last executing test programs: 4m36.313001341s ago: executing program 0 (id=117): syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe00000000000000000000003fd9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 4m35.359555379s ago: executing program 0 (id=118): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000003940), 0x0, &(0x7f00000005c0)=""/93, 0x5d}, 0x209}, {{&(0x7f0000000640)=@caif=@dgm, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000800)=""/225, 0xe1}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000740)=""/42, 0x2a}, {&(0x7f0000001480)=""/4093, 0xffd}, {0x0}, {&(0x7f0000000900)=""/130, 0x82}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000ac0)=""/76, 0x4c}], 0x9}, 0x4}, {{&(0x7f0000000c80)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d00)=""/179, 0xb3}, {&(0x7f0000003840)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/45, 0x2d}, {&(0x7f0000000f00)=""/82, 0x52}, {&(0x7f0000000f80)=""/170, 0xaa}], 0x5}, 0x4010001}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001140)=""/32, 0x20}], 0x1, &(0x7f00000011c0)=""/75, 0x4b}, 0x10001}, {{&(0x7f0000001240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000012c0)=""/199, 0xffffffffffffffca}], 0x1, &(0x7f0000001400)}, 0x1000088}, {{&(0x7f0000002480)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002500)=""/37, 0x25}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003600)=""/184, 0xb8}, 0xffffffff}], 0x6, 0x40, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000001090103000000000000000000000700"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r10 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r10, &(0x7f0000000140)=[{&(0x7f00000007c0)='g', 0x1}], 0x1) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000002e40)='./bus\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x2000000, 0x0) 4m33.794959254s ago: executing program 0 (id=125): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00B\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23b) 4m31.85877574s ago: executing program 0 (id=130): syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000040d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 4m31.784848585s ago: executing program 0 (id=131): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) socket(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000dc0)={{0x81, 0x17}, 'port0\x00', 0x42, 0x80000, 0xd8, 0x95, 0x9, 0x3c4, 0xb, 0x0, 0x6, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa300d0000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000003e040000000000000c000000000000000404000001ed0a002500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x400, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x16, 0x0, 0x0, 0x5}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a20000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0) 4m28.188926947s ago: executing program 0 (id=138): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = io_uring_setup(0x2ad7, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="000002000000000000000100003b"], 0x2c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x54219228a89132d3}, 0x48854) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x36}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 4m12.706877281s ago: executing program 32 (id=138): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = io_uring_setup(0x2ad7, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="000002000000000000000100003b"], 0x2c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x54219228a89132d3}, 0x48854) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x36}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 9.469272713s ago: executing program 1 (id=1042): syz_emit_ethernet(0xf87, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) 9.403730265s ago: executing program 1 (id=1044): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04ff"], 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x103) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="4670cb", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d307830c87286bc3695e1303030303030303030303030", @ANYRES64=r3, @ANYRESHEX=r4, @ANYRESDEC=r5]) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000580)={{0x0, 0x2}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40345410, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000012000101000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 7.605563233s ago: executing program 1 (id=1047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_setup(0xdf9, 0x0, &(0x7f0000000300), &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x1a, 0x2008, 0x0, @value}, 0x18) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000ac0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@cgroup=r3, 0xffffffffffffffff, 0x1a, 0x11, 0xffffffffffffffff, @void, @value}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) clock_adjtime(0x0, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0xfffe, 0x0, @remote}, r6}}, 0x48) 7.203593866s ago: executing program 4 (id=1049): r0 = creat(0x0, 0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x78) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000480)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)="edb21f2368f9a307bab45b7e96c959c08d547c7fb4cceeab6c945151280ac899365042dbfca9645db050623b2abda0814fe36ea6eb56b238bd5ba9f6a48dd1d26096fbd4f628555e2d5adc711691ef89623fa5651ecb7d1f98c29dadd7d4ad1a103f7c9b1d16c2cb5cf8226ccd1358bdaafe33ab0c93517fe91fa594c7b871b87000667cf896fec9c40f183435fa9d3adba662bc81b97b5e1544da14fda92c6a82561773bdf2d1df2d674d93815c4455adde222b80601335207c032d62732612e4ccfede023d386939840def081c", 0xce}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32=r1], 0xa0}}, {{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000009c0)="f52dc436563cd80578b3e20305b04b3bdcc24d2250274a036e6e21aa43bf2faf13263244032eb61301b0eff52df9ebd42f", 0x31}], 0x1, &(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYBLOB="000000002c00000000000000010000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000003000000000003f000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x170}}], 0x2, 0x0) 6.783183842s ago: executing program 4 (id=1052): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 32) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) (rerun: 32) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180), 0x4) memfd_create(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_pidfd_open(0x0, 0x0) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (rerun: 32) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000340)={0x0, 0xe05a37d6, &(0x7f0000000200)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x0, 0xfff1}, {0xa, 0xf}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x2004c841) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="000f00"/13], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8081) (async, rerun: 32) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async, rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe2f, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf250c000000cb08ec9dc8c3b10d6b6e1722fe5222ffa83e8418842bab54cca4b11d97cbbf8c9767fc3dbffa806839f06eabcc777afba0fa11af360cf778d9d57f3a0697aa998f"], 0x14}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) 6.594260162s ago: executing program 1 (id=1053): stat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e7877"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_START_POLL(r6, 0x0, 0x0) io_setup(0x6, &(0x7f00000003c0)) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c010000100001000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa000000002000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb00001a000000000000000000000000006c000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00000000000c001500"], 0x14c}}, 0x0) 6.572329368s ago: executing program 2 (id=1054): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/27, &(0x7f0000000040)=0x1b) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x10441, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) fsopen(&(0x7f0000000100)='v7\x00', 0x1) write(r3, &(0x7f0000000140)="356c5cc75eac2b34a0bc1541fc20d18b416f6886481ba026981a5d3187cd438d861baba9629ddd739052120867", 0x2d) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000005, 0x10, r1, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x65, 0x0, r1, 0x0, &(0x7f0000000180)='./file0\x00', 0x4, 0x0, 0x0, {0x0, r6}}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r3) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x40040c4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x9fc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8d6c}, {0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x3e30}, 0xffffffffffffffff, 0x39a}}, 0x48) syz_open_dev$media(&(0x7f0000000400), 0x0, 0x500000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000440)=@ethtool_cmd={0xc, 0xfffffffb, 0x0, 0x1, 0xe, 0x6, 0x0, 0x9, 0x0, 0xa, 0x7, 0x9, 0x2, 0x1, 0xe2, 0x254, [0x9, 0xbb]}}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x80, 0x10}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@o_path={&(0x7f00000004c0)='./file0\x00', r8, 0x4000, r1}, 0x18) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r9 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000000640), &(0x7f0000000680)=0x40) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0xf84f, 0x1, 0x752e, 0x0, {{0x4f, 0x4, 0x3, 0xf, 0x13c, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x8c, 0x1, 0x7, [{@loopback, 0x30000}, {@multicast2, 0xd1}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xe93}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x10000}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x1}]}, @generic={0x82, 0xa, "070cac8d4d23e20d"}, @ssrr={0x89, 0x27, 0xff, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @loopback, @private=0xa010101, @rand_addr=0x64010102, @private=0xa010102]}, @timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0xf, [{@rand_addr=0x64010102, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x200}, {@private=0xa010101, 0x401}, {@empty, 0x88e}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xc0000000}]}, @lsrr={0x83, 0x7, 0xfb, [@private=0xa010101]}, @cipso={0x86, 0x2b, 0x1, [{0x0, 0x11, "cf82b725958311fad4c4ff645a2591"}, {0x0, 0xc, "d8f0d0dbf7f1fbbd9df7"}, {0x1, 0x4, "c042"}, {0x2, 0x4, "7e8b"}]}, @timestamp_prespec={0x44, 0x14, 0x2, 0x3, 0x4, [{@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xffffff80}]}, @cipso={0x86, 0x8, 0x1, [{0x0, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x68, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@broadcast}, {@remote, 0x8}, {@multicast2, 0x5}, {@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xfffffff8}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'syztnl0\x00', r10, 0x2f, 0x3, 0x0, 0x1, 0xc, @rand_addr=' \x01\x00', @empty, 0x1, 0x8000, 0x3, 0x1}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'veth0_vlan\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b00)={'gretap0\x00', r11, 0x8000, 0x7800, 0x9, 0x80000001, {{0x32, 0x4, 0x3, 0x0, 0xc8, 0x67, 0x0, 0xf, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x27}]}, @cipso={0x86, 0x1b, 0x3, [{0x7, 0x11, "6eee612b13da39ad295e57111ff95f"}, {0x0, 0x4, "7af6"}]}, @timestamp_addr={0x44, 0x14, 0xc3, 0x1, 0x4, [{@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ssrr={0x89, 0x27, 0xda, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x18}, @remote, @broadcast, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0xdd, 0x0, 0xc, [0x80000000, 0x6, 0x0]}, @end, @generic={0x7, 0x8, "e607370f2602"}, @timestamp_addr={0x44, 0x34, 0xca, 0x1, 0x4, [{@private=0xa010102, 0x1}, {@empty, 0x23}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x8d}, {@remote, 0x1}, {@multicast1, 0x5}]}]}}}}}) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x94, r12, 0x800, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x5a6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x40}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 6.009656736s ago: executing program 2 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000500000005"], 0x104}}, 0x0) 5.121002025s ago: executing program 4 (id=1056): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x0, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018008061700d1bd", 0xfffffffffffffef2}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x40187013, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0xb, 0xffffeffd, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x2d, &(0x7f0000000240)="ff02040000ffff0200ffffffff1f2be82db1af0000000000eddfcf35bda29d5a20", 0x21) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r6, &(0x7f00000068c0)='./cgroup\x00', 0x800, 0x2, &(0x7f0000006900)) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000f715ad42217ce1abc665af1702aeaf43461f9293608812583529f1817621928f0585d275f83fde3b9a5cf27b20a8fed9253918364ca670126a83cfb53cda19e44cf46a9a8fd00cd65e01f8a1b4ab5643ff639744b201c81b33d508e9e0950195554aa9f5ade9d21cfdfad56605fff11d747e"], 0x8) chdir(&(0x7f0000000140)='./bus\x00') sendmsg$802154_dgram(r0, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000001880)={0x0}}, 0x4000) 4.184993356s ago: executing program 1 (id=1057): openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1201000000000010ac05920240000102fa00090224000101000000090400000003010200092100000001220000090581030000000000"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='fd/4\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000098c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000009900)={0x28, 0x4, 0x0, {0x1, 0x1}}, 0x28) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x98, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0xf5, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "6e30c4bf48"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfffd, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0xfff9, 0x13}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x0, 0xa3, 0x5, 0xe, 0xa}, @obex={0x5}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x401, 0x5, 0x7f, 0x7, 0xf0}, @country_functional={0x8, 0x24, 0x7, 0xf3, 0x2, [0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0xf, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x69}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0x40, 0x2, 0x40, 0xd}, 0x39, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x9, [{0x99, &(0x7f0000000180)=ANY=[@ANYBLOB="99035d5b7f69da57f63147198a90a562b2eea3bac25bd37434bf8934e7fcf753e75fa96444e9f42e20aad2a4f6b0d8b136c545a327d43b0984a27315d8e8563c9b59b7ec53262016f566bb041904f160ec30b8c23d3d37871a34e0ae07703a2234324d1ed0ed04dd461abe3a5b41ec402ecc98d5ab591b1a4b7ba846ab43047b3250dd5b35f8f6e6ce238effe93ee2c6ea6001f9e3c49914da"]}, {0x29, &(0x7f0000000240)=@string={0x29, 0x3, "664f72f43ad44323f6acfc0858232221c1e9007c0274ccd76ccd83c45cacb23a0fed5924dd0d34"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}, {0xd3, &(0x7f0000000340)=ANY=[@ANYBLOB="d30335d889737a2c116ba505bffbc6b8f79b3ebb9da350a90c4fbaca9b14f6368e63e74f62e98a4f2e3037a496e7039138bda2cc7222921c8546e0fa6bf5437ca4910cb412451e49541eb19a83756027bbf53a1d2eba7e29b4506e789a4e38155639e168a6ef1b95b7c7e113dd1f2babb90300000049b9372f905bb7731c9687dce0ca450ed04fae48db92a5e13e69d71805c65e3c1ae27827b7e0156a0db2d5cfd27d2fad1a19f347cf899db53be7cde8e0d3d588bcab21e9a91f24d28e319c5f2ce511b0c45c656fdf692dd61f320bb1334b"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x438}}, {0x57, &(0x7f0000000600)=ANY=[@ANYBLOB="5703351392d1981e42b4216725aa3747de701be071949e5467e742070633d0afcbd676abdd44d6ec5b23095af41621318ef012771500fa7b3bc94a73391c0195083d845ddf10104d4a8adf41c10a0c43303d5794d797d3aafa210d4c"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 4.093428865s ago: executing program 2 (id=1058): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000095000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000063, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.96105913s ago: executing program 2 (id=1059): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xa, &(0x7f0000000000)={0x3, 0x1}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="ce188ee1630fd78154b9aa1840bdf3c3", 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x1e24, &(0x7f0000000380)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.79087144s ago: executing program 4 (id=1060): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x7000000, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 3.681454549s ago: executing program 4 (id=1061): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', '', [], 0xa, "5dd25dee0984c07f1db6d30cacec3ca9eb32a6c359c672b8cc2714d0cd4eb27da14aad4202832e397b062c7d43e90b83b5038620aab8bc3821cb20ba0524d6566e8c2be0cde522ca71777125acb0fdb89085c682"}, 0x58) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000280)={'ip6tnl0\x00', {0x2, 0x4e21, @loopback}}) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x6, &(0x7f0000000200)=0xfffffff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="dec5c952", @ANYRES16=0x0, @ANYBLOB="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"], 0x123c}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="dec5c952", @ANYRES16=0x0, @ANYBLOB="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"], 0x123c}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mount$cgroup(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x10000, &(0x7f0000000040)) 3.271379237s ago: executing program 5 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_setup(0xdf9, 0x0, &(0x7f0000000300), &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x1a, 0x2008, 0x0, @value}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r5, 0x4, 0x7c00) dup3(r6, r5, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x301}, 0x14}}, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000ac0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@cgroup=r7, 0xffffffffffffffff, 0x1a, 0x11, 0xffffffffffffffff, @void, @value}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) clock_adjtime(0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0xfffe, 0x0, @remote}, r10}}, 0x48) 2.936696708s ago: executing program 3 (id=1064): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000001dc0)={'sit0\x00', &(0x7f0000001d80)={@mcast2, @remote, 0x11, 0x1a}}) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r2, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 2.772839803s ago: executing program 3 (id=1065): get_mempolicy(0x0, 0xfffffffffffffffe, 0x80, &(0x7f0000ffb000/0x3000)=nil, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcd702000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000006200)={0x3, 