [ 71.890352][ T6942] ? __pfx_ctl_ioctl+0x10/0x10 [ 71.890395][ T6942] ? selinux_file_ioctl+0x1e0/0x290 [ 71.890416][ T6942] dm_ctl_ioctl+0x22/0x30 [ 71.890429][ T6942] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 71.890442][ T6942] __x64_sys_ioctl+0x18e/0x210 [ 71.890461][ T6942] do_syscall_64+0x123/0x790 [ 71.890473][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.890484][ T6942] RIP: 0033:0x7f786b99f559 [ 71.890493][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.890504][ T6942] RSP: 002b:00007f786c936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.890515][ T6942] RAX: ffffffffffffffda RBX: 00007f786bc25fa0 RCX: 00007f786b99f559 [ 71.890535][ T6942] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 71.890541][ T6942] RBP: 00007f786c936090 R08: 0000000000000000 R09: 0000000000000000 [ 71.890547][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.890552][ T6942] R13: 00007f786bc26038 R14: 00007f786bc25fa0 R15: 00007ffdb50222a8 [ 71.890566][ T6942] [ 71.960249][ T6947] fuse: Bad value for 'group_id' [ 71.960265][ T6947] fuse: Bad value for 'group_id' [ 71.964201][ T6947] random: crng reseeded on system resumption [ 72.007060][ T6951] FAULT_INJECTION: forcing a failure. [ 72.007060][ T6951] name failslab, interval 1, probability 0, space 0, times 0 [ 72.007078][ T6951] CPU: 1 UID: 0 PID: 6951 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT(full) [ 72.007091][ T6951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.007097][ T6951] Call Trace: [ 72.007101][ T6951] [ 72.007105][ T6951] dump_stack_lvl+0x100/0x190 [ 72.007126][ T6951] should_fail_ex.cold+0x5/0xa [ 72.007141][ T6951] should_failslab+0xc2/0x120 [ 72.007153][ T6951] kmem_cache_alloc_noprof+0x92/0x6a0 [ 72.007169][ T6951] ? netlink_deliver_tap+0x103/0xb50 [ 72.007181][ T6951] ? skb_clone+0x187/0x3f0 [ 72.007196][ T6951] skb_clone+0x187/0x3f0 [ 72.007208][ T6951] netlink_deliver_tap+0x82f/0xb50 [ 72.007223][ T6951] netlink_unicast+0x708/0x950 [ 72.007237][ T6951] ? __pfx_netlink_unicast+0x10/0x10 [ 72.007253][ T6951] netlink_sendmsg+0x9ac/0x10c0 [ 72.007268][ T6951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.007285][ T6951] ? selinux_socket_sendmsg+0x198/0x2f0 [ 72.007301][ T6951] ? ____sys_sendmsg+0xa99/0xc30 [ 72.007315][ T6951] ____sys_sendmsg+0xa99/0xc30 [ 72.007327][ T6951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.007341][ T6951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.007361][ T6951] ___sys_sendmsg+0x190/0x1e0 [ 72.007377][ T6951] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.007392][ T6951] ? futex_wait+0x11e/0x370 [ 72.007411][ T6951] ? find_held_lock+0x2b/0x80 [ 72.007459][ T6951] __sys_sendmsg+0x160/0x210 [ 72.007475][ T6951] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.007495][ T6951] do_syscall_64+0x123/0x790 [ 72.007508][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.007519][ T6951] RIP: 0033:0x7f2e32d9f559 [ 72.007528][ T6951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.007538][ T6951] RSP: 002b:00007f2e33c5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.007550][ T6951] RAX: ffffffffffffffda RBX: 00007f2e33025fa0 RCX: 00007f2e32d9f559 [ 72.007557][ T6951] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 72.007563][ T6951] RBP: 00007f2e32e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 72.007570][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.007576][ T6951] R13: 00007f2e33026038 R14: 00007f2e33025fa0 R15: 00007ffc971bac28 [ 72.007591][ T6951] [ 72.210171][ T6967] kAFS: Can only specify source 'none' with -o dyn [ 72.288785][ T6972] SELinux: syz.1.288 (6972) wrote to checkreqprot. This is no longer supported. [ 72.349261][ T6977] FAULT_INJECTION: forcing a failure. [ 72.349261][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 72.349280][ T6977] CPU: 1 UID: 0 PID: 6977 Comm: syz.1.290 Not tainted syzkaller #0 PREEMPT(full) [ 72.349292][ T6977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.349298][ T6977] Call Trace: [ 72.349302][ T6977] [ 72.349306][ T6977] dump_stack_lvl+0x100/0x190 [ 72.349327][ T6977] should_fail_ex.cold+0x5/0xa [ 72.349344][ T6977] should_failslab+0xc2/0x120 [ 72.349355][ T6977] __kvmalloc_node_noprof+0x113/0x9b0 [ 72.349373][ T6977] ? ctl_ioctl+0x944/0xcc0 [ 72.349389][ T6977] ctl_ioctl+0x944/0xcc0 [ 72.349403][ T6977] ? __pfx_table_load+0x10/0x10 [ 72.349419][ T6977] ? __pfx_ctl_ioctl+0x10/0x10 [ 72.349447][ T6977] ? selinux_file_ioctl+0x1e0/0x290 [ 72.349465][ T6977] dm_ctl_ioctl+0x22/0x30 [ 72.349478][ T6977] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 72.349492][ T6977] __x64_sys_ioctl+0x18e/0x210 [ 72.349510][ T6977] do_syscall_64+0x123/0x790 [ 72.349523][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.349534][ T6977] RIP: 0033:0x7f2e32d9f559 [ 72.349543][ T6977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.349552][ T6977] RSP: 002b:00007f2e33c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.349563][ T6977] RAX: ffffffffffffffda RBX: 00007f2e33025fa0 RCX: 00007f2e32d9f559 [ 72.349576][ T6977] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 72.349582][ T6977] RBP: 00007f2e33c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 72.349588][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.349594][ T6977] R13: 00007f2e33026038 R14: 00007f2e33025fa0 R15: 00007ffc971bac28 [ 72.349607][ T6977] [ 72.406065][ T6981] __nla_validate_parse: 1 callbacks suppressed [ 72.406080][ T6981] netlink: 68 bytes leftover after parsing attributes in process `syz.1.291'. [ 72.586831][ T42] kauditd_printk_skb: 60 callbacks suppressed [ 72.586862][ T42] audit: type=1400 audit(1793348057.090:30858): avc: denied { ioctl } for pid=6991 comm="syz.2.294" path="socket:[15050]" dev="sockfs" ino=15050 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.742813][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 72.742865][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 72.902127][ T7005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.905476][ T7005] 8021q: adding VLAN 0 to HW filter on device eth0 [ 72.907857][ T7005] 8021q: adding VLAN 0 to HW filter on device eth1 [ 72.911719][ T7005] 8021q: adding VLAN 0 to HW filter on device eth2 [ 72.915745][ T7005] 8021q: adding VLAN 0 to HW filter on device eth3 [ 72.958811][ T7013] warning: `syz.1.298' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.974288][ T7015] FAULT_INJECTION: forcing a failure. [ 72.974288][ T7015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.974434][ T7015] CPU: 2 UID: 0 PID: 7015 Comm: syz.0.299 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.974450][ T7015] Tainted: [L]=SOFTLOCKUP [ 72.974453][ T7015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.974459][ T7015] Call Trace: [ 72.974463][ T7015] [ 72.974468][ T13] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 72.974468][ T7015] dump_stack_lvl+0x100/0x190 [ 72.974489][ T7015] should_fail_ex.cold+0x5/0xa [ 72.974506][ T7015] _copy_from_user+0x2e/0xd0 [ 72.974519][ T7015] ctl_ioctl+0x896/0xcc0 [ 72.974534][ T7015] ? __pfx_table_load+0x10/0x10 [ 72.974550][ T7015] ? __pfx_ctl_ioctl+0x10/0x10 [ 72.974578][ T7015] ? selinux_file_ioctl+0x1e0/0x290 [ 72.974597][ T7015] dm_ctl_ioctl+0x22/0x30 [ 72.974610][ T7015] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 72.974624][ T7015] __x64_sys_ioctl+0x18e/0x210 [ 72.974642][ T7015] do_syscall_64+0x123/0x790 [ 72.974654][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.974665][ T7015] RIP: 0033:0x7fd6f879f559 [ 72.974675][ T7015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.974684][ T7015] RSP: 002b:00007fd6f96e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.974696][ T7015] RAX: ffffffffffffffda RBX: 00007fd6f8a25fa0 RCX: 00007fd6f879f559 [ 72.974702][ T7015] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 72.974709][ T7015] RBP: 00007fd6f96e5090 R08: 0000000000000000 R09: 0000000000000000 [ 72.974715][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.974720][ T7015] R13: 00007fd6f8a26038 R14: 00007fd6f8a25fa0 R15: 00007ffdb957b7a8 [ 72.974734][ T7015] [ 73.029164][ T7012] batman_adv: batadv0: Adding interface: dummy0 [ 73.029174][ T7012] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.029189][ T7012] batman_adv: batadv0: Interface activated: dummy0 [ 73.031230][ T42] audit: type=1400 audit(1793348057.540:30859): avc: denied { ioctl } for pid=7011 comm="syz.1.298" path="socket:[16846]" dev="sockfs" ino=16846 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.039302][ T7012] batadv0: mtu less than device minimum [ 73.039871][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.040390][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.040927][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.041451][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.041934][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.042421][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.042901][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.233706][ T7035] loop0: detected capacity change from 0 to 4096 [ 73.303287][ T7036] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 73.303304][ T7036] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 