last executing test programs: 5.720809145s ago: executing program 4 (id=1653): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x0, 0x4, 0x6, 0x115}, 0x48) 5.142599484s ago: executing program 4 (id=1655): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x20000000) dup3(0xffffffffffffffff, r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18220000000000000000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000057d4d2155cc24fd4bc0007010000f8ffffffb702000008"], 0x0}, 0x90) accept4(r0, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000001c0)={0x13, 0x10, 0x10f, {0x0, r3}}, 0x18) 5.086797674s ago: executing program 4 (id=1658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c000b80100001800c000100636f756e7465720048"], 0x12c}}, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x2000000, 0x93, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a44ca7b73908b0e0245bb78fefed08041a1231bdb4729d55fa1e5b413df0c757252630588a43d899a24818d78c9b4b148de20b812fd893157d5046238c9c82df5a649a4781baeac4da0bf1151b932a24f43608a48841f8083e2bf008a0c7a6415d630057bde8c3589ec5aad0876bd342598daa8affb10c0bccb023f824d8e9fdc94ab245a5d", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) syz_usbip_server_init(0x5) r8 = socket$inet(0xa, 0x801, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) 4.937786904s ago: executing program 0 (id=1659): ioperm(0x0, 0x7, 0xfffffff7) epoll_create(0xcc49) 4.087900844s ago: executing program 0 (id=1660): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x5c4, &(0x7f0000000200), &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 4.084057506s ago: executing program 1 (id=1661): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x150, 0x150, 0x2a8, 0xf8010000, 0x370, 0x238, 0x238, 0x370, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x240, 0x2a8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x84}}}, @common=@inet=@sctp={{0x144}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x494) 3.797841684s ago: executing program 1 (id=1663): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:*'], 0x8) 3.550422729s ago: executing program 1 (id=1665): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$getown(r2, 0x9) ptrace$setsig(0x4203, r4, 0xb, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ecab5329269972f145883fef0be71d70c188594bf89a5adaef0704ad67faf87fb50d21384b2ab982aaa9178abb878