0x2000000000000289, &(0x7f0000005540)=ANY=[@ANYBLOB="1800000000000000000008200000000018110000", @ANYRESDEC=r3, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000204000000000300000000000d020000000000000061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) recvmmsg(r0, &(0x7f0000005dc0)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=""/172, 0xac}, 0x2472e061}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/4, 0x4}, {&(0x7f00000005c0)=""/38, 0x26}, {&(0x7f0000000600)=""/111, 0x6f}, {&(0x7f0000000680)=""/190, 0xbe}], 0x7, &(0x7f00000007c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000017c0)=@ax25={{0x3, @bcast}, [@rose, @remote, @remote, @remote, @bcast, @bcast]}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000001840)=""/81, 0x51}, {&(0x7f00000018c0)=""/192, 0xc0}, {&(0x7f0000001980)=""/156, 0x9c}, {0x0}], 0x5}, 0x80}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001b80)=""/74, 0x4a}, {&(0x7f0000006000)=""/201, 0xc9}, {&(0x7f0000006180)=""/114, 0x72}, {&(0x7f00000001c0)=""/53, 0x35}], 0x4, &(0x7f0000001c40)=""/34, 0x22}, 0x3}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/8, 0x8}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001d00)=""/114, 0x72}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/23, 0x17}], 0x7, &(0x7f0000005000)=""/222, 0xde}, 0xfffffff8}, {{&(0x7f0000001f00)=@alg, 0x80, &(0x7f0000001f80), 0x0, &(0x7f0000005100)=""/162, 0xa2}, 0x3}, {{&(0x7f00000051c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005240)=""/104, 0x68}], 0x1}, 0x81}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005300)=""/157, 0x9d}, {&(0x7f00000053c0)=""/75, 0x4b}, {&(0x7f0000005440)=""/56, 0x38}, {&(0x7f0000005480)=""/172, 0xac}, {&(0x7f0000005540)}, {&(0x7f0000005580)=""/121, 0x79}, {&(0x7f0000005600)=""/186, 0xba}, {&(0x7f00000056c0)=""/76, 0x4c}, {&(0x7f0000005740)=""/125, 0x7d}], 0x9, &(0x7f0000005880)=""/156, 0x9c}, 0x9}, {{&(0x7f0000005940)=@hci, 0x80, &(0x7f0000005d00)=[{&(0x7f00000059c0)}, {&(0x7f0000005a00)=""/13, 0xd}, {&(0x7f0000005a40)=""/216, 0xd8}, {&(0x7f0000005b40)=""/223, 0xdf}, {&(0x7f0000005c40)=""/75, 0x4b}, {&(0x7f0000005cc0)=""/38, 0x26}], 0x6, &(0x7f0000001cc0)=""/55, 0x37}, 0x6}], 0x9, 0x2, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd70000000df250700000008000300", @ANYRES32=r1, @ANYBLOB="1400040073797a6b616c6c65723000000000000008000500070000000400cc00"], 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 2.352544128s ago: executing program 5 (id=1066): r0 = io_uring_setup(0x253d, &(0x7f0000000080)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 2.274322466s ago: executing program 5 (id=1067): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ad9931}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 2.180918074s ago: executing program 2 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x228043) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8000, 0x700, 0xc, 0x4, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x65, 0x9d97, 0x1c, 0x4, 0x0, @broadcast, @private=0x8, {[@timestamp_addr={0x44, 0x4, 0xe2, 0x1, 0x2}, @rr={0x7, 0xf, 0xf2, [@loopback, @remote, @multicast2]}, @generic={0x86, 0x9, "49acbea9e0c2e8"}, @generic={0x44, 0x4, "22cc"}, @noop, @timestamp_prespec={0x44, 0x4, 0x61, 0x3, 0x5}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000fa0600000000000000ffffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185a000010000000000000000000000018550000040000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x975, 0x15, &(0x7f0000000200)=""/21, 0x41000, 0x78, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xf, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=[{0x4, 0x2, 0x8, 0x3}], 0x10, 0x800, @void, @value}, 0x94) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)=@multiplanar_mmap={0x1000, 0x2, 0x4, 0x800, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "cfbe388e"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan1\x00'}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) readv(r4, &(0x7f0000000000)=[{&(0x7f00000007c0)=""/240, 0xf0}], 0x1) accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@rose, @rose, @bcast, @bcast, @default, @remote, @default, @bcast]}, &(0x7f0000000100)=0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f00000000000500360000000000050037000000000008000200", @ANYRES32=r9, @ANYBLOB="3ceaccc3269cab38a9e169d11b04000000000000006d95e056fd03e1768c268051915731b8c6ab"], 0x34}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) 2.178117068s ago: executing program 5 (id=1069): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0xf) r0 = socket$inet(0xa, 0x801, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c00080000001f000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0) 2.177617187s ago: executing program 4 (id=1070): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000001840)='net/raw6\x00') read$FUSE(r1, &(0x7f0000006c00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, r2, r3) r4 = syz_clone(0x70000, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x81) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder1\x00', 0x802, 0x0) getpid() r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00'}, 0x10) syz_open_procfs(r4, &(0x7f0000000100)='net/icmp6\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) dup(r10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) 1.889452964s ago: executing program 3 (id=1071): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000095000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.731262809s ago: executing program 5 (id=1072): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b708ffb0020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.664782937s ago: executing program 3 (id=1073): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e030000000000000000ffef000000000203000000000000000000000204000000000000000000000d020000000000000061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.569060009s ago: executing program 5 (id=1074): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x5, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0xfffffffffffffe9d) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x1, 0x1, 0x0, 0x2}, 'syz0\x00', 0x25}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x800}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0xffffffff) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.536278829s ago: executing program 3 (id=1075): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200c0ffffff4704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 36.984483ms ago: executing program 3 (id=1076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xdf9, &(0x7f00000035c0)={0x0, 0x0, 0x40, 0x0, 0x328}, &(0x7f0000000300), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x1a, 0x2008, 0x0, @value}, 0x18) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000ac0)='syz1\x00', 0x200002, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@cgroup=r4, 0xffffffffffffffff, 0x1a, 0x11, 0xffffffffffffffff, @void, @value=r5}, 0x20) r6 = syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000480)=[0xffffffffffffffff], 0x1) read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) clock_adjtime(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0xfffe, 0x0, @remote}, r10}}, 0x48) 23.635834ms ago: executing program 2 (id=1077): r0 = io_uring_setup(0x253d, &(0x7f0000000080)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1078): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', r1, 0xffffffffffffffff, 0x0, 0x20000000, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100fcffffff0000000003"], 0x1c}}, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', r1, 0xffffffffffffffff, 0x0, 0x20000000, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100fcffffff0000000003"], 0x1c}}, 0x0) (async) kernel console output (not intermixed with test programs): [ T5826] usb 3-1: config 0 has no interface number 0 [ 244.603891][ T5826] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 244.614537][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.642962][ T5826] usb 3-1: Product: syz [ 244.660251][ T5826] usb 3-1: Manufacturer: syz [ 244.665237][ T5833] block nbd4: shutting down sockets [ 244.673378][ T5833] blk_print_req_error: 6 callbacks suppressed [ 244.673392][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.693366][ T7910] FAULT_INJECTION: forcing a failure. [ 244.693366][ T7910] name failslab, interval 1, probability 0, space 0, times 1 [ 244.694938][ T5826] usb 3-1: SerialNumber: syz [ 244.711930][ T5909] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 244.720224][ T7910] CPU: 1 UID: 0 PID: 7910 Comm: syz.4.566 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 244.730837][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 244.740903][ T7910] Call Trace: [ 244.744231][ T7910] [ 244.747174][ T7910] dump_stack_lvl+0x16c/0x1f0 [ 244.751874][ T7910] should_fail_ex+0x497/0x5b0 [ 244.756555][ T7910] ? fs_reclaim_acquire+0xae/0x150 [ 244.761676][ T7910] should_failslab+0xc2/0x120 [ 244.766348][ T7910] __kmalloc_noprof+0xcb/0x400 [ 244.771112][ T7910] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 244.776759][ T7910] tomoyo_realpath_from_path+0xb9/0x720 [ 244.782305][ T7910] ? tomoyo_path_number_perm+0x232/0x590 [ 244.787936][ T7910] tomoyo_path_number_perm+0x245/0x590 [ 244.793388][ T7910] ? tomoyo_path_number_perm+0x232/0x590 [ 244.799022][ T7910] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.805000][ T7910] ? trace_lock_acquire+0x14a/0x1d0 [ 244.810232][ T7910] ? lock_acquire+0x2f/0xb0 [ 244.814735][ T7910] ? __fget_files+0x40/0x3f0 [ 244.819338][ T7910] ? __fget_files+0x244/0x3f0 [ 244.824011][ T7910] security_file_ioctl+0x9b/0x240 [ 244.829038][ T7910] __x64_sys_ioctl+0xbb/0x220 [ 244.833709][ T7910] do_syscall_64+0xcd/0x250 [ 244.838302][ T7910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.844210][ T7910] RIP: 0033:0x7f9a3c97e719 [ 244.848633][ T7910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.868253][ T7910] RSP: 002b:00007f9a3d76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.876678][ T7910] RAX: ffffffffffffffda RBX: 00007f9a3cb35f80 RCX: 00007f9a3c97e719 [ 244.884656][ T7910] RDX: 0000000020000000 RSI: 000000004020ae76 RDI: 0000000000000004 [ 244.892643][ T7910] RBP: 00007f9a3d76f090 R08: 0000000000000000 R09: 0000000000000000 [ 244.900629][ T7910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.908699][ T7910] R13: 0000000000000000 R14: 00007f9a3cb35f80 R15: 00007ffeb22642f8 [ 244.916737][ T7910] [ 244.919774][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.996879][ T7910] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.052276][ T5833] buffer_io_error: 6 callbacks suppressed [ 245.052293][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 245.069401][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.078543][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 245.086597][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.095816][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 245.105164][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.114280][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 245.123605][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.133370][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 245.143390][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.170671][ T5826] usb 3-1: config 0 descriptor?? [ 245.236933][ T5826] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 245.253834][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 245.302689][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.314593][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 245.361111][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.371825][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 245.486144][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 245.494042][ T5833] ldm_validate_partition_table(): Disk read failed. [ 245.507764][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.544966][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 245.553068][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.562877][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 245.571356][ T5833] Dev nbd4: unable to read RDB block 0 [ 245.577525][ T5833] nbd4: unable to read partition table [ 245.610273][ T5833] ldm_validate_partition_table(): Disk read failed. [ 245.617441][ T5833] Dev nbd4: unable to read RDB block 0 [ 245.619826][ T5826] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 245.623521][ T5833] nbd4: unable to read partition table [ 245.643592][ T5826] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 245.661126][ T5909] usb 4-1: unable to get BOS descriptor or descriptor too short [ 245.681055][ T5909] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 245.691246][ T5909] usb 4-1: config 12 has no interface number 0 [ 245.718376][ T5909] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 47, changing to 9 [ 245.746425][ T5909] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has invalid maxpacket 24635, setting to 1024 [ 245.815443][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 245.852052][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.863700][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.888418][ T29] audit: type=1400 audit(1731570660.071:544): avc: denied { name_bind } for pid=7891 comm="syz.2.559" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 246.007007][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 246.018014][ T25] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 246.058791][ T25] usb 2-1: config 0 has no interface number 0 [ 246.070887][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 147 [ 246.072947][ T25] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 246.093911][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.094058][ T5909] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 246.102844][ T25] usb 2-1: Product: syz [ 246.114967][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.123766][ T5909] usb 4-1: Product: syz [ 246.141855][ T5909] usb 4-1: Manufacturer: syz [ 246.324760][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 246.348906][ T5916] usb 3-1: USB disconnect, device number 10 [ 246.569204][ T25] usb 2-1: Manufacturer: syz [ 246.573874][ T25] usb 2-1: SerialNumber: syz [ 246.580727][ T25] usb 2-1: config 0 descriptor?? [ 246.592967][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 246.593169][ T25] smsc95xx v2.0.0 [ 246.607261][ T5909] usb 4-1: SerialNumber: syz [ 246.623539][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 246.627714][ T5976] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 246.638937][ T5916] quatech2 3-1:0.51: device disconnected [ 246.821956][ T5976] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 246.876232][ T5976] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 246.883262][ T5909] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.898916][ T5976] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 246.913473][ T5976] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 246.941616][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.953935][ T7920] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 246.963978][ T7920] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 246.979626][ T5909] usb 4-1: USB disconnect, device number 17 [ 247.277186][ T7929] FAULT_INJECTION: forcing a failure. [ 247.277186][ T7929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.290472][ T7929] CPU: 1 UID: 0 PID: 7929 Comm: syz.1.568 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 247.301077][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 247.311162][ T7929] Call Trace: [ 247.314446][ T7929] [ 247.317386][ T7929] dump_stack_lvl+0x16c/0x1f0 [ 247.322082][ T7929] should_fail_ex+0x497/0x5b0 [ 247.326779][ T7929] _copy_from_user+0x2e/0xd0 [ 247.331384][ T7929] move_addr_to_kernel+0x68/0x160 [ 247.336428][ T7929] __sys_connect+0xb4/0x180 [ 247.340937][ T7929] ? __pfx___sys_connect+0x10/0x10 [ 247.346082][ T7929] ? __pfx_ksys_write+0x10/0x10 [ 247.350982][ T7929] __x64_sys_connect+0x72/0xb0 [ 247.355763][ T7929] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.360981][ T7929] do_syscall_64+0xcd/0x250 [ 247.365498][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.371418][ T7929] RIP: 0033:0x7fe36cf7e719 [ 247.375841][ T7929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.395459][ T7929] RSP: 002b:00007fe36dd07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 247.403882][ T7929] RAX: ffffffffffffffda RBX: 00007fe36d136130 RCX: 00007fe36cf7e719 [ 247.411857][ T7929] RDX: 0000000000000060 RSI: 0000000020000040 RDI: 0000000000000009 [ 247.419834][ T7929] RBP: 00007fe36dd07090 R08: 0000000000000000 R09: 0000000000000000 [ 247.427814][ T7929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.435792][ T7929] R13: 0000000000000000 R14: 00007fe36d136130 R15: 00007fffc3b76b88 [ 247.443783][ T7929] [ 247.565700][ T5976] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.644549][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 247.809451][ T5976] usb 5-1: USB disconnect, device number 9 [ 247.827213][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.573'. [ 248.379149][ T7933] netlink: 32 bytes leftover after parsing attributes in process `syz.5.573'. [ 248.395547][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.552770][ T5829] block nbd7: Receive control failed (result -107) [ 248.585774][ T7933] nbd7: detected capacity change from 0 to 256 [ 248.593299][ T5847] block nbd7: Dead connection, failed to find a fallback [ 248.758815][ T25] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 248.769820][ T25] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 248.781104][ T25] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 248.792337][ T25] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 248.813130][ T29] audit: type=1400 audit(1731570663.011:545): avc: denied { setopt } for pid=7940 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.881796][ T25] usb 2-1: USB disconnect, device number 18 [ 248.882944][ T6271] udevd[6271]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.006689][ T7954] netlink: 308 bytes leftover after parsing attributes in process `syz.2.581'. [ 250.213041][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 250.238065][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 250.255856][ T7981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.587'. [ 250.334423][ T5829] block nbd8: Receive control failed (result -107) [ 250.366884][ T29] audit: type=1400 audit(1731570664.571:546): avc: denied { ioctl } for pid=7977 comm="syz.3.585" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 250.385332][ T5878] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 250.392123][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.404991][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 250.425692][ T7981] nbd8: detected capacity change from 0 to 256 [ 250.434075][ T6274] block nbd8: Dead connection, failed to find a fallback [ 250.455219][ T29] audit: type=1400 audit(1731570664.611:547): avc: denied { bind } for pid=7986 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.465146][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 250.475488][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.576947][ T5878] usb 6-1: config 0 has no interfaces? [ 250.608925][ T5878] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 250.625714][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.636829][ T5878] usb 6-1: Product: syz [ 250.643689][ T5878] usb 6-1: Manufacturer: syz [ 250.650172][ T5878] usb 6-1: SerialNumber: syz [ 250.661876][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 250.670256][ T25] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 250.684786][ T5878] usb 6-1: config 0 descriptor?? [ 250.689999][ T25] usb 5-1: config 0 has no interface number 0 [ 250.712818][ T25] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 250.723661][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.742733][ T25] usb 5-1: Product: syz [ 250.749061][ T25] usb 5-1: Manufacturer: syz [ 250.755107][ T5976] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 250.762903][ T25] usb 5-1: SerialNumber: syz [ 250.772187][ T25] usb 5-1: config 0 descriptor?? [ 250.779486][ T25] smsc95xx v2.0.0 [ 250.918596][ T5976] usb 2-1: Using ep0 maxpacket: 32 [ 250.930701][ T5976] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 250.964119][ T5976] usb 2-1: config 0 has no interface number 0 [ 250.985934][ T29] audit: type=1400 audit(1731570665.151:548): avc: denied { read } for pid=8000 comm="syz.2.595" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 251.045602][ T5976] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 251.220923][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.651514][ T8008] FAULT_INJECTION: forcing a failure. [ 251.651514][ T8008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.665294][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.4.588 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 251.675920][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 251.685987][ T8008] Call Trace: [ 251.689281][ T8008] [ 251.692215][ T8008] dump_stack_lvl+0x16c/0x1f0 [ 251.696909][ T8008] should_fail_ex+0x497/0x5b0 [ 251.701605][ T8008] _copy_to_user+0x32/0xd0 [ 251.706058][ T8008] simple_read_from_buffer+0xd0/0x160 [ 251.711455][ T8008] proc_fail_nth_read+0x198/0x270 [ 251.716495][ T8008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.722056][ T8008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.727616][ T8008] vfs_read+0x1df/0xbe0 [ 251.731796][ T8008] ? __fget_files+0x23a/0x3f0 [ 251.736492][ T8008] ? fdget_pos+0x24c/0x360 [ 251.740911][ T8008] ? __pfx_lock_release+0x10/0x10 [ 251.745942][ T8008] ? trace_lock_acquire+0x14a/0x1d0 [ 251.751152][ T8008] ? __pfx_vfs_read+0x10/0x10 [ 251.756275][ T8008] ? __pfx___mutex_lock+0x10/0x10 [ 251.761318][ T8008] ? __fget_files+0x244/0x3f0 [ 251.766023][ T8008] ksys_read+0x12f/0x260 [ 251.770289][ T8008] ? __pfx_ksys_read+0x10/0x10 [ 251.775087][ T8008] do_syscall_64+0xcd/0x250 [ 251.779611][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.785526][ T8008] RIP: 0033:0x7f9a3c97d15c [ 251.789947][ T8008] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 251.809592][ T8008] RSP: 002b:00007f9a3d72c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.818014][ T8008] RAX: ffffffffffffffda RBX: 00007f9a3cb36130 RCX: 00007f9a3c97d15c [ 251.825991][ T8008] RDX: 000000000000000f RSI: 00007f9a3d72c0a0 RDI: 000000000000000b [ 251.833964][ T8008] RBP: 00007f9a3d72c090 R08: 0000000000000000 R09: 0000000000000000 [ 251.841935][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.849910][ T8008] R13: 0000000000000000 R14: 00007f9a3cb36130 R15: 00007ffeb22642f8 [ 251.857930][ T8008] [ 251.860992][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.886937][ T29] audit: type=1400 audit(1731570665.151:549): avc: denied { open } for pid=8000 comm="syz.2.595" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 251.910474][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.929167][ T29] audit: type=1400 audit(1731570665.151:550): avc: denied { ioctl } for pid=8000 comm="syz.2.595" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 252.217209][ T5976] usb 2-1: Product: syz [ 252.221493][ T5976] usb 2-1: Manufacturer: syz [ 252.226229][ T5976] usb 2-1: SerialNumber: syz [ 252.276443][ T5976] usb 2-1: config 0 descriptor?? [ 252.287349][ T5976] smsc95xx v2.0.0 [ 252.599103][ T25] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 252.625034][ T25] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 252.907383][ T25] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 252.923292][ T25] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 252.944111][ T25] usb 5-1: USB disconnect, device number 10 [ 253.281585][ T8010] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 254.244472][ T29] audit: type=1400 audit(1731570668.441:551): avc: denied { ioctl } for pid=8019 comm="syz.4.599" path="socket:[16713]" dev="sockfs" ino=16713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.514576][ T967] usb 6-1: USB disconnect, device number 7 [ 254.529214][ T29] audit: type=1400 audit(1731570668.731:552): avc: denied { ioctl } for pid=8019 comm="syz.4.599" path="socket:[17744]" dev="sockfs" ino=17744 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.792562][ T8020] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 255.722944][ T5976] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 255.733795][ T5976] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 255.743641][ T5976] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 255.754840][ T5976] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 255.775824][ T5976] usb 2-1: USB disconnect, device number 19 [ 255.910129][ T8042] blk_print_req_error: 27 callbacks suppressed [ 255.910149][ T8042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.925853][ T8042] buffer_io_error: 27 callbacks suppressed [ 255.925868][ T8042] Buffer I/O error on dev nbd1, logical block 0, async page read [ 255.939698][ T8042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.948896][ T8042] Buffer I/O error on dev nbd1, logical block 0, async page read [ 255.956892][ T8042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.966484][ T8042] Buffer I/O error on dev nbd1, logical block 0, async page read [ 255.977573][ T8042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.990312][ T29] audit: type=1326 audit(1731570670.181:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.1.603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf7e719 code=0x0 [ 256.039581][ T8042] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.304752][ T8042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.315341][ T5878] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 256.323134][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 256.343148][ T8032] netlink: 'syz.4.599': attribute type 10 has an invalid length. [ 256.369185][ T8042] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.381202][ T8032] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 256.399912][ T8042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.420271][ T8032] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 256.432486][ T8042] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.440530][ T8042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.449652][ T8042] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.457448][ T5878] usb 4-1: device descriptor read/64, error -32 [ 256.457603][ T8042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.473021][ T8042] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.481647][ T8042] ldm_validate_partition_table(): Disk read failed. [ 256.488757][ T8042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.501494][ T8042] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.510018][ T8042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.519637][ T8042] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.615437][ T8042] Dev nbd1: unable to read RDB block 0 [ 256.641911][ T8042] nbd1: unable to read partition table [ 256.818070][ T5878] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 256.856105][ T8060] netlink: 'syz.2.606': attribute type 3 has an invalid length. [ 256.864166][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 257.338354][ T29] audit: type=1400 audit(1731570671.031:554): avc: denied { getopt } for pid=8051 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 257.452074][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.458880][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.995047][ T5878] usb 4-1: device descriptor read/64, error -71 [ 258.080450][ T29] audit: type=1400 audit(1731570672.111:555): avc: denied { write } for pid=5976 comm="kworker/1:7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16750 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 258.185642][ T5878] usb usb4-port1: attempt power cycle [ 258.638042][ T5878] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 258.675511][ T5878] usb 4-1: device descriptor read/8, error -71 [ 258.736217][ T29] audit: type=1400 audit(1731570672.941:556): avc: denied { connect } for pid=8089 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 258.945005][ T5878] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 259.092690][ T8100] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 259.092690][ T8100] program syz.2.620 not setting count and/or reply_len properly [ 259.467689][ T5878] usb 4-1: device descriptor read/8, error -71 [ 259.575299][ T5878] usb usb4-port1: unable to enumerate USB device [ 259.688448][ T8098] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 259.870678][ T29] audit: type=1400 audit(1731570674.071:557): avc: denied { connect } for pid=8117 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 260.015022][ T29] audit: type=1326 audit(1731570674.191:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec057e719 code=0x7fc00000 [ 260.169712][ T29] audit: type=1326 audit(1731570674.191:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec057e719 code=0x7fc00000 [ 260.193191][ T29] audit: type=1400 audit(1731570674.261:560): avc: denied { create } for pid=8117 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.216949][ T29] audit: type=1400 audit(1731570674.261:561): avc: denied { setopt } for pid=8117 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.482938][ T29] audit: type=1400 audit(1731570674.261:562): avc: denied { write } for pid=8117 comm="syz.1.625" laddr=fe80::a lport=1 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 260.796089][ T29] audit: type=1326 audit(1731570675.001:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8135 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf7e719 code=0x7ffc0000 [ 260.826290][ T29] audit: type=1326 audit(1731570675.021:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8135 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fe36cf7e719 code=0x7ffc0000 [ 260.852853][ T29] audit: type=1326 audit(1731570675.021:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8135 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36cf7e719 code=0x7ffc0000 [ 260.881597][ T29] audit: type=1326 audit(1731570675.031:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8135 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe36cf7e719 code=0x7ffc0000 [ 261.127245][ T8144] fuse: Bad value for 'fd' [ 261.368144][ T25] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 261.496727][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.633'. [ 261.508106][ T5909] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 261.723416][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.767320][ T5909] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 261.832248][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.886045][ T5909] usb 5-1: Product: syz [ 261.898856][ T5909] usb 5-1: Manufacturer: syz [ 261.904286][ T5909] usb 5-1: SerialNumber: syz [ 261.923571][ T5909] usb 5-1: config 0 descriptor?? [ 261.941281][ T5909] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 261.957240][ T25] usb 2-1: config 0 has an invalid interface number: 165 but max is 0 [ 261.966044][ T25] usb 2-1: config 0 has no interface number 0 [ 261.991706][ T25] usb 2-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=3b.5b [ 262.005212][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.017948][ T25] usb 2-1: Product: syz [ 262.114425][ T25] usb 2-1: Manufacturer: syz [ 262.119230][ T25] usb 2-1: SerialNumber: syz [ 262.155999][ T25] usb 2-1: config 0 descriptor?? [ 262.201340][ T5826] usb 5-1: USB disconnect, device number 11 [ 262.261519][ T8157] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.636'. [ 262.279517][ T8157] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 262.297525][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'. [ 262.610016][ T25] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 262.626472][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.637690][ T25] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 262.646123][ T25] usb 2-1: media controller created [ 263.230303][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.501754][ T8169] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 263.525322][ T25] DVB: Unable to find symbol dib7000p_attach() [ 263.541663][ T25] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 263.701509][ T25] rc_core: IR keymap rc-dib0700-rc5 not found [ 263.752128][ T25] Registered IR keymap rc-empty [ 263.765147][ T25] dvb-usb: could not initialize remote control. [ 263.771439][ T25] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 263.822653][ T25] usb 2-1: USB disconnect, device number 20 [ 263.891770][ T8191] sctp: [Deprecated]: syz.1.643 (pid 8191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.891770][ T8191] Use struct sctp_sack_info instead [ 263.939398][ T25] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 264.030311][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 264.036436][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 264.198766][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'. [ 265.169072][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.648'. [ 265.285491][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 265.465112][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 265.547216][ T967] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 265.582594][ T25] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 265.595187][ T25] usb 2-1: config 0 has no interface number 0 [ 265.627640][ T25] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 240, changing to 11 [ 265.695249][ T25] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 9790, setting to 1024 [ 265.809607][ T967] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.838523][ T967] usb 4-1: config 0 has no interface number 0 [ 265.860038][ T967] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 265.871937][ T25] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 265.881219][ T25] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 265.894249][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.931509][ T967] usb 4-1: Product: syz [ 265.954140][ T967] usb 4-1: Manufacturer: syz [ 265.976885][ T967] usb 4-1: SerialNumber: syz [ 266.049581][ T25] usb 2-1: Product: syz [ 266.054327][ T25] usb 2-1: SerialNumber: syz [ 266.061043][ T25] usb 2-1: config 0 descriptor?? [ 266.071444][ T8196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.098801][ T967] usb 4-1: config 0 descriptor?? [ 266.109349][ T25] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 266.119745][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input9 [ 266.185217][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 266.185237][ T29] audit: type=1400 audit(1731570680.361:634): avc: denied { read } for pid=5188 comm="acpid" name="event4" dev="devtmpfs" ino=2909 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.800630][ T29] audit: type=1400 audit(1731570680.361:635): avc: denied { open } for pid=5188 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2909 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.827478][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.832239][ T5826] usb 2-1: USB disconnect, device number 21 [ 266.834726][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 266.876335][ T29] audit: type=1400 audit(1731570680.361:636): avc: denied { ioctl } for pid=5188 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2909 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.928502][ T5826] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 266.939884][ T967] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 266.969165][ T8237] netlink: 666 bytes leftover after parsing attributes in process `syz.4.655'. [ 266.997621][ T967] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 267.030771][ T967] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 267.040871][ T967] usb 4-1: media controller created [ 267.076991][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.183280][ T967] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 267.234239][ T8241] autofs: Bad value for 'uid' [ 267.267461][ T8241] autofs: Bad value for 'uid' [ 267.437261][ T967] usb 4-1: USB disconnect, device number 22 [ 273.946243][ T29] audit: type=1400 audit(1731570688.151:637): avc: denied { shutdown } for pid=8296 comm="syz.5.