73.303331][ T7036] loop0: [ 73.349690][ T7045] FAULT_INJECTION: forcing a failure. [ 73.349690][ T7045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.349717][ T7045] CPU: 0 UID: 0 PID: 7045 Comm: syz.1.308 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.349738][ T7045] Tainted: [L]=SOFTLOCKUP [ 73.349744][ T7045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.349753][ T7045] Call Trace: [ 73.349759][ T7045] [ 73.349765][ T7045] dump_stack_lvl+0x100/0x190 [ 73.349795][ T7045] should_fail_ex.cold+0x5/0xa [ 73.349821][ T7045] _copy_to_user+0x32/0xd0 [ 73.349842][ T7045] simple_read_from_buffer+0xcb/0x170 [ 73.349863][ T7045] proc_fail_nth_read+0x1af/0x230 [ 73.349884][ T7045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.349908][ T7045] ? rw_verify_area+0xce/0x6d0 [ 73.349930][ T7045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.349949][ T7045] vfs_read+0x1e4/0xb40 [ 73.349971][ T7045] ? lock_acquire+0x1d1/0x380 [ 73.349991][ T7045] ? __fget_files+0x34/0x3d0 [ 73.350008][ T7045] ? __pfx_vfs_read+0x10/0x10 [ 73.350029][ T7045] ? find_held_lock+0x2b/0x80 [ 73.350045][ T7045] ? __fget_files+0x215/0x3d0 [ 73.350067][ T7045] ? __fget_files+0x21f/0x3d0 [ 73.350090][ T7045] ksys_read+0x12a/0x250 [ 73.350105][ T7045] ? __pfx_ksys_read+0x10/0x10 [ 73.350126][ T7045] do_syscall_64+0x123/0x790 [ 73.350145][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.350161][ T7045] RIP: 0033:0x7f2e32d5fd8e [ 73.350175][ T7045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.350190][ T7045] RSP: 002b:00007f2e33c5afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.350206][ T7045] RAX: ffffffffffffffda RBX: 00007f2e33c5b6c0 RCX: 00007f2e32d5fd8e [ 73.350215][ T7045] RDX: 000000000000000f RSI: 00007f2e33c5b0a0 RDI: 0000000000000004 [ 73.350224][ T7045] RBP: 00007f2e33c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 73.350234][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.350243][ T7045] R13: 00007f2e33026038 R14: 00007f2e33025fa0 R15: 00007ffc971bac28 [ 73.350266][ T7045] [ 73.395629][ T7039] fuse: fd is not a fuse device [ 73.399832][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 73.514146][ T7050] 0x000000000000-0x000000010000 : "" [ 73.514408][ T7048] syz.1.309: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 73.514750][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.1.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.514765][ T7048] Tainted: [L]=SOFTLOCKUP [ 73.514769][ T7048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.514775][ T7048] Call Trace: [ 73.514779][ T7048] [ 73.514783][ T7048] dump_stack_lvl+0x100/0x190 [ 73.514805][ T7048] warn_alloc.cold+0x9e/0xb2 [ 73.514817][ T7048] ? __pfx_warn_alloc+0x10/0x10 [ 73.514830][ T7048] ? policy_nodemask+0xed/0x5e0 [ 73.514843][ T7048] ? alloc_pages_mpol+0x260/0x560 [ 73.514856][ T7048] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 73.514868][ T7048] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 73.514882][ T7048] ? __get_vm_area_node+0x22b/0x350 [ 73.514903][ T7048] __vmalloc_node_range_noprof+0x1051/0x1440 [ 73.514918][ T7048] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 73.514933][ T7048] ? find_held_lock+0x2b/0x80 [ 73.514944][ T7048] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 73.514955][ T7048] ? avc_has_perm_noaudit+0x11e/0x470 [ 73.514970][ T7048] ? avc_has_perm_noaudit+0x145/0x470 [ 73.514983][ T7048] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 73.514995][ T7048] __vmalloc_node_noprof+0xad/0xf0 [ 73.515005][ T7048] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 73.515019][ T7048] __vmalloc_noprof+0xa3/0x120 [ 73.515029][ T7048] ? __pfx___vmalloc_noprof+0x10/0x10 [ 73.515041][ T7048] ? rcu_is_watching+0x13/0xc0 [ 73.515052][ T7048] ? cap_capable+0x107/0x430 [ 73.515067][ T7048] bpf_prog_alloc_no_stats+0x59/0x690 [ 73.515078][ T7048] ? security_capable+0x80/0x260 [ 73.515092][ T7048] bpf_prog_alloc+0x3b/0x200 [ 73.515102][ T7048] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.515119][ T7048] bpf_prog_load+0x4a3/0x2b20 [ 73.515134][ T7048] ? avc_has_perm_noaudit+0x11e/0x470 [ 73.515149][ T7048] ? __pfx_bpf_prog_load+0x10/0x10 [ 73.515202][ T7048] __sys_bpf+0x146f/0x4b60 [ 73.515223][ T7048] ? __pfx___sys_bpf+0x10/0x10 [ 73.515238][ T7048] ? find_held_lock+0x2b/0x80 [ 73.515248][ T7048] ? futex_wake+0x4ea/0x5e0 [ 73.515272][ T7048] ? vm_mmap_pgoff+0x101/0x490 [ 73.515296][ T7048] ? __x64_sys_futex+0x34f/0x4d0 [ 73.515307][ T7048] ? __x64_sys_futex+0x358/0x4d0 [ 73.515319][ T7048] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 