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 274.120759][ T8304] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 274.127856][ T8304] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 274.148809][ T8304] hsr_slave_0: left promiscuous mode [ 274.172999][ T8304] hsr_slave_1: left promiscuous mode [ 274.510837][ T29] audit: type=1400 audit(1731570688.641:638): avc: denied { read write } for pid=8303 comm="syz.1.672" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 274.538426][ T8306] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 274.745110][ T8306] CIFS mount error: No usable UNC path provided in device string! [ 274.745110][ T8306] [ 274.758781][ T8306] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 274.771420][ T29] audit: type=1400 audit(1731570688.681:639): avc: denied { open } for pid=8303 comm="syz.1.672" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 275.004670][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.673'. [ 276.593247][ T8334] loop2: detected capacity change from 0 to 7 [ 276.650170][ T8334] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 276.705075][ T8334] loop2: partition table partially beyond EOD, truncated [ 276.724434][ T8334] loop2: p1 size 6333 extends beyond EOD, truncated [ 276.875944][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 276.976244][ T5878] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 277.137762][ T5878] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 277.154192][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 277.571234][ T5878] usb 2-1: can't read configurations, error -61 [ 277.956499][ T5878] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 278.131254][ T5878] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 278.151143][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 278.160166][ T5878] usb 2-1: can't read configurations, error -61 [ 278.440292][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 278.480307][ T5878] usb usb2-port1: attempt power cycle [ 278.603182][ T9] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 278.611327][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.646145][ T9] usb 5-1: config 0 has no interface number 0 [ 278.662230][ T9] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x82 has invalid maxpacket 975, setting to 64 [ 278.680989][ T9] usb 5-1: New USB device found, idVendor=05c6, idProduct=7102, bcdDevice=10.5f [ 278.694490][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.704763][ T9] usb 5-1: Product: syz [ 278.709388][ T9] usb 5-1: Manufacturer: syz [ 278.714099][ T9] usb 5-1: SerialNumber: syz [ 278.733651][ T9] usb 5-1: config 0 descriptor?? [ 278.745638][ T8341] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 279.559614][ T5878] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 279.609864][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.646145][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.781312][ T9] usb 5-1: USB disconnect, device number 12 [ 279.795046][ T5878] usb 2-1: device not accepting address 24, error -71 [ 279.988200][ T8376] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 280.198608][ T29] audit: type=1400 audit(1731570694.401:640): avc: denied { setopt } for pid=8390 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 280.222214][ T8391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 280.239810][ T29] audit: type=1400 audit(1731570694.441:641): avc: denied { write } for pid=8390 comm="syz.1.694" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.255058][ T5976] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 280.272339][ T29] audit: type=1400 audit(1731570694.481:642): avc: denied { bind } for pid=8380 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 280.287186][ T8391] syz.1.694 (8391): /proc/8390/oom_adj is deprecated, please use /proc/8390/oom_score_adj instead. [ 280.292701][ T29] audit: type=1400 audit(1731570694.481:643): avc: denied { listen } for pid=8380 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 280.436599][ T5976] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 280.466113][ T5976] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 280.474258][ T5976] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 280.537333][ T5976] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 281.056308][ T5976] usb 4-1: config 0 interface 0 has no altsetting 0 [ 281.566838][ T5976] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 281.668786][ T8410] trusted_key: encrypted_key: master key parameter '' is invalid [ 282.488403][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.499770][ T5976] usb 4-1: Product: syz [ 282.503996][ T5976] usb 4-1: Manufacturer: syz [ 282.505901][ T29] audit: type=1400 audit(1731570696.671:644): avc: denied { connect } for pid=8411 comm="syz.4.700" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 282.508705][ T5976] usb 4-1: SerialNumber: syz [ 282.541499][ T5976] usb 4-1: config 0 descriptor?? [ 282.548140][ T8382] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 282.916371][ T29] audit: type=1400 audit(1731570697.111:645): avc: denied { mount } for pid=8415 comm="syz.5.702" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 283.061339][ T29] audit: type=1400 audit(1731570697.251:646): avc: denied { unmount } for pid=6600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 283.166006][ T8382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.322260][ T8382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.408655][ T8429] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 283.418454][ T8429] PKCS7: Only support pkcs7_signedData type [ 283.641954][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 283.817793][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.833430][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 283.869996][ T45] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 283.885358][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.916872][ T45] usb 3-1: config 0 descriptor?? [ 284.736557][ T29] audit: type=1400 audit(1731570698.941:647): avc: denied { search } for pid=5497 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.765001][ T8440] trusted_key: syz.5.708 sent an empty control message without MSG_MORE. [ 284.826897][ T29] audit: type=1400 audit(1731570698.991:648): avc: denied { read } for pid=5497 comm="dhcpcd" name="n101" dev="tmpfs" ino=4495 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.889760][ T29] audit: type=1400 audit(1731570698.991:649): avc: denied { open } for pid=5497 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=4495 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.934142][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.708'. [ 284.960206][ T45] usb 3-1: string descriptor 0 read error: -71 [ 284.974859][ T45] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 284.975222][ T8440] netlink: 'syz.5.708': attribute type 5 has an invalid length. [ 284.999099][ T45] usb 3-1: USB disconnect, device number 11 [ 285.072091][ T8440] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.081234][ T8440] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.090130][ T8440] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.098940][ T8440] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.118099][ T8440] vxlan0: entered promiscuous mode [ 285.165174][ T5826] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 285.325073][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 285.344559][ T5826] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 285.360361][ T5826] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 285.397220][ T5826] usb 2-1: config 0 has no interface number 0 [ 285.428823][ T5826] usb 2-1: config 0 interface 12 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 285.461600][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 285.461618][ T29] audit: type=1400 audit(1731570699.651:652): avc: denied { read } for pid=8454 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.493998][ T5826] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.509261][ T5826] usb 2-1: config 0 interface 12 has no altsetting 0 [ 285.516688][ T29] audit: type=1400 audit(1731570699.661:653): avc: denied { open } for pid=8454 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.543872][ T5826] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 285.558819][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.572431][ T29] audit: type=1400 audit(1731570699.661:654): avc: denied { getattr } for pid=8454 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.654840][ T5826] usb 2-1: Product: syz [ 285.662319][ T5826] usb 2-1: Manufacturer: syz [ 285.681944][ T5826] usb 2-1: SerialNumber: syz [ 285.709054][ T5826] usb 2-1: config 0 descriptor?? [ 285.762408][ T5826] cdc_acm 2-1:0.12: Zero length descriptor references [ 285.775676][ T5976] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 285.783878][ T5976] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 285.792862][ T5826] cdc_acm 2-1:0.12: probe with driver cdc_acm failed with error -22 [ 285.823558][ T8460] netlink: 'syz.2.712': attribute type 153 has an invalid length. [ 285.832406][ T5976] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 285.836802][ T5826] f81534 2-1:0.12: required endpoints missing [ 285.858626][ T5976] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 285.912751][ T5976] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 285.943924][ T5826] usb 2-1: USB disconnect, device number 26 [ 285.961210][ T5976] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 286.011666][ T5976] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 286.073229][ T29] audit: type=1400 audit(1731570700.261:655): avc: denied { create } for pid=8468 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.098606][ T5976] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 286.113364][ T5976] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 286.208670][ T29] audit: type=1400 audit(1731570700.401:656): avc: denied { write } for pid=8452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.213004][ T5976] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 286.240254][ T29] audit: type=1400 audit(1731570700.401:657): avc: denied { add_name } for pid=8452 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.465152][ T29] audit: type=1400 audit(1731570700.401:658): avc: denied { connect } for pid=8468 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.750306][ T5976] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 286.755738][ T29] audit: type=1400 audit(1731570700.411:659): avc: denied { create } for pid=8452 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 286.759363][ T5976] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 286.788478][ T29] audit: type=1400 audit(1731570700.411:660): avc: denied { write } for pid=8452 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=4529 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 286.788545][ T5976] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 286.892745][ T5976] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 286.935290][ T29] audit: type=1400 audit(1731570700.411:661): avc: denied { append } for pid=8452 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=4529 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.036981][ T5976] usb 4-1: USB disconnect, device number 23 [ 287.063330][ T5976] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 287.112719][ T5976] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 287.139091][ T5976] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 287.173279][ T5976] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 287.183582][ T5976] keyspan 4-1:0.0: device disconnected [ 287.239682][ T8491] bond0: entered promiscuous mode [ 287.244774][ T8491] bond_slave_0: entered promiscuous mode [ 287.252381][ T8491] bond_slave_1: entered promiscuous mode [ 287.259313][ T8491] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 287.375097][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 287.395129][ T5826] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 287.399892][ T8507] blk_print_req_error: 6 callbacks suppressed [ 287.399915][ T8507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.415551][ T5881] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 287.420086][ T8507] buffer_io_error: 6 callbacks suppressed [ 287.420105][ T8507] Buffer I/O error on dev nbd4, logical block 0, async page read [ 287.440161][ T8507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.450458][ T8507] Buffer I/O error on dev nbd4, logical block 0, async page read [ 287.462179][ T8507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.472189][ T8507] Buffer I/O error on dev nbd4, logical block 0, async page read [ 287.481483][ T8507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.490801][ T8507] Buffer I/O error on dev nbd4, logical block 0, async page read [ 287.499918][ T8507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.509934][ T8507] Buffer I/O error on dev nbd4, logical block 0, async page read [ 287.515109][ T5976] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 287.517951][ T8507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.525858][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 287.540445][ T8507] Buffer I/O error on dev nbd4, logical block 0, async page read [ 287.542267][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.551254][ T5826] usb 6-1: Using ep0 maxpacket: 32 [ 287.562829][ T25] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 287.577008][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.578566][ T5826] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 287.585856][ T25] usb 3-1: Product: syz [ 287.597161][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 287.609267][ T25] usb 3-1: Manufacturer: syz [ 287.613268][ T8507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.615731][ T25] usb 3-1: SerialNumber: syz [ 287.628891][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 287.641574][ T25] usb 3-1: config 0 descriptor?? [ 287.651154][ T8507] Buffer I/O error on dev nbd4, logical block 0, async page read [ 287.660611][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.663477][ T25] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 287.679043][ T25] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 287.683596][ T5881] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.695361][ T8507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.705749][ T5976] usb 4-1: Using ep0 maxpacket: 16 [ 287.711078][ T8507] Buffer I/O error on dev nbd4, logical block 0, async page read [ 287.723610][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 287.738637][ T8507] ldm_validate_partition_table(): Disk read failed. [ 287.746914][ T8507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.757944][ T5976] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 287.767364][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.775780][ T5976] usb 4-1: Product: syz [ 287.780349][ T8507] Buffer I/O error on dev nbd4, logical block 0, async page read [ 287.782237][ T5826] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 287.790219][ T25] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 287.798971][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.808233][ T5976] usb 4-1: Manufacturer: syz [ 287.815264][ T5826] usb 6-1: Product: syz [ 287.815283][ T5826] usb 6-1: Manufacturer: syz [ 287.815296][ T5826] usb 6-1: SerialNumber: syz [ 287.825007][ T5881] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=d4.0c [ 287.830797][ T8507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.833713][ T5881] usb 2-1: New USB device strings: Mfr=26, Product=205, SerialNumber=3 [ 287.861146][ T5881] usb 2-1: Product: syz [ 287.865484][ T5881] usb 2-1: Manufacturer: syz [ 287.870105][ T5881] usb 2-1: SerialNumber: syz [ 287.877737][ T5826] usb 6-1: config 0 descriptor?? [ 287.884442][ T5881] usb 2-1: config 0 descriptor?? [ 287.892479][ T8507] Buffer I/O error on dev nbd4, logical block 0, async page read [ 287.901401][ T5976] usb 4-1: SerialNumber: syz [ 287.924108][ T5976] usb 4-1: config 0 descriptor?? [ 287.943556][ T5976] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 287.944612][ T5826] usb 6-1: no audio or video endpoints found [ 287.963273][ T5976] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 287.970145][ T8507] Dev nbd4: unable to read RDB block 0 [ 287.996050][ T8507] nbd4: unable to read partition table [ 288.019170][ T8510] ldm_validate_partition_table(): Disk read failed. [ 288.030296][ T8510] Dev nbd4: unable to read RDB block 0 [ 288.037165][ T8510] nbd4: unable to read partition table [ 288.105970][ T8484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.211594][ T8484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.279027][ T8515] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.719'. [ 288.589314][ T5826] usb 2-1: USB disconnect, device number 27 [ 289.304779][ T5976] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 289.740674][ T8477] ceph: No mds server is up or the cluster is laggy [ 290.558000][ T5826] usb 3-1: USB disconnect, device number 12 [ 290.669560][ T5844] Bluetooth: hci5: unexpected event for opcode 0x2c6d [ 290.714965][ T25] usb 6-1: USB disconnect, device number 8 [ 291.759030][ T5976] em28xx 4-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 291.775021][ T5976] em28xx 4-1:0.0: board has no eeprom [ 292.155016][ T5976] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 292.162937][ T5976] em28xx 4-1:0.0: dvb set to bulk mode. [ 292.182035][ T45] em28xx 4-1:0.0: Binding DVB extension [ 292.257645][ T5976] usb 4-1: USB disconnect, device number 24 [ 292.264334][ T5976] em28xx 4-1:0.0: Disconnecting em28xx [ 292.294807][ T45] em28xx 4-1:0.0: Registering input extension [ 292.379438][ T5976] em28xx 4-1:0.0: Closing input extension [ 292.486718][ T5976] em28xx 4-1:0.0: Freeing device [ 292.881456][ T8586] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 293.663520][ T45] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 293.671697][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 294.010268][ T45] usb 6-1: device descriptor read/64, error -71 [ 294.036197][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 294.746407][ T45] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 294.774815][ T25] usb 5-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 294.790384][ T5844] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 294.800489][ T5844] Bluetooth: hci5: Injecting HCI hardware error event [ 294.811165][ T5844] Bluetooth: hci5: hardware error 0x00 [ 294.929392][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.941843][ T25] usb 5-1: New USB device found, idVendor=17ee, idProduct=721e, bcdDevice=de.06 [ 294.956444][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.965819][ T25] usb 5-1: Product: syz [ 294.970048][ T25] usb 5-1: Manufacturer: syz [ 294.974668][ T25] usb 5-1: SerialNumber: syz [ 294.991795][ T25] usb 5-1: config 0 descriptor?? [ 295.061595][ T8600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.070533][ T45] usb 6-1: device descriptor read/64, error -71 [ 295.222025][ T45] usb usb6-port1: attempt power cycle [ 296.802138][ T25] usb 5-1: USB disconnect, device number 13 [ 296.984995][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 296.985012][ T29] audit: type=1400 audit(1731570711.181:668): avc: denied { map } for pid=8615 comm="syz.1.748" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 297.062171][ T29] audit: type=1400 audit(1731570711.261:669): avc: denied { mount } for pid=8616 comm="syz.3.750" name="/" dev="ramfs" ino=19055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 297.084336][ T5844] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 297.269209][ T8626] netlink: 32 bytes leftover after parsing attributes in process `syz.5.751'. [ 297.388628][ T8617] Process accounting resumed [ 297.437804][ T29] audit: type=1400 audit(1731570711.641:670): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 298.478294][ T5844] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 298.855030][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 298.862338][ T8653] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 298.900525][ T29] audit: type=1400 audit(1731570713.101:671): avc: denied { accept } for pid=8649 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 299.005005][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 299.011757][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 299.023940][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 299.099504][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 299.131744][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.762'. [ 299.144183][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.172233][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.201351][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 299.237668][ T25] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 299.247251][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.260376][ T25] usb 2-1: Product: syz [ 299.264593][ T25] usb 2-1: Manufacturer: syz [ 299.269741][ T25] usb 2-1: SerialNumber: syz [ 299.292637][ T25] usb 2-1: config 0 descriptor?? [ 299.950545][ T45] usb 2-1: USB disconnect, device number 28 [ 300.122678][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 300.653235][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 300.672120][ T25] usb 4-1: config 6 has no interfaces? [ 300.692137][ T25] usb 4-1: New USB device found, idVendor=2639, idProduct=0102, bcdDevice=c8.39 [ 300.703083][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.711757][ T25] usb 4-1: Product: syz [ 300.716589][ T25] usb 4-1: Manufacturer: syz [ 300.722564][ T25] usb 4-1: SerialNumber: syz [ 300.807469][ T5878] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 301.394123][ T29] audit: type=1400 audit(1731570715.341:672): avc: denied { map } for pid=8682 comm="syz.2.768" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.430416][ T29] audit: type=1400 audit(1731570715.341:673): avc: denied { set_context_mgr } for pid=8682 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 301.662146][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 301.750360][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 301.763074][ T5878] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 301.773110][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 301.784579][ T5878] usb 6-1: Manufacturer: syz [ 301.791239][ T5878] usb 6-1: SerialNumber: syz [ 301.832203][ T5878] usb 6-1: config 0 descriptor?? [ 301.873273][ T5878] em28xx 6-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 301.882680][ T5878] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 301.903742][ T25] usb 4-1: USB disconnect, device number 25 [ 302.094131][ T29] audit: type=1400 audit(1731570716.291:674): avc: denied { read } for pid=8676 comm="syz.5.767" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 302.096091][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.117808][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.125743][ T29] audit: type=1400 audit(1731570716.291:675): avc: denied { open } for pid=8676 comm="syz.5.767" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 302.164966][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.203575][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.767'. [ 302.315292][ T5878] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 302.390521][ T5878] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 302.412531][ T5878] em28xx 6-1:0.0: board has no eeprom [ 302.505799][ T5878] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.513839][ T5878] em28xx 6-1:0.0: dvb set to bulk mode. [ 302.536346][ T5844] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 302.546447][ T5844] Bluetooth: hci3: Injecting HCI hardware error event [ 302.552568][ T25] em28xx 6-1:0.0: Binding DVB extension [ 302.555969][ T5844] Bluetooth: hci3: hardware error 0x00 [ 302.584438][ T5878] usb 6-1: USB disconnect, device number 12 [ 302.634706][ T25] em28xx 6-1:0.0: Registering input extension [ 302.701579][ T8709] ALSA: seq fatal error: cannot create timer (-22) [ 303.045393][ T5826] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 303.238874][ T5826] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 303.265844][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.274990][ T5878] em28xx 6-1:0.0: Disconnecting em28xx [ 303.282632][ T5878] em28xx 6-1:0.0: Closing input extension [ 303.330124][ T5878] em28xx 6-1:0.0: Freeing device [ 303.330149][ T5826] usb 2-1: Product: syz [ 303.352383][ T5826] usb 2-1: Manufacturer: syz [ 303.363659][ T5826] usb 2-1: SerialNumber: syz [ 303.384548][ T5826] usb 2-1: config 0 descriptor?? [ 303.433359][ T5826] ch341 2-1:0.0: ch341-uart converter detected [ 303.867288][ T5835] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 303.876645][ T5835] Bluetooth: hci1: Injecting HCI hardware error event [ 303.889489][ T5829] Bluetooth: hci1: hardware error 0x00 [ 304.385191][ T8723] 9pnet_fd: Insufficient options for proto=fd [ 304.595061][ T5844] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 304.628426][ T8726] vxcan1: entered promiscuous mode [ 305.036448][ T5826] ch341-uart ttyUSB0: failed to read break control: -71 [ 305.043666][ T5826] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 305.076671][ T5826] usb 2-1: USB disconnect, device number 29 [ 305.083496][ T5826] ch341 2-1:0.0: device disconnected [ 306.426224][ T5829] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 306.765007][ T5881] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 306.919837][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 306.932883][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 307.000131][ T8753] ALSA: seq fatal error: cannot create timer (-22) [ 307.579447][ T5881] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 307.588824][ T5881] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 307.596999][ T5881] usb 2-1: Product: syz [ 307.601335][ T5881] usb 2-1: Manufacturer: syz [ 307.610617][ T5881] usb 2-1: SerialNumber: syz [ 307.678954][ T5829] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 307.796874][ T29] audit: type=1400 audit(1731570721.991:676): avc: denied { bind } for pid=8756 comm="syz.5.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 307.832421][ T5881] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 307.841533][ T5881] usb 2-1: Handspring Visor / Palm OS: port 13, is for unknown use [ 307.852642][ T5881] usb 2-1: Handspring Visor / Palm OS: port 183, is for unknown use [ 307.864137][ T5881] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 307.955611][ T8] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 308.033114][ T5881] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 308.059572][ T5881] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 308.070335][ T5881] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 308.106483][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 308.114219][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 308.128827][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.141256][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 308.156089][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 308.170868][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 308.180052][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 308.223183][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.243003][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 308.266309][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 308.288821][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 308.306900][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 308.323094][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.338099][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 308.350481][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 308.369367][ T8] usb 5-1: string descriptor 0 read error: -22 [ 308.378421][ T8] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 308.388483][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.416062][ T8] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 309.317084][ T5878] usb 5-1: USB disconnect, device number 14 [ 309.415898][ T25] usb 2-1: USB disconnect, device number 30 [ 310.478639][ T25] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 310.509145][ T25] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 310.676583][ T25] visor 2-1:1.0: device disconnected [ 310.792452][ T8808] ALSA: seq fatal error: cannot create timer (-22) [ 311.476910][ T8809] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 311.499538][ T8815] netlink: 308 bytes leftover after parsing attributes in process `syz.5.803'. [ 312.435466][ T5881] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 312.585115][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 312.592119][ T5881] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 312.605016][ T5881] usb 5-1: config 0 has no interface number 0 [ 312.620747][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 312.708248][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.755449][ T5826] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 312.843965][ T5881] usb 5-1: Product: syz [ 312.934643][ T5881] usb 5-1: Manufacturer: syz [ 313.192405][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.234330][ T5881] usb 5-1: SerialNumber: syz [ 313.239247][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 313.250832][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 313.260752][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.275285][ T5881] usb 5-1: config 0 descriptor?? [ 313.284025][ T5881] smsc95xx v2.0.0 [ 313.304430][ T8859] program syz.5.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.317527][ T5826] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.344809][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.515913][ T5826] usb 2-1: config 0 descriptor?? [ 313.676347][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.817'. [ 314.401365][ T5826] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 314.428192][ T5826] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 314.579444][ T5881] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 314.620967][ T5881] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 314.656174][ T5881] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 314.701465][ T5881] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 314.751581][ T5881] usb 5-1: USB disconnect, device number 15 [ 314.870458][ T29] audit: type=1400 audit(1731570729.071:677): avc: denied { accept } for pid=8850 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 314.875430][ T5826] usb 2-1: USB disconnect, device number 31 [ 314.896385][ T8881] plantronics 0003:047F:FFFF.0008: usb_submit_urb(ctrl) failed: -19 [ 317.178462][ T29] audit: type=1400 audit(1731570731.381:678): avc: denied { getopt } for pid=8907 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.197160][ T8910] fuse: Bad value for 'user_id' [ 317.203716][ T8910] fuse: Bad value for 'user_id' [ 317.286592][ T29] audit: type=1400 audit(1731570731.451:679): avc: denied { ioctl } for pid=8907 comm="syz.1.825" path="socket:[21022]" dev="sockfs" ino=21022 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 317.648752][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 318.282276][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.315199][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 318.322264][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.339863][ T8] usb 2-1: config 0 has no interface number 0 [ 318.389967][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.408328][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.418516][ T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 318.428001][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.988395][ T8] usb 2-1: config 0 descriptor?? [ 319.187416][ T29] audit: type=1400 audit(1731570733.391:680): avc: denied { create } for pid=8932 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 319.188130][ T8933] atomic_op ffff88807dcf6198 conn xmit_atomic 0000000000000000 [ 319.216193][ T8933] atomic_op ffff88807dcf3198 conn xmit_atomic 0000000000000000 [ 319.425053][ T45] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 319.456156][ T8944] syz.2.834 uses obsolete (PF_INET,SOCK_PACKET) [ 319.469243][ T29] audit: type=1400 audit(1731570733.671:681): avc: denied { write } for pid=8942 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.495039][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 319.563110][ T8941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.575101][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 319.581827][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.592871][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.603297][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.616406][ T45] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 319.625656][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.636821][ T45] usb 6-1: config 0 descriptor?? [ 319.655055][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 319.662847][ T25] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 319.671315][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.681681][ T25] usb 5-1: config 0 has no interface number 0 [ 319.688051][ T25] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.711322][ T25] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.723833][ T8] uclogic 0003:28BD:0071.0009: pen parameters not found [ 319.731192][ T8] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 319.765224][ T25] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 319.777774][ T25] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.793689][ T25] usb 5-1: config 0 interface 52 has no altsetting 0 [ 319.803493][ T25] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 319.815109][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.830493][ T25] usb 5-1: config 0 descriptor?? [ 319.865149][ T5878] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 319.976190][ T8] usb 2-1: USB disconnect, device number 32 [ 320.025337][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 320.037303][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.065690][ T5878] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 320.080036][ T5878] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 320.092026][ T25] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input12 [ 320.104896][ T5878] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 320.122537][ T5878] usb 4-1: config 128 has no interface number 0 [ 320.130084][ T5188] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 320.144717][ T5878] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 320.160873][ T5188] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 320.168944][ T8937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.191552][ T45] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 320.203621][ T45] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 320.211452][ T5878] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.222202][ T45] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 320.230995][ T5878] usb 4-1: config 128 interface 127 has no altsetting 0 [ 320.238981][ T45] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 320.251729][ T45] microsoft 0003:045E:07DA.000A: no inputs found [ 320.258871][ T45] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 320.268229][ T5878] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 320.278313][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.286396][ T5878] usb 4-1: Product: syz [ 320.293076][ T5878] usb 4-1: Manufacturer: syz [ 320.311864][ T8935] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 320.345128][ T5878] usb 4-1: SerialNumber: syz [ 320.417165][ T5188] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 320.449772][ T45] usb 5-1: USB disconnect, device number 16 [ 320.461127][ T5188] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 320.559166][ T1203] usb 6-1: USB disconnect, device number 13 [ 321.961739][ T8967] tipc: Started in network mode [ 321.968532][ T8967] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 321.992178][ T8967] tipc: Enabled bearer , priority 10 [ 322.025348][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 322.104254][ T5881] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 322.415125][ T29] audit: type=1400 audit(1731570736.531:682): avc: denied { bind } for pid=8964 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.451559][ T8] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 322.468454][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.508695][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.522270][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.566626][ T8] usb 3-1: Product: syz [ 322.582549][ T5881] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 322.604064][ T8] usb 3-1: Manufacturer: syz [ 322.623920][ T8] usb 3-1: SerialNumber: syz [ 322.640163][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.826953][ T8] usb 3-1: config 0 descriptor?? [ 322.834526][ T5881] usb 5-1: config 0 descriptor?? [ 322.844967][ T8] ch341 3-1:0.0: ch341-uart converter detected [ 323.610345][ T5915] tipc: Node number set to 4269801491 [ 323.723728][ T8] usb 3-1: failed to receive control message: -121 [ 323.740846][ T8] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 323.766994][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 323.773044][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 323.901353][ T5881] usb 5-1: USB disconnect, device number 17 [ 325.407592][ T8] usb 3-1: USB disconnect, device number 13 [ 325.414463][ T8] ch341 3-1:0.0: device disconnected [ 325.556365][ T9000] netlink: 308 bytes leftover after parsing attributes in process `syz.1.852'. [ 325.579969][ T5878] usb 4-1: USB disconnect, device number 26 [ 325.807825][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.968611][ T9011] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 326.033382][ T9001] netlink: 536 bytes leftover after parsing attributes in process `syz.5.851'. [ 326.033429][ T9001] netlink: 104 bytes leftover after parsing attributes in process `syz.5.851'. [ 326.915974][ T5826] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 327.634168][ T5881] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 327.954979][ T5826] usb 5-1: Using ep0 maxpacket: 32 [ 327.962348][ T5826] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.975053][ T5826] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.014508][ T5826] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 328.041246][ T5826] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 328.065399][ T5881] usb 3-1: device descriptor read/64, error -71 [ 328.081673][ T5826] usb 5-1: Product: syz [ 328.086611][ T5826] usb 5-1: Manufacturer: syz [ 328.199020][ T5826] hub 5-1:4.0: USB hub found [ 328.238158][ T9065] netlink: 'syz.1.869': attribute type 4 has an invalid length. [ 328.261954][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.870'. [ 328.296395][ T9064] fuse: Unknown parameter 'gNoupsid' [ 328.296400][ T9066] fuse: Unknown parameter 'gNoupsid' [ 328.307437][ T29] audit: type=1400 audit(1731570742.501:683): avc: denied { mounton } for pid=9063 comm="syz.5.870" path="/144/file0" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 328.330558][ T5881] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 328.338298][ T8] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 328.360111][ T29] audit: type=1400 audit(1731570742.501:684): avc: denied { mounton } for pid=9063 comm="syz.5.870" path="/144/file0" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 328.475238][ T5881] usb 3-1: device descriptor read/64, error -71 [ 328.496587][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 328.511910][ T8] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 328.520452][ T8] usb 4-1: config 95 has no interface number 0 [ 328.534583][ T8] usb 4-1: config 95 interface 1 has no altsetting 0 [ 328.584698][ T9068] syz.5.871: attempt to access beyond end of device [ 328.584698][ T9068] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 328.585293][ T5881] usb usb3-port1: attempt power cycle [ 328.604230][ T9068] EXT4-fs (loop5): unable to read superblock [ 328.608209][ T5826] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 328.649777][ T8] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 328.660099][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.674109][ T8] usb 4-1: Product: syz [ 328.685012][ T8] usb 4-1: Manufacturer: syz [ 328.693961][ T8] usb 4-1: SerialNumber: syz [ 328.805130][ T1203] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 328.911721][ T9056] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.867' sets config #1 [ 329.195764][ T1203] usb 6-1: device descriptor read/64, error -71 [ 329.226231][ T9056] netlink: 'syz.3.867': attribute type 4 has an invalid length. [ 329.264974][ T5881] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 329.285722][ T5881] usb 3-1: device descriptor read/8, error -71 [ 329.397796][ T8] usb 4-1: USB disconnect, device number 27 [ 329.475500][ T1203] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 329.535150][ T5881] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 329.544523][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.571002][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.589714][ T5881] usb 3-1: device descriptor read/8, error -71 [ 329.597755][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.615023][ T1203] usb 6-1: device descriptor read/64, error -71 [ 329.725169][ T5881] usb usb3-port1: unable to enumerate USB device [ 329.735470][ T1203] usb usb6-port1: attempt power cycle [ 330.095117][ T1203] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 330.136601][ T1203] usb 6-1: device descriptor read/8, error -71 [ 330.166057][ T5881] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 330.325080][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 330.332721][ T5881] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 330.342927][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.354809][ T5881] usb 4-1: config 0 descriptor?? [ 330.372836][ T5881] as10x_usb: device has been detected [ 330.378736][ T5881] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 330.395290][ T1203] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 330.395928][ T5881] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 330.423474][ T1203] usb 6-1: device descriptor read/8, error -71 [ 330.523806][ T5881] as10x_usb: error during firmware upload part1 [ 330.530744][ T5881] Registered device nBox DVB-T Dongle [ 330.546729][ T1203] usb usb6-port1: unable to enumerate USB device [ 330.609524][ T5881] usb 4-1: USB disconnect, device number 28 [ 330.641956][ T5881] Unregistered device nBox DVB-T Dongle [ 330.649507][ T5881] as10x_usb: device has been disconnected [ 331.297486][ T1203] usb 5-1: USB disconnect, device number 18 [ 331.352868][ T29] audit: type=1400 audit(1731570745.551:685): avc: denied { write } for pid=9107 comm="syz.2.882" path="socket:[21327]" dev="sockfs" ino=21327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 331.445096][ T5881] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 331.578305][ T9113] tmpfs: Unknown parameter 'usrquota_bl' [ 331.584839][ T9113] blk_print_req_error: 22 callbacks suppressed [ 331.584851][ T9113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.616236][ T5881] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 331.627275][ T5881] usb 4-1: config 0 has no interfaces? [ 331.634020][ T5881] usb 4-1: config 0 has no interfaces? [ 331.640653][ T9113] buffer_io_error: 22 callbacks suppressed [ 331.640668][ T9113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.659075][ T9113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.670466][ T9113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.670678][ T9121] UBIFS error (pid: 9121): cannot open "(null)", error -22 [ 331.678476][ T9113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.678513][ T9113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.678630][ T9113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.692332][ T5881] usb 4-1: config 0 has no interfaces? [ 331.762563][ T9113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.774671][ T9113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.783946][ T9113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.785301][ T5881] usb 4-1: config 0 has no interfaces? [ 331.811728][ T9113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.827428][ T5881] usb 4-1: config 0 has no interfaces? [ 331.834352][ T5881] usb 4-1: config 0 has no interfaces? [ 331.848005][ T5881] usb 4-1: config 0 has no interfaces? [ 331.856150][ T5881] usb 4-1: config 0 has no interfaces? [ 331.866308][ T5881] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.876800][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.886372][ T9113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.999157][ T5881] usb 4-1: Product: syz [ 332.011339][ T5881] usb 4-1: Manufacturer: syz [ 332.016120][ T5881] usb 4-1: SerialNumber: syz [ 332.022675][ T5881] usb 4-1: config 0 descriptor?? [ 332.028292][ T9113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.037500][ T9113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 332.920269][ T9113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.929516][ T9108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 332.935813][ T9108] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 332.945041][ T9113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 332.952846][ T9113] ldm_validate_partition_table(): Disk read failed. [ 332.959655][ T9113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.969733][ T9113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 332.978321][ T9113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.988051][ T9113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 332.998394][ T9113] Dev nbd4: unable to read RDB block 0 [ 333.125652][ T9113] nbd4: unable to read partition table [ 333.668003][ T45] usb 4-1: USB disconnect, device number 29 [ 334.467087][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 334.958222][ T9170] ALSA: seq fatal error: cannot create timer (-22) [ 334.970242][ T29] audit: type=1400 audit(1731570749.151:686): avc: denied { write } for pid=9161 comm="syz.5.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 335.047056][ T9176] netlink: 84 bytes leftover after parsing attributes in process `syz.1.895'. [ 335.935017][ T29] audit: type=1400 audit(1731570750.121:687): avc: denied { append } for pid=9188 comm="syz.4.898" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 336.165829][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.899'. [ 337.320489][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.901'. [ 338.360730][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 338.388070][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 338.405071][ T5880] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 338.415074][ T29] audit: type=1400 audit(1731570752.591:688): avc: denied { append } for pid=9214 comm="syz.1.906" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 338.715136][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 338.873629][ T5880] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 338.995653][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.208173][ T5880] usb 6-1: Product: syz [ 339.212527][ T5880] usb 6-1: Manufacturer: syz [ 339.256794][ T29] audit: type=1400 audit(1731570753.461:689): avc: denied { setopt } for pid=9228 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 339.285283][ T9236] ALSA: seq fatal error: cannot create timer (-22) [ 339.704509][ T29] audit: type=1400 audit(1731570753.901:690): avc: denied { write } for pid=9228 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 339.753722][ T5880] usb 6-1: SerialNumber: syz [ 339.827896][ T5880] usb 6-1: config 0 descriptor?? [ 339.836888][ T5880] gspca_main: sq905-2.14.0 probing 2770:9120 [ 339.993784][ T9244] netlink: 84 bytes leftover after parsing attributes in process `syz.4.912'. [ 340.176258][ T9212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.231111][ T29] audit: type=1326 audit(1731570754.361:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90f57e719 code=0x7ffc0000 [ 340.235347][ T9212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.261508][ T29] audit: type=1326 audit(1731570754.361:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90f57e719 code=0x7ffc0000 [ 340.262098][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.285981][ T29] audit: type=1326 audit(1731570754.361:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb90f57e719 code=0x7ffc0000 [ 340.314826][ T29] audit: type=1326 audit(1731570754.361:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90f57e719 code=0x7ffc0000 [ 340.320106][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.340992][ T29] audit: type=1326 audit(1731570754.371:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb90f57e719 code=0x7ffc0000 [ 340.374340][ T9254] SELinux: policydb magic number 0x496ed88c does not match expected magic number 0xf97cff8c [ 340.385379][ T9254] SELinux: failed to load policy [ 340.592814][ T5880] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 340.600337][ T5880] sq905 6-1:0.0: probe with driver sq905 failed with error -110 [ 340.620892][ T29] audit: type=1326 audit(1731570754.371:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90f57e719 code=0x7ffc0000 [ 340.644939][ T29] audit: type=1326 audit(1731570754.371:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90f57e719 code=0x7ffc0000 [ 341.371421][ T29] audit: type=1326 audit(1731570754.371:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fb90f57e719 code=0x7ffc0000 [ 341.394757][ T29] audit: type=1326 audit(1731570754.371:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90f57e719 code=0x7ffc0000 [ 341.418128][ T29] audit: type=1326 audit(1731570754.371:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fb90f57e719 code=0x7ffc0000 [ 341.755778][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.456046][ T8] usb 6-1: USB disconnect, device number 18 [ 345.562663][ T5203] udevd[5203]: worker [5840] /devices/virtual/block/nbd5 is taking a long time [ 345.713137][ T5203] udevd[5203]: worker [6273] /devices/virtual/block/nbd6 is taking a long time [ 345.819999][ T5203] udevd[5203]: worker [6274] /devices/virtual/block/nbd8 is taking a long time [ 345.900595][ T5203] udevd[5203]: worker [5847] /devices/virtual/block/nbd7 is taking a long time [ 346.099710][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'. [ 346.709133][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 346.927194][ T9296] ALSA: seq fatal error: cannot create timer (-22) [ 347.565137][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 348.194992][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 348.242382][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 348.268383][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 348.287059][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.325127][ T8] usb 2-1: Product: syz [ 348.341056][ T8] usb 2-1: Manufacturer: syz [ 348.382571][ T8] usb 2-1: SerialNumber: syz [ 348.393682][ T9317] overlayfs: failed to resolve './file1': -2 [ 348.407103][ T8] usb 2-1: config 0 descriptor?? [ 348.465229][ T5915] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 348.634097][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 348.634111][ T29] audit: type=1400 audit(1731570762.831:708): avc: denied { bind } for pid=9281 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 348.640232][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 348.662362][ T5915] usb 4-1: config 74 has an invalid interface number: 67 but max is 0 [ 348.673642][ T5915] usb 4-1: config 74 has no interface number 0 [ 348.783892][ T9333] netlink: 308 bytes leftover after parsing attributes in process `syz.4.932'. [ 348.806613][ T5915] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 348.819802][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.933882][ T5878] usb 2-1: USB disconnect, device number 33 [ 349.184997][ T5915] usb 4-1: Product: syz [ 349.189238][ T5915] usb 4-1: Manufacturer: syz [ 349.224353][ T5915] usb 4-1: SerialNumber: syz [ 349.371094][ T5915] smsc95xx v2.0.0 [ 349.712973][ T5880] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 349.861522][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 349.870578][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 349.877706][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 349.958616][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 349.972219][ T5880] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.073783][ T5880] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 351.119174][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 351.352611][ T5880] usb 5-1: Product: syz [ 351.371455][ T29] audit: type=1400 audit(1731570765.561:709): avc: denied { create } for pid=9365 comm="syz.1.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 351.399950][ T5880] usb 5-1: Manufacturer: syz [ 351.413115][ T5880] usb 5-1: SerialNumber: syz [ 351.427515][ T9339] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 351.438311][ T5880] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input13 [ 351.635273][ T25] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 351.660294][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 351.673997][ T5880] usb 5-1: USB disconnect, device number 19 [ 351.735342][ T5880] appletouch 5-1:1.0: input: appletouch disconnected [ 351.795123][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 351.808181][ T25] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 351.833819][ T25] usb 6-1: config 0 has no interface number 0 [ 351.851538][ T25] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 351.861273][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.878678][ T25] usb 6-1: Product: syz [ 351.905711][ T25] usb 6-1: Manufacturer: syz [ 351.926156][ T25] usb 6-1: SerialNumber: syz [ 351.960977][ T25] usb 6-1: config 0 descriptor?? [ 352.234176][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.245369][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.269485][ T25] radio-si470x 6-1:0.35: this is not a si470x device. [ 352.319212][ T25] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 352.474119][ T29] audit: type=1400 audit(1731570766.671:710): avc: denied { append } for pid=9385 comm="syz.2.939" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 352.529717][ T25] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 352.792603][ T8] usb 6-1: USB disconnect, device number 19 [ 352.803572][ T8] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 352.888253][ T5915] smsc95xx 4-1:74.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 352.909458][ T5915] smsc95xx 4-1:74.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.928610][ T5915] smsc95xx 4-1:74.