73.515334][ T7048] ? __pfx___x64_sys_futex+0x10/0x10 [ 73.515349][ T7048] ? __x64_sys_bpf+0xce/0x140 [ 73.515358][ T7048] __x64_sys_bpf+0xce/0x140 [ 73.515367][ T7048] ? do_syscall_64+0xae/0x790 [ 73.515379][ T7048] do_syscall_64+0x123/0x790 [ 73.515390][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.515401][ T7048] RIP: 0033:0x7f2e32d9f559 [ 73.515410][ T7048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.515440][ T7048] RSP: 002b:00007f2e33c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.515452][ T7048] RAX: ffffffffffffffda RBX: 00007f2e33025fa0 RCX: 00007f2e32d9f559 [ 73.515459][ T7048] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 73.515465][ T7048] RBP: 00007f2e32e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 73.515471][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.515477][ T7048] R13: 00007f2e33026038 R14: 00007f2e33025fa0 R15: 00007ffc971bac28 [ 73.515492][ T7048] [ 73.515520][ T7048] Mem-Info: [ 73.515540][ T7048] active_anon:9527 inactive_anon:2 isolated_anon:0 [ 73.515540][ T7048] active_file:2048 inactive_file:54124 isolated_file:0 [ 73.515540][ T7048] unevictable:0 dirty:75 writeback:0 [ 73.515540][ T7048] slab_reclaimable:13062 slab_unreclaimable:69354 [ 73.515540][ T7048] mapped:24753 shmem:555 pagetables:1249 [ 73.515540][ T7048] sec_pagetables:298 bounce:0 [ 73.515540][ T7048] kernel_misc_reclaimable:0 [ 73.515540][ T7048] free:454770 free_pcp:10870 free_cma:0 [ 73.515566][ T7048] Node 0 active_anon:38108kB inactive_anon:8kB active_file:8192kB inactive_file:216300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99012kB dirty:296kB writeback:0kB shmem:2220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13856kB pagetables:4820kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 73.515594][ T7048] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 73.515619][ T7048] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.515647][ T7048] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 73.515665][ T7048] Node 0 DMA32 free:163084kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:38108kB inactive_anon:8kB active_file:8192kB inactive_file:216300kB unevictable:0kB writepending:296kB zspages:420kB present:2080628kB managed:1230944kB mlocked:0kB bounce:0kB free_pcp:36304kB local_pcp:8944kB free_cma:0kB [ 73.515694][ T7048] lowmem_reserve[]: 0 0 0 0 0 [ 73.515711][ T7048] Node 1 Normal free:1640636kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:7176kB local_pcp:2048kB free_cma:0kB [ 73.515739][ T7048] lowmem_reserve[]: 0 0 0 0 0 [ 73.515756][ T7048] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 73.515816][ T7048] Node 0 DMA32: 1283*4kB (UME) 431*8kB (UME) 142*16kB (UME) 589*32kB (UME) 154*64kB (UME) 61*128kB (UM) 50*256kB (UME) 37*512kB (UME) 22*1024kB (UME) 12*2048kB (UM) 9*4096kB (UM) = 163076kB [ 73.515898][ T7048] Node 1 Normal: 4*4kB (UM) 4*8kB (U) 7*16kB (UM) 9*32kB (UM) 6*64kB (UM) 5*128kB (UM) 1*256kB (U) 3*512kB (M) 1*1024kB (U) 3*2048kB (UM) 398*4096kB (M) = 1640640kB [ 73.515984][ T7048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 73.515996][ T7048] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 73.516007][ T7048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 73.516018][ T7048] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 73.516030][ T7048] 56728 total pagecache pages [ 73.516048][ T7048] 5 pages in swap cache [ 73.516056][ T7048] Free swap = 124884kB [ 73.516063][ T7048] Total swap = 124996kB [ 73.516069][ T7048] 1048443 pages RAM [ 73.516075][ T7048] 0 pages HighMem/MovableOnly [ 73.516081][ T7048] 291397 pages reserved [ 73.516087][ T7048] 0 pages cma reserved [ 73.537372][ T7050] ftl_cs: FTL header not found. [ 73.545590][ T7050] FAULT_INJECTION: forcing a failure. [ 73.545590][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 73.545609][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.2.310 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.545625][ T7050] Tainted: [L]=SOFTLOCKUP [ 73.545629][ T7050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.545637][ T7050] Call Trace: [ 73.545641][ T7050] [ 73.545645][ T7050] dump_stack_lvl+0x100/0x190 [ 73.545668][ T7050] should_fail_ex.cold+0x5/0xa [ 73.545688][ T7050] should_failslab+0xc2/0x120 [ 73.545701][ T7050] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.545716][ T7050] ? __asan_memcpy+0x3c/0x60 [ 73.545731][ T7050] ? __kernfs_new_node+0xd2/0xa10 [ 73.545750][ T7050] __kernfs_new_node+0xd2/0xa10 [ 73.545769][ T7050] ? __pfx___kernfs_new_node+0x10/0x10 [ 73.545786][ T7050] ? lock_acquire+0x1d1/0x380 [ 