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 352.974016][ T5915] smsc95xx 4-1:74.67: probe with driver smsc95xx failed with error -71 [ 353.037910][ T5915] usb 4-1: USB disconnect, device number 30 [ 354.436469][ T29] audit: type=1400 audit(1731570768.641:711): avc: denied { ioctl } for pid=9407 comm="syz.2.941" path="socket:[22825]" dev="sockfs" ino=22825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.506084][ T9429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.947'. [ 356.566043][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.949'. [ 357.425684][ T5881] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 357.433404][ T5915] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 357.685006][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 357.690299][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 357.704429][ T5881] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 357.713494][ T5881] usb 2-1: config 0 has no interface number 0 [ 357.720297][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.748223][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.759523][ T5915] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 357.768769][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.782357][ T5915] usb 6-1: config 0 descriptor?? [ 357.792676][ T5881] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 357.802750][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.812985][ T5881] usb 2-1: Product: syz [ 357.818714][ T5881] usb 2-1: Manufacturer: syz [ 357.823870][ T5881] usb 2-1: SerialNumber: syz [ 357.845173][ T5881] usb 2-1: config 0 descriptor?? [ 357.865016][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'. [ 357.986119][ T5881] smsc95xx v2.0.0 [ 358.341359][ T5915] savu 0003:1E7D:2D5A.000B: item fetching failed at offset 2/5 [ 358.356051][ T9448] batman_adv: batadv0: Adding interface: dummy0 [ 358.361298][ T5915] savu 0003:1E7D:2D5A.000B: parse failed [ 358.362344][ T9448] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.390499][ T5915] savu 0003:1E7D:2D5A.000B: probe with driver savu failed with error -22 [ 358.393498][ T9448] batman_adv: batadv0: Interface activated: dummy0 [ 358.412572][ T9495] batadv0: mtu less than device minimum [ 358.419895][ T9495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.432221][ T9495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.444317][ T9495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.456402][ T9495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.468436][ T9495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.480494][ T9495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.492587][ T9495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.504651][ T9495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.516728][ T9495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.710094][ T5880] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 358.744787][ T5881] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 358.770344][ T5881] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 358.792284][ T5916] usb 6-1: USB disconnect, device number 20 [ 358.797184][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 358.877363][ T5881] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 358.896437][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 358.978335][ T5881] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 359.004559][ T5880] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 4.c9 [ 359.013811][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.091823][ T5881] usb 2-1: USB disconnect, device number 34 [ 359.744995][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 359.751509][ T5880] usb 5-1: Product: syz [ 359.755811][ T5880] usb 5-1: Manufacturer: syz [ 359.760395][ T5880] usb 5-1: SerialNumber: syz [ 359.774489][ T5880] usb 5-1: config 0 descriptor?? [ 359.797071][ T5880] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 359.805315][ T5880] ftdi_sio ttyUSB0: unknown device type: 0x4c9 [ 359.814276][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 359.895265][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 359.916943][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 359.926251][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.934547][ T25] usb 3-1: Product: syz [ 359.939299][ T25] usb 3-1: Manufacturer: syz [ 359.943987][ T25] usb 3-1: SerialNumber: syz [ 359.972313][ T25] usb 3-1: config 0 descriptor?? [ 360.009040][ T5880] usb 5-1: USB disconnect, device number 20 [ 360.016135][ T5880] ftdi_sio 5-1:0.0: device disconnected [ 360.084048][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.963'. [ 360.096752][ T25] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 360.432386][ T9520] ALSA: seq fatal error: cannot create timer (-22) [ 360.547446][ T25] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 360.718898][ T9521] rdma_op ffff88807de401f0 conn xmit_rdma 0000000000000000 [ 361.189690][ T9529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.966'. [ 361.706495][ T9530] netlink: 52 bytes leftover after parsing attributes in process `syz.3.965'. [ 361.855982][ T9486] blk_print_req_error: 6 callbacks suppressed [ 361.856001][ T9486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.085135][ T9486] buffer_io_error: 6 callbacks suppressed [ 362.085154][ T9486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.117923][ T9486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.255083][ T9486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.263058][ T9486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.279822][ T9486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.385268][ T9486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.394391][ T9486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.446137][ T9486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.464119][ T9486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.465610][ T29] audit: type=1400 audit(1731570776.661:712): avc: denied { getopt } for pid=9538 comm="syz.4.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 362.514966][ T29] audit: type=1400 audit(1731570776.701:713): avc: denied { getopt } for pid=9538 comm="syz.4.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 362.542883][ T9486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.631660][ T9486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.679804][ T9486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.710344][ T9486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.722126][ T9545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.971'. [ 362.729095][ T9486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.744724][ T9486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.766041][ T9486] ldm_validate_partition_table(): Disk read failed. [ 362.772955][ T9486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.786537][ T9486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.799471][ T9486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.832092][ T9486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 362.870717][ T9486] Dev nbd2: unable to read RDB block 0 [ 362.898993][ T9486] nbd2: unable to read partition table [ 362.958371][ T25] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 362.975457][ T25] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 362.993034][ T25] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 363.000238][ T25] em28xx 3-1:0.0: No AC97 audio processor [ 363.263749][ T9551] netlink: 288 bytes leftover after parsing attributes in process `syz.3.972'. [ 363.401551][ T29] audit: type=1400 audit(1731570777.371:714): avc: denied { create } for pid=9547 comm="syz.3.972" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.436146][ T9552] netlink: 288 bytes leftover after parsing attributes in process `syz.3.972'. [ 363.555614][ T9551] 9pnet_fd: Insufficient options for proto=fd [ 363.561834][ T29] audit: type=1400 audit(1731570777.761:715): avc: denied { mounton } for pid=9547 comm="syz.3.972" path="/190/file0" dev="tmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.600623][ T29] audit: type=1400 audit(1731570777.801:716): avc: denied { unlink } for pid=5832 comm="syz-executor" name="file0" dev="tmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.644127][ T5880] usb 3-1: USB disconnect, device number 18 [ 363.650839][ T5880] em28xx 3-1:0.0: Disconnecting em28xx [ 363.685854][ T5880] em28xx 3-1:0.0: Freeing device [ 363.774156][ T9563] net_ratelimit: 10 callbacks suppressed [ 363.774175][ T9563] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 363.788949][ T29] audit: type=1400 audit(1731570777.991:717): avc: denied { connect } for pid=9564 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 364.064493][ T9577] netlink: 308 bytes leftover after parsing attributes in process `syz.4.979'. [ 364.900164][ T5881] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 365.494988][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 365.501719][ T5881] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 365.524720][ T5881] usb 3-1: config 0 has no interface number 0 [ 365.548397][ T5881] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 365.565648][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.607423][ T5881] usb 3-1: config 0 descriptor?? [ 365.639041][ T5881] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 366.127986][ T29] audit: type=1400 audit(1731570780.331:718): avc: denied { getopt } for pid=9595 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 366.159756][ T29] audit: type=1400 audit(1731570780.361:719): avc: denied { ioctl } for pid=9595 comm="syz.1.986" path="socket:[23987]" dev="sockfs" ino=23987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 366.214507][ T29] audit: type=1400 audit(1731570780.411:720): avc: denied { getopt } for pid=9595 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 366.245025][ T5880] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 366.541085][ T5880] usb 5-1: Invalid ep0 maxpacket: 64 [ 366.685101][ T5880] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 366.925459][ T5880] usb 5-1: Invalid ep0 maxpacket: 64 [ 366.933114][ T5880] usb usb5-port1: attempt power cycle [ 367.293337][ T9613] netlink: 'syz.3.989': attribute type 1 has an invalid length. [ 367.303919][ T9613] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.989'. [ 367.397589][ T5881] usb 3-1: USB disconnect, device number 19 [ 367.510210][ T9622] fuse: Unknown parameter '0x0000000000000003' [ 367.511105][ T9620] netlink: 308 bytes leftover after parsing attributes in process `syz.2.992'. [ 367.715145][ T5880] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 367.747082][ T5880] usb 5-1: Invalid ep0 maxpacket: 64 [ 368.305295][ T5880] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 368.765050][ T5880] usb 5-1: Invalid ep0 maxpacket: 64 [ 368.770937][ T5880] usb usb5-port1: unable to enumerate USB device [ 369.336779][ T29] audit: type=1400 audit(1731570783.061:721): avc: denied { append } for pid=9630 comm="syz.2.995" name="sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 370.272614][ T9650] ALSA: seq fatal error: cannot create timer (-22) [ 370.280741][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 370.674995][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 370.804170][ T9655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9655 comm=syz.2.1003 [ 371.038165][ T25] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 371.048159][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.060559][ T25] usb 4-1: Product: syz [ 371.067283][ T25] usb 4-1: Manufacturer: syz [ 372.011951][ T25] usb 4-1: SerialNumber: syz [ 372.037294][ T25] usb 4-1: config 0 descriptor?? [ 372.174424][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 373.030151][ T25] usb 4-1: Firmware version (0.0) predates our first public release. [ 373.515129][ T25] usb 4-1: Please update to version 0.2 or newer [ 374.215389][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 374.425319][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 374.804033][ T25] usb 4-1: USB disconnect, device number 31 [ 375.192655][ T9704] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 375.494992][ T5915] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 375.648670][ T5915] usb 3-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 375.661888][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.705387][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 375.712580][ T5915] usb 3-1: Product: syz [ 375.735004][ T5915] usb 3-1: Manufacturer: syz [ 375.744739][ T5915] usb 3-1: SerialNumber: syz [ 375.764154][ T5915] r8152-cfgselector 3-1: Unknown version 0x0000 [ 375.775086][ T5915] r8152-cfgselector 3-1: config 0 descriptor?? [ 375.803409][ T5915] r8152 3-1:0.0: Expected endpoints are not found [ 376.844741][ T29] audit: type=1400 audit(1731570791.041:722): avc: denied { write } for pid=9707 comm="syz.2.1019" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 376.933546][ T9716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.944392][ T9716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.971178][ T5915] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 377.167827][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 377.183680][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 377.213987][ T8] usb 2-1: can't read configurations, error -71 [ 377.303227][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.314211][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.324509][ T25] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 377.333718][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.053088][ T25] usb 4-1: config 0 descriptor?? [ 378.062220][ T25] usb 4-1: can't set config #0, error -71 [ 378.079113][ T25] usb 4-1: USB disconnect, device number 32 [ 378.919840][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1021'. [ 379.258892][ T9739] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (14) [ 379.269147][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1026'. [ 379.437870][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 379.484993][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 379.501437][ T9743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1029'. [ 379.549424][ T5829] block nbd9: Receive control failed (result -107) [ 379.595202][ T9743] nbd9: detected capacity change from 0 to 256 [ 379.605439][ T5833] block nbd9: Dead connection, failed to find a fallback [ 379.694491][ T9756] ubi0: attaching mtd0 [ 379.703893][ T9756] ubi0: scanning is finished [ 379.710371][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.718722][ T9756] ubi0: empty MTD device detected [ 379.766056][ T29] audit: type=1400 audit(1731570793.971:723): avc: denied { lock } for pid=9755 comm="syz.2.1031" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.008332][ T29] audit: type=1400 audit(1731570794.201:724): avc: denied { write } for pid=9757 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 380.154552][ T9756] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 380.163391][ T9756] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 380.173083][ T9756] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 380.181433][ T9756] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 380.190836][ T9756] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 380.199180][ T9756] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 380.211269][ T9756] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2280354154 [ 380.224448][ T9756] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 380.237489][ T9766] ubi0: background thread "ubi_bgt0d" started, PID 9766 [ 383.575466][ T5881] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 383.669316][ T9819] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 383.753604][ T5881] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 383.768351][ T5881] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 383.778441][ T5881] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 383.791162][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.852301][ T9814] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 383.863732][ T5881] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.010941][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 386.738311][ T29] audit: type=1400 audit(1731570800.001:725): avc: denied { setopt } for pid=9849 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 386.769385][ T29] audit: type=1400 audit(1731570800.511:726): avc: denied { getattr } for pid=9849 comm="syz.4.1056" path="cgroup:[4026532952]" dev="nsfs" ino=4026532952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 387.236330][ T5881] usb 6-1: USB disconnect, device number 21 [ 387.275317][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 387.307499][ T29] audit: type=1400 audit(1731570801.511:727): avc: denied { setopt } for pid=9864 comm="syz.4.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 387.445146][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 387.458780][ T8] usb 2-1: no configurations [ 387.463554][ T8] usb 2-1: can't read configurations, error -22 [ 387.605007][ T8] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 387.764995][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 387.782114][ T8] usb 2-1: no configurations [ 387.786923][ T8] usb 2-1: can't read configurations, error -22 [ 387.797108][ T8] usb usb2-port1: attempt power cycle [ 388.032390][ T9878] overlayfs: missing 'workdir' [ 388.045497][ T29] audit: type=1400 audit(1731570802.251:728): avc: denied { bind } for pid=9877 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 388.303568][ T8] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 388.326994][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 388.332832][ T8] usb 2-1: no configurations [ 388.337687][ T8] usb 2-1: can't read configurations, error -22 [ 388.465121][ T8] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 388.485653][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 388.491638][ T8] usb 2-1: no configurations [ 388.496437][ T8] usb 2-1: can't read configurations, error -22 [ 388.511548][ T8] usb usb2-port1: unable to enumerate USB device [ 388.660134][ T9886] geneve3: entered promiscuous mode [ 388.812238][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1069'. [ 388.866479][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1069'. [ 388.875104][ T29] audit: type=1400 audit(1731570803.061:729): avc: denied { setattr } for pid=9887 comm="syz.4.1070" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 388.934564][ T9889] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1069'. [ 389.026776][ T5829] block nbd10: Receive control failed (result -107) [ 389.055068][ T9889] nbd10: detected capacity change from 0 to 256 [ 389.379925][ T9902] serio: Serial port ptm0 [ 390.595044][ T8] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 390.841485][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 390.911640][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.934785][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 390.937936][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 391.306624][ T30] INFO: task udevd:5840 blocked for more than 144 seconds. [ 391.317728][ T30] Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 391.571385][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.580501][ T30] task:udevd state:D stack:24096 pid:5840 tgid:5840 ppid:1 flags:0x00004002 [ 391.591486][ T30] Call Trace: [ 391.591504][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 391.608153][ T30] [ 391.611324][ T30] __schedule+0xe55/0x5740 [ 391.616331][ T30] ? mark_held_locks+0x9f/0xe0 [ 391.627650][ T30] ? __pfx___schedule+0x10/0x10 [ 391.632621][ T30] ? schedule+0x298/0x350 [ 391.637243][ T30] ? __pfx_lock_release+0x10/0x10 [ 391.639384][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.642368][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 391.657054][ T30] ? lock_acquire+0x2f/0xb0 [ 391.661670][ T30] ? schedule+0x1fd/0x350 [ 391.662785][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 391.677681][ T30] schedule+0xe7/0x350 [ 391.680058][ T8] usb 6-1: SerialNumber: syz [ 391.721555][ T9905] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 391.731168][ T30] schedule_timeout+0x136/0x2a0 [ 391.738259][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 391.743854][ T30] ? __pfx_process_timeout+0x10/0x10 [ 391.749454][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 391.755548][ T30] ? prepare_to_wait_event+0xce/0x6a0 [ 391.761075][ T30] nbd_queue_rq+0xcbc/0x1220 [ 391.765934][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 391.771049][ T30] ? mark_lock+0xb5/0xc60 [ 391.775609][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 391.781868][ T30] ? __pfx_mark_lock+0x10/0x10 [ 391.787234][ T30] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 391.793001][ T30] ? sbitmap_get+0x1e5/0x360 [ 391.797835][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 391.803917][ T30] ? __blk_mq_alloc_driver_tag+0x4f7/0x7a0 [ 391.809960][ T30] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 391.816589][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 391.823447][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 391.829298][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 391.834607][ T30] ? blk_mq_run_hw_queue+0x443/0x9a0 [ 391.840180][ T30] blk_mq_sched_dispatch_requests+0xd4/0x150 [ 391.846381][ T30] blk_mq_run_hw_queue+0x451/0x9a0 [ 391.851593][ T30] ? blk_mq_run_hw_queue+0x443/0x9a0 [ 391.857145][ T30] blk_mq_flush_plug_list+0x5df/0x1be0 [ 391.862741][ T30] ? rcu_watching_snap_stopped_since+0x40/0x110 [ 391.869257][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 391.875425][ T30] __blk_flush_plug+0x2c5/0x4b0 [ 391.880430][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 391.885956][ T30] ? ktime_get+0xd9/0x1a0 [ 391.890389][ T30] ? __pfx_lock_release+0x10/0x10 [ 391.895679][ T30] __submit_bio+0x3fb/0x4d0 [ 391.900298][ T30] ? __pfx___submit_bio+0x10/0x10 [ 391.905520][ T30] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 391.911341][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.916839][ T30] submit_bio_noacct_nocheck+0x6fb/0xd70 [ 391.922571][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 391.928865][ T30] ? __pfx___might_resched+0x10/0x10 [ 391.934283][ T30] submit_bio_noacct+0x9e6/0x1f10 [ 392.287675][ T29] audit: type=1400 audit(1731570806.141:730): avc: denied { ioctl } for pid=9903 comm="syz.5.1074" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 392.320202][ T30] block_read_full_folio+0x812/0xa50 [ 392.325646][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 392.331046][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 392.337067][ T30] ? __folio_batch_add_and_move+0x612/0xc60 [ 392.343111][ T30] ? __pfx_lru_add+0x10/0x10 [ 392.348276][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 392.353773][ T30] filemap_read_folio+0xc6/0x2a0 [ 392.358804][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 392.364363][ T30] ? __filemap_get_folio+0x2a5/0xaf0 [ 392.370509][ T30] do_read_cache_folio+0x263/0x5c0 [ 392.375750][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 392.381247][ T30] read_part_sector+0xd3/0x410 [ 392.386073][ T30] adfspart_check_ICS+0x94/0x940 [ 392.391018][ T30] ? snprintf+0xc8/0x100 [ 392.909174][ T30] ? __pfx_snprintf+0x10/0x10 [ 392.913963][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 392.919737][ T30] ? bdev_disk_changed+0x48c/0x1520 [ 392.925087][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 392.930703][ T30] bdev_disk_changed+0x71f/0x1520 [ 392.935886][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 392.941381][ T30] ? __pfx_ilookup+0x10/0x10 [ 392.946119][ T30] blkdev_get_whole+0x187/0x290 [ 392.951024][ T30] bdev_open+0x2c7/0xe20 [ 392.955363][ T30] blkdev_open+0x36c/0x450 [ 392.959815][ T30] do_dentry_open+0x6ca/0x1530 [ 392.964603][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 392.969615][ T30] vfs_open+0x82/0x3f0 [ 392.973730][ T30] ? may_open+0x1f2/0x400 [ 392.978125][ T30] path_openat+0x1e6a/0x2d60 [ 392.982739][ T30] ? __pfx_path_openat+0x10/0x10 [ 392.987807][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 392.993048][ T30] do_filp_open+0x1dc/0x430 [ 392.997596][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 393.002635][ T30] ? find_held_lock+0x2d/0x110 [ 393.007572][ T30] ? _raw_spin_unlock+0x28/0x50 [ 393.012490][ T30] ? alloc_fd+0x2d7/0x6c0 [ 393.016912][ T30] do_sys_openat2+0x17a/0x1e0 [ 393.021643][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.026947][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 393.032157][ T30] __x64_sys_openat+0x175/0x210 [ 393.037116][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 393.042546][ T30] do_syscall_64+0xcd/0x250 [ 393.047089][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.053026][ T30] RIP: 0033:0x7f81b4d169a4 [ 393.057550][ T30] RSP: 002b:00007fff31ac35e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.066146][ T30] RAX: ffffffffffffffda RBX: 000055dac2dd32f0 RCX: 00007f81b4d169a4 [ 393.074170][ T30] RDX: 00000000000a0800 RSI: 000055dac2cb8300 RDI: 00000000ffffff9c [ 393.082897][ T30] RBP: 000055dac2cb8300 R08: 0000000000000001 R09: 00007f81b5135080 [ 393.090958][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 393.099017][ T30] R13: 000055dac2d07260 R14: 0000000000000001 R15: 000055dac2cac2c0 [ 393.107119][ T30] [ 393.110204][ T30] INFO: task udevd:6273 blocked for more than 145 seconds. [ 393.117706][ T30] Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 393.125684][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.134384][ T30] task:udevd state:D stack:24704 pid:6273 tgid:6273 ppid:1 flags:0x00004002 [ 393.144621][ T30] Call Trace: [ 393.148318][ T30] [ 393.151348][ T30] __schedule+0xe55/0x5740 [ 393.155865][ T30] ? __pfx___schedule+0x10/0x10 [ 393.160778][ T30] ? schedule+0x298/0x350 [ 393.165223][ T30] ? __pfx_lock_release+0x10/0x10 [ 393.170293][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 393.175578][ T30] ? lock_acquire+0x2f/0xb0 [ 393.180120][ T30] ? schedule+0x1fd/0x350 [ 393.184497][ T30] schedule+0xe7/0x350 [ 393.188631][ T30] schedule_timeout+0x136/0x2a0 [ 393.193525][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 393.199041][ T30] ? __pfx_process_timeout+0x10/0x10 [ 393.204383][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 393.210258][ T30] ? prepare_to_wait_event+0xce/0x6a0 [ 393.215743][ T30] nbd_queue_rq+0xcbc/0x1220 [ 393.220388][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 393.225502][ T30] ? mark_lock+0xb5/0xc60 [ 393.230019][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 393.236154][ T30] ? __pfx_mark_lock+0x10/0x10 [ 393.240938][ T30] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 393.246588][ T30] ? sbitmap_get+0x1e5/0x360 [ 393.251233][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 393.257312][ T30] ? __blk_mq_alloc_driver_tag+0x4f7/0x7a0 [ 393.263160][ T30] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 393.269546][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 393.276387][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 393.282052][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 393.287307][ T30] ? blk_mq_run_hw_queue+0x443/0x9a0 [ 393.292610][ T30] blk_mq_sched_dispatch_requests+0xd4/0x150 [ 393.298701][ T30] blk_mq_run_hw_queue+0x451/0x9a0 [ 393.303889][ T30] ? blk_mq_run_hw_queue+0x443/0x9a0 [ 393.309250][ T30] blk_mq_flush_plug_list+0x5df/0x1be0 [ 393.314751][ T30] ? rcu_watching_snap_stopped_since+0x40/0x110 [ 393.321036][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 393.326997][ T30] __blk_flush_plug+0x2c5/0x4b0 [ 393.331916][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 393.337448][ T30] ? ktime_get+0xd9/0x1a0 [ 393.341828][ T30] ? __pfx_lock_release+0x10/0x10 [ 393.346941][ T30] __submit_bio+0x3fb/0x4d0 [ 393.351462][ T30] ? __pfx___submit_bio+0x10/0x10 [ 393.356591][ T30] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 393.362347][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.367653][ T30] submit_bio_noacct_nocheck+0x6fb/0xd70 [ 393.373357][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 393.379608][ T30] ? __pfx___might_resched+0x10/0x10 [ 393.385067][ T30] submit_bio_noacct+0x9e6/0x1f10 [ 393.390163][ T30] block_read_full_folio+0x812/0xa50 [ 393.395568][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 393.400986][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 393.406904][ T30] ? __folio_batch_add_and_move+0x612/0xc60 [ 393.412824][ T30] ? __pfx_lru_add+0x10/0x10 [ 393.417507][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 393.423010][ T30] filemap_read_folio+0xc6/0x2a0 [ 393.428006][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 393.433614][ T30] ? __filemap_get_folio+0x2a5/0xaf0 [ 393.439192][ T30] do_read_cache_folio+0x263/0x5c0 [ 393.444331][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 393.449874][ T30] read_part_sector+0xd3/0x410 [ 393.454698][ T30] adfspart_check_ICS+0x94/0x940 [ 393.459813][ T30] ? snprintf+0xc8/0x100 [ 393.464138][ T30] ? __pfx_snprintf+0x10/0x10 [ 393.469174][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 393.475015][ T30] ? bdev_disk_changed+0x48c/0x1520 [ 393.480428][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 393.486102][ T30] bdev_disk_changed+0x71f/0x1520 [ 393.491203][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 393.496781][ T30] ? __pfx_ilookup+0x10/0x10 [ 393.501424][ T30] blkdev_get_whole+0x187/0x290 [ 393.506391][ T30] bdev_open+0x2c7/0xe20 [ 393.510693][ T30] blkdev_open+0x36c/0x450 [ 393.515191][ T30] do_dentry_open+0x6ca/0x1530 [ 393.519999][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 393.525044][ T30] vfs_open+0x82/0x3f0 [ 393.529157][ T30] ? may_open+0x1f2/0x400 [ 393.533502][ T30] path_openat+0x1e6a/0x2d60 [ 393.538146][ T30] ? __pfx_path_openat+0x10/0x10 [ 393.543097][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 393.548573][ T30] do_filp_open+0x1dc/0x430 [ 393.553129][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 393.558233][ T30] ? find_held_lock+0x2d/0x110 [ 393.563685][ T30] ? _raw_spin_unlock+0x28/0x50 [ 393.568657][ T30] ? alloc_fd+0x2d7/0x6c0 [ 393.573089][ T30] do_sys_openat2+0x17a/0x1e0 [ 393.577835][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.583078][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 393.588371][ T30] __x64_sys_openat+0x175/0x210 [ 393.593262][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 393.598697][ T30] do_syscall_64+0xcd/0x250 [ 393.603229][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.609216][ T30] RIP: 0033:0x7f81b4d169a4 [ 393.613655][ T30] RSP: 002b:00007fff31ac35e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.622133][ T30] RAX: ffffffffffffffda RBX: 000055dac2cdb220 RCX: 00007f81b4d169a4 [ 393.630239][ T30] RDX: 00000000000a0800 RSI: 000055dac2cd9740 RDI: 00000000ffffff9c [ 393.638287][ T30] RBP: 000055dac2cd9740 R08: 0000000000000001 R09: 00007f81b5135080 [ 393.646332][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 393.654334][ T30] R13: 000055dac2d07680 R14: 0000000000000001 R15: 000055dac2cac2c0 [ 393.662386][ T30] [ 393.665497][ T30] [ 393.665497][ T30] Showing all locks held in the system: [ 393.673264][ T30] 5 locks held by kworker/0:0/8: [ 393.678591][ T30] #0: ffff888022eedd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 393.689751][ T30] #1: ffffc900000d7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 393.701283][ T30] #2: ffff8881457bc190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 393.710401][ T30] #3: ffff88807f817190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 393.719811][ T30] #4: ffff888145281a78 (&(&priv->bus_notifier)->rwsem){++++}-{3:3}, at: blocking_notifier_call_chain+0x53/0xa0 [ 393.731804][ T30] 2 locks held by kworker/u8:1/12: [ 393.736983][ T30] #0: ffff8881456dd148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 393.747741][ T30] #1: ffffc90000117d80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 393.759368][ T30] 1 lock held by khungtaskd/30: [ 393.764233][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 393.774186][ T30] 2 locks held by getty/5582: [ 393.778924][ T30] #0: ffff88814d3c90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 393.789098][ T30] #1: ffffc900032532f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 393.799393][ T30] 3 locks held by udevd/5833: [ 393.804081][ T30] #0: ffff8880264534c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x41a/0xe20 [ 393.813457][ T30] #1: ffff888025c8c110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x443/0x9a0 [ 393.823009][ T30] #2: ffff8880264b0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xbe/0x1220 [ 393.832046][ T30] 3 locks held by udevd/5840: [ 393.836804][ T30] #0: ffff888025e1a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x41a/0xe20 [ 393.846280][ T30] #1: ffff888025b5aa90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x443/0x9a0 [ 393.856736][ T30] #2: ffff888025f18180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xbe/0x1220 [ 393.865845][ T30] 3 locks held by udevd/5847: [ 393.870562][ T30] #0: ffff888025db74c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x41a/0xe20 [ 393.880016][ T30] #1: ffff888025c44b90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x443/0x9a0 [ 393.889561][ T30] #2: ffff888025ff0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xbe/0x1220 [ 393.898599][ T30] 3 locks held by udevd/6273: [ 393.903309][ T30] #0: ffff888025e1e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x41a/0xe20 [ 393.955959][ T30] #1: ffff888025b5af10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x443/0x9a0 [ 393.965652][ T30] #2: ffff888025f88180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xbe/0x1220 [ 393.974679][ T30] 3 locks held by udevd/6274: [ 393.979441][ T30] #0: ffff888025fa24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x41a/0xe20 [ 393.988884][ T30] #1: ffff888025ca7490 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x443/0x9a0 [ 393.998455][ T30] #2: ffff888026498180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xbe/0x1220 [ 394.007478][ T30] [ 394.009797][ T30] ============================================= [ 394.009797][ T30] [ 394.018441][ T30] NMI backtrace for cpu 0 [ 394.022789][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 394.033278][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 394.043320][ T30] Call Trace: [ 394.046584][ T30] [ 394.049501][ T30] dump_stack_lvl+0x116/0x1f0 [ 394.054192][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 394.059147][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 394.065142][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 394.071296][ T30] watchdog+0xf0c/0x1240 [ 394.075560][ T30] ? __pfx_watchdog+0x10/0x10 [ 394.080247][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.085455][ T30] ? __kthread_parkme+0x148/0x220 [ 394.090489][ T30] ? __pfx_watchdog+0x10/0x10 [ 394.095159][ T30] kthread+0x2c1/0x3a0 [ 394.099223][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.104418][ T30] ? __pfx_kthread+0x10/0x10 [ 394.109005][ T30] ret_from_fork+0x45/0x80 [ 394.113447][ T30] ? __pfx_kthread+0x10/0x10 [ 394.118032][ T30] ret_from_fork_asm+0x1a/0x30 [ 394.122813][ T30] [ 394.126070][ T30] Sending NMI from CPU 0 to CPUs 1: [ 394.131313][ C1] NMI backtrace for cpu 1 [ 394.131326][ C1] CPU: 1 UID: 0 PID: 3592 Comm: kworker/u8:11 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 394.131348][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 394.131361][ C1] Workqueue: bat_events batadv_nc_worker [ 394.131418][ C1] RIP: 0010:lock_release+0x10/0x6f0 [ 394.131439][ C1] Code: ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 <41> 56 41 55 41 54 49 89 fc 55 53 48 81 ec 90 00 00 00 48 8d 5c 24 [ 394.131458][ C1] RSP: 0018:ffffc9000ce9fb80 EFLAGS: 00000206 [ 394.131474][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff8ae7b84d [ 394.131487][ C1] RDX: ffff88803323c880 RSI: ffffffff8ae7b547 RDI: ffffffff8e1b8340 [ 394.131500][ C1] RBP: 00000000000003e4 R08: 0000000000000001 R09: 0000000000000000 [ 394.131513][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 394.131525][ C1] R13: 000000000003dbcc R14: 0000000000000000 R15: dffffc0000000000 [ 394.131538][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 394.131557][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.131571][ C1] CR2: 00007fb90f708ab8 CR3: 00000000306e2000 CR4: 00000000003526f0 [ 394.131584][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 394.131596][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 394.131608][ C1] Call Trace: [ 394.131614][ C1] [ 394.131622][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 394.131649][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 394.131678][ C1] ? nmi_handle+0x1a9/0x5c0 [ 394.131703][ C1] ? lock_release+0x10/0x6f0 [ 394.131720][ C1] ? default_do_nmi+0x6a/0x160 [ 394.131744][ C1] ? exc_nmi+0x170/0x1e0 [ 394.131767][ C1] ? end_repeat_nmi+0xf/0x53 [ 394.131787][ C1] ? batadv_nc_worker+0xb8d/0x1060 [ 394.131813][ C1] ? batadv_nc_worker+0x887/0x1060 [ 394.131839][ C1] ? lock_release+0x10/0x6f0 [ 394.131856][ C1] ? lock_release+0x10/0x6f0 [ 394.131874][ C1] ? lock_release+0x10/0x6f0 [ 394.131894][ C1] [ 394.131900][ C1] [ 394.131906][ C1] batadv_nc_worker+0x88c/0x1060 [ 394.131935][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 394.131961][ C1] ? rcu_is_watching+0x12/0xc0 [ 394.131984][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 394.132009][ C1] ? process_one_work+0x921/0x1ba0 [ 394.132028][ C1] ? lock_acquire+0x2f/0xb0 [ 394.132052][ C1] ? process_one_work+0x921/0x1ba0 [ 394.132071][ C1] process_one_work+0x9c5/0x1ba0 [ 394.132094][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 394.132120][ C1] ? __pfx_process_one_work+0x10/0x10 [ 394.132141][ C1] ? assign_work+0x1a0/0x250 [ 394.132178][ C1] worker_thread+0x6c8/0xf00 [ 394.132201][ C1] ? __pfx_worker_thread+0x10/0x10 [ 394.132219][ C1] kthread+0x2c1/0x3a0 [ 394.132240][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.132267][ C1] ? __pfx_kthread+0x10/0x10 [ 394.132290][ C1] ret_from_fork+0x45/0x80 [ 394.132307][ C1] ? __pfx_kthread+0x10/0x10 [ 394.132330][ C1] ret_from_fork_asm+0x1a/0x30 [ 394.132362][ C1] [ 394.185314][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 394.185330][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 394.185355][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 394.185366][ T30] Call Trace: [ 394.185372][ T30] [ 394.185382][ T30] dump_stack_lvl+0x3d/0x1f0 [ 394.185409][ T30] panic+0x71d/0x800 [ 394.185460][ T30] ? __pfx_panic+0x10/0x10 [ 394.185485][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 394.185509][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 394.185535][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 394.185555][ T30] ? watchdog+0xd76/0x1240 [ 394.185574][ T30] ? watchdog+0xd69/0x1240 [ 394.185595][ T30] watchdog+0xd87/0x1240 [ 394.185617][ T30] ? __pfx_watchdog+0x10/0x10 [ 394.185633][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.185662][ T30] ? __kthread_parkme+0x148/0x220 [ 394.185687][ T30] ? __pfx_watchdog+0x10/0x10 [ 394.185704][ T30] kthread+0x2c1/0x3a0 [ 394.185724][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.185750][ T30] ? __pfx_kthread+0x10/0x10 [ 394.185773][ T30] ret_from_fork+0x45/0x80 [ 394.185791][ T30] ? __pfx_kthread+0x10/0x10 [ 394.185816][ T30] ret_from_fork_asm+0x1a/0x30 [ 394.185852][ T30] [ 394.565482][ T30] Kernel Offset: disabled [ 394.569804][ T30] Rebooting in 86400 seconds..