73.545800][ T7050] ? kernfs_root+0x23/0x2a0 [ 73.545815][ T7050] ? find_held_lock+0x2b/0x80 [ 73.545825][ T7050] ? kernfs_root+0xee/0x2a0 [ 73.545838][ T7050] ? kernfs_root+0xee/0x2a0 [ 73.545857][ T7050] kernfs_create_dir_ns+0xa4/0x2b0 [ 73.545870][ T7050] sysfs_create_dir_ns+0x13a/0x2b0 [ 73.545884][ T7050] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 73.545900][ T7050] ? rcu_is_watching+0x13/0xc0 [ 73.545911][ T7050] ? kfree_const+0x5a/0x70 [ 73.545924][ T7050] kobject_add_internal+0x2c8/0x930 [ 73.545951][ T7050] kobject_add+0x16a/0x1e0 [ 73.545966][ T7050] ? __pfx_kobject_add+0x10/0x10 [ 73.545985][ T7050] ? lock_acquire+0x1d1/0x380 [ 73.545999][ T7050] ? queue_hctx+0x26/0x2a0 [ 73.546018][ T7050] blk_mq_register_hctx+0x263/0x460 [ 73.546039][ T7050] blk_mq_sysfs_register+0x1cc/0x480 [ 73.546068][ T7050] blk_register_queue+0xda/0x640 [ 73.546085][ T7050] __add_disk+0x7dd/0xf10 [ 73.546102][ T7050] add_disk_fwnode+0x118/0x480 [ 73.546119][ T7050] add_mtd_blktrans_dev+0xd0b/0x1520 [ 73.546136][ T7050] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 73.546158][ T7050] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 73.546172][ T7050] ? mtdblock_add_mtd+0x4a/0x270 [ 73.546187][ T7050] mtdblock_add_mtd+0x1cc/0x270 [ 73.546200][ T7050] blktrans_notify_add+0xa2/0xf0 [ 73.546212][ T7050] add_mtd_device+0xb6d/0x1820 [ 73.546229][ T7050] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.546241][ T7050] ? __pfx_add_mtd_device+0x10/0x10 [ 73.546261][ T7050] mtd_add_partition+0x376/0x6a0 [ 73.546273][ T7050] ? __pfx_mtd_add_partition+0x10/0x10 [ 73.546283][ T7050] ? __might_fault+0xc5/0x140 [ 73.546295][ T7050] ? __might_fault+0xc5/0x140 [ 73.546312][ T7050] mtdchar_blkpg_ioctl+0x207/0x250 [ 73.546323][ T7050] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 73.546346][ T7050] mtdchar_ioctl+0x1670/0x1fd0 [ 73.546359][ T7050] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 73.546371][ T7050] ? lock_acquire+0x1d1/0x380 [ 73.546384][ T7050] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 73.546398][ T7050] ? rcu_is_watching+0x13/0xc0 [ 73.546409][ T7050] ? trace_contention_end+0x126/0x160 [ 73.546426][ T7050] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 73.546437][ T7050] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.546473][ T7050] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 73.546494][ T7050] ? __pfx___mutex_lock+0x10/0x10 [ 73.546505][ T7050] ? __fget_files+0x34/0x3d0 [ 73.546527][ T7050] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 73.546540][ T7050] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 73.546553][ T7050] __x64_sys_ioctl+0x18e/0x210 [ 73.546572][ T7050] do_syscall_64+0x123/0x790 [ 73.546585][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.546597][ T7050] RIP: 0033:0x7f786b99f559 [ 73.546607][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.546617][ T7050] RSP: 002b:00007f786c936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.546629][ T7050] RAX: ffffffffffffffda RBX: 00007f786bc25fa0 RCX: 00007f786b99f559 [ 73.546636][ T7050] RDX: 00002000000001c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 73.546643][ T7050] RBP: 00007f786ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 73.546650][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.546655][ T7050] R13: 00007f786bc26038 R14: 00007f786bc25fa0 R15: 00007ffdb50222a8 [ 73.546675][ T7050] [ 73.547305][ T7050] kobject: kobject_add_internal failed for cpu0 (error: -12 parent: 0) [ 73.566205][ T42] audit: type=1804 audit(1793348058.070:30860): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.309" name="/newroot/61/file0" dev="tmpfs" ino=372 res=1 errno=0 [ 73.624648][ T42] audit: type=1400 audit(1793348058.130:30861): avc: denied { read append } for pid=7055 comm="syz.1.312" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 73.624682][ T42] audit: type=1400 audit(1793348058.130:30862): avc: denied { open } for pid=7055 comm="syz.1.312" path="/62/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 73.625435][ T42] audit: type=1400 audit(1793348058.130:30863): avc: denied { ioctl } for pid=7055 comm="syz.1.312" path="/62/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x40104d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 73.625869][ T7056] MTRR 1 not used [ 73.773428][ T7067] netlink: 'syz.1.313': attribute type 2 has an invalid length. [ 73.834535][ T7070] netlink: 7 bytes leftover after parsing attributes in process `syz.2.316'. [ 73.846307][ T42] audit: type=1400 audit(1793348058.350:30864): avc: denied { bind } for pid=7071 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.869997][ T7074] netlink: 'syz.2.318': attribute type 16 has an invalid length. [ 73.870064][ T7074] netlink: 'syz.2.318': attribute type 17 has an invalid length. [ 73.902685][ T7074] veth0_to_bond: left allmulticast mode [ 73.935880][ T7074] gtp0: left allmulticast mode [ 73.995042][ T7079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.319'. [ 74.034878][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 74.037542][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.037727][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.046640][ T7090] UBIFS error (pid: 7090): cannot open "ubi:0", error -19 [ 74.068148][ T7084] input: syz1 as /devices/virtual/input/input9 [ 74.268801][ T4588] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 74.419660][ T4588] usb 6-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 74.420643][ T4588] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.420714][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 74.420735][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 74.420754][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 74.420773][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 74.420792][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 74.420811][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 74.420830][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 74.420849][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 74.420868][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 74.420887][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 74.420906][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 74.420925][ T4588] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 193 [ 74.420943][ T4588] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 74.422832][ T4588] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.422850][ T4588] usb 6-1: Product: syz [ 74.422862][ T4588] usb 6-1: Manufacturer: syz [ 74.422874][ T4588] usb 6-1: SerialNumber: syz [ 74.430099][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.430328][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.430494][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.431281][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.431541][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.431770][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.432019][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.434015][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.434095][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.434173][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.434326][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.434396][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.441175][ T4588] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 74.441951][ T4588] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 74.532255][ T4588] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 74.534353][ T4588] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 74.536686][ T4588] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 74.598935][ T69] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 74.648258][ T42] audit: type=1400 audit(1793348059.150:30865): avc: denied { write } for pid=7095 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.674640][ T5936] usb 6-1: USB disconnect, device number 8 [ 74.688567][ T5936] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 74.693200][ T5936] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 74.693891][ T5936] keyspan 6-1:1.0: device disconnected [ 74.715947][ T42] audit: type=1400 audit(1793348059.220:30866): avc: denied { read write } for pid=7099 comm="syz.3.324" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 74.716629][ T42] audit: type=1400 audit(1793348059.220:30867): avc: denied { open } for pid=7099 comm="syz.3.324" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 74.733603][ T7101] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 74.734528][ T7101] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.734582][ T7101] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.734630][ T7101] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.734667][ T7101] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.734702][ T7101] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.734736][ T7101] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.734771][ T7101] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.734806][ T7101] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.734841][ T7101] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.734875][ T7101] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.928500][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 74.931342][ T7114] tmpfs: Bad value for 'mpol' [ 74.937162][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 74.937462][ T7114] tmpfs: Bad value for 'mpol' [ 74.966590][ T13] smpboot: CPU 1 is now offline [ 75.010481][ T13] [ 75.011315][ T13] ====================================================== [ 75.011546][ T7120] netlink: 'syz.2.328': attribute type 3 has an invalid length. [ 75.016553][ T13] WARNING: possible circular locking dependency detected [ 75.018759][ T13] syzkaller #0 Tainted: G L [ 75.020833][ T13] ------------------------------------------------------ [ 75.022991][ T13] kworker/u32:1/13 is trying to acquire lock: [ 75.024885][ T13] ffff88801e3ce5a8 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x34c/0xbc0 [ 75.027683][ T13] [ 75.027683][ T13] but task is already holding lock: [ 75.029967][ T13] ffffffff8fe7a6b0 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 75.033195][ T13] [ 75.033195][ T13] which lock already depends on the new lock. [ 75.033195][ T13] [ 75.036358][ T13] [ 75.036358][ T13] the existing dependency chain (in reverse order) is: [ 75.039123][ T13] [ 75.039123][ T13] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 75.041540][ T13] lock_acquire+0x1d1/0x380 [ 75.043124][ T13] percpu_down_write+0x4e/0x3d0 [ 75.044822][ T13] _cpu_up+0x68/0x960 [ 75.046284][ T13] cpu_up+0x1ba/0x230 [ 75.047742][ T13] cpuhp_bringup_mask+0xf8/0x180 [ 75.049464][ T13] bringup_nonboot_cpus+0xd9/0x1b0 [ 75.051233][ T13] smp_init+0x32/0x150 [ 75.052691][ T13] kernel_init_freeable+0x44b/0x7b0 [ 75.054459][ T13] kernel_init+0x21/0x1e0 [ 75.056013][ T13] ret_from_fork+0x730/0xd60 [ 75.057621][ T13] ret_from_fork_asm+0x1a/0x30 [ 75.059269][ T13] [ 75.059269][ T13] -> #2 (cpu_add_remove_lock){+.+.}-{4:4}: [ 75.061696][ T13] lock_acquire+0x1d1/0x380 [ 75.063274][ T13] __mutex_lock+0x19f/0x1c10 [ 75.064873][ T13] cpu_device_down+0x46/0xc0 [ 75.066547][ T13] device_offline+0x2f4/0x400 [ 75.068235][ T13] acpi_bus_offline+0x3c7/0x550 [ 75.069905][ T13] acpi_device_hotplug+0x627/0xbe0 [ 75.071681][ T13] acpi_hotplug_work_fn+0x5e/0x90 [ 75.073400][ T13] process_one_work+0xac7/0x1b10 [ 75.075108][ T13] worker_thread+0x5ef/0xe50 [ 75.076722][ T13] kthread+0x373/0x450 [ 75.078171][ T13] ret_from_fork+0x730/0xd60 [ 75.079772][ T13] ret_from_fork_asm+0x1a/0x30 [ 75.081420][ T13] [ 75.081420][ T13] -> #1 (&device->physical_node_lock){+.+.}-{4:4}: [ 75.084102][ T13] lock_acquire+0x1d1/0x380 [ 75.085704][ T13] __mutex_lock+0x19f/0x1c10 [ 75.087302][ T13] acpi_companion_match+0xc0/0x180 [ 75.089054][ T13] acpi_device_uevent_modalias+0x19/0x30 [ 75.091002][ T13] platform_uevent+0x51/0xc0 [ 75.092615][ T13] dev_uevent+0x1de/0x870 [ 75.094145][ T13] kobject_uevent_env+0x6eb/0x18b0 [ 75.095937][ T13] kobject_synth_uevent+0x679/0x7d0 [ 75.097714][ T13] uevent_store+0x24/0x50 [ 75.099242][ T13] dev_attr_store+0x58/0x80 [ 75.100839][ T13] sysfs_kf_write+0xf2/0x150 [ 75.102375][ T13] kernfs_fop_write_iter+0x3e0/0x5f0 [ 75.104195][ T13] vfs_write+0x6af/0x1050 [ 75.105685][ T13] ksys_write+0x12a/0x250 [ 75.107149][ T13] do_syscall_64+0x123/0x790 [ 75.108751][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.110742][ T13] [ 75.110742][ T13] -> #0 (kn->active#5){++++}-{0:0}: [ 75.113046][ T13] check_prev_add+0xeb/0xe60 [ 75.114650][ T13] __lock_acquire+0x1528/0x1f40 [ 75.116344][ T13] lock_acquire+0x1d1/0x380 [ 75.117929][ T13] kernfs_drain+0x4eb/0x600 [ 75.119523][ T13] __kernfs_remove+0x34c/0xbc0 [ 75.121180][ T13] kernfs_remove_by_name_ns+0x7c/0x120 [ 75.123040][ T13] device_del+0x361/0x9b0 [ 75.124580][ T13] device_unregister+0x1d/0xe0 [ 75.126248][ T13] unregister_cpu+0xa0/0x140 [ 75.127852][ T13] acpi_processor_post_eject+0x16f/0x390 [ 75.129772][ T13] acpi_device_hotplug+0x9df/0xbe0 [ 75.131563][ T13] acpi_hotplug_work_fn+0x5e/0x90 [ 75.133319][ T13] process_one_work+0xac7/0x1b10 [ 75.135060][ T13] worker_thread+0x5ef/0xe50 [ 75.136713][ T13] kthread+0x373/0x450 [ 75.138237][ T13] ret_from_fork+0x730/0xd60 [ 75.139866][ T13] ret_from_fork_asm+0x1a/0x30 [ 75.141529][ T13] [ 75.141529][ T13] other info that might help us debug this: [ 75.141529][ T13] [ 75.144648][ T13] Chain exists of: [ 75.144648][ T13] kn->active#5 --> cpu_add_remove_lock --> cpu_hotplug_lock [ 75.144648][ T13] [ 75.148705][ T13] Possible unsafe locking scenario: [ 75.148705][ T13] [ 75.151011][ T13] CPU0 CPU1 [ 75.152643][ T13] ---- ---- [ 75.154299][ T13] lock(cpu_hotplug_lock); [ 75.155738][ T13] lock(cpu_add_remove_lock); [ 75.157991][ T13] lock(cpu_hotplug_lock); [ 75.160160][ T13] lock(kn->active#5); [ 75.161468][ T13] [ 75.161468][ T13] *** DEADLOCK *** [ 75.161468][ T13] [ 75.163954][ T13] locks held by kworker/u32:1/13: 6, last CPU#3: [ 75.166133][ T13] #0: ffff88801eaca148 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 75.170423][ T13] #1: ffffc90000107d08 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 75.174563][ T13] #2: ffffffff91046e40 (device_hotplug_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x7e/0xbe0 [ 75.178469][ T13] #3: ffffffff90d159a0 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x8c/0xbe0 [ 75.182098][ T13] #4: ffffffff8fe7a760 (cpu_add_remove_lock){+.+.}-{4:4}, at: acpi_processor_post_eject+0x141/0x390 [ 75.186252][ T13] #5: ffffffff8fe7a6b0 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 75.190258][ T13] [ 75.190258][ T13] stack backtrace: [ 75.192530][ T13] CPU: 3 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.196759][ T13] Tainted: [L]=SOFTLOCKUP [ 75.198485][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.202441][ T13] Workqueue: kacpi_hotplug acpi_hotplug_work_fn [ 75.204928][ T13] Call Trace: [ 75.206298][ T13] [ 75.207519][ T13] dump_stack_lvl+0x100/0x190 [ 75.209424][ T13] print_circular_bug.cold+0x178/0x1be [ 75.211608][ T13] check_noncircular+0x146/0x160 [ 75.213610][ T13] check_prev_add+0xeb/0xe60 [ 75.215496][ T13] __lock_acquire+0x1528/0x1f40 [ 75.217460][ T13] lock_acquire+0x1d1/0x380 [ 75.219278][ T13] ? __kernfs_remove+0x34c/0xbc0 [ 75.221063][ T13] ? kernfs_drain+0x4c2/0x600 [ 75.222666][ T13] kernfs_drain+0x4eb/0x600 [ 75.224383][ T13] ? __kernfs_remove+0x34c/0xbc0 [ 75.226127][ T13] ? __pfx_kernfs_drain+0x10/0x10 [ 75.227949][ T13] ? find_held_lock+0x2b/0x80 [ 75.229425][ T13] ? __kernfs_remove+0x224/0xbc0 [ 75.230988][ T13] ? __kernfs_remove+0x224/0xbc0 [ 75.232579][ T13] ? up_write+0x2dc/0x5b0 [ 75.233959][ T13] __kernfs_remove+0x34c/0xbc0 [ 75.235500][ T13] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 75.237416][ T13] kernfs_remove_by_name_ns+0x7c/0x120 [ 75.239141][ T13] device_del+0x361/0x9b0 [ 75.240520][ T13] ? __pfx_device_del+0x10/0x10 [ 75.242048][ T13] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 75.243983][ T13] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 75.245747][ T13] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 75.247677][ T13] device_unregister+0x1d/0xe0 [ 75.249185][ T13] unregister_cpu+0xa0/0x140 [ 75.250635][ T13] acpi_processor_post_eject+0x16f/0x390 [ 75.252492][ T13] acpi_device_hotplug+0x9df/0xbe0 [ 75.254134][ T13] ? __pfx_acpi_device_hotplug+0x10/0x10 [ 75.255924][ T13] acpi_hotplug_work_fn+0x5e/0x90 [ 75.257498][ T13] process_one_work+0xac7/0x1b10 [ 75.259060][ T13] ? __pfx_process_one_work+0x10/0x10 [ 75.260771][ T13] ? lock_acquire+0x1d1/0x380 [ 75.262199][ T13] ? __pfx_acpi_hotplug_work_fn+0x10/0x10 [ 75.263996][ T13] worker_thread+0x5ef/0xe50 [ 75.265477][ T13] ? kthread+0x13a/0x450 [ 75.266999][ T13] ? __pfx_worker_thread+0x10/0x10 [ 75.268650][ T13] kthread+0x373/0x450 [ 75.269938][ T13] ? __pfx_kthread+0x10/0x10 [ 75.271429][ T13] ret_from_fork+0x730/0xd60 [ 75.273200][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 75.275186][ T13] ? __switch_to+0x800/0x10e0 [ 75.277051][ T13] ? __pfx_kthread+0x10/0x10 [ 75.278883][ T13] ret_from_fork_asm+0x1a/0x30 [ 75.280794][ T13] [ 75.283032][ T7121] netlink: 'syz.2.328': attribute type 3 has an invalid length. [ 75.299345][ T5869] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 75.448808][ T5869] usb 7-1: Using ep0 maxpacket: 8 [ 75.449271][ T5869] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.450303][ T5869] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 75.450332][ T5869] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.450349][ T5869] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.450366][ T5869] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.450383][ T5869] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.450409][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.654571][ T5869] usb 7-1: usb_control_msg returned -32 [ 75.654590][ T5869] usbtmc 7-1:16.0: can't read capabilities [ 75.888871][ T69] Bluetooth: hci3: command 0x0405 tx timeout [ 76.008514][ T7122] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 76.608801][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 78.019076][ T24] usb 7-1: USB disconnect, device number 6 [ 84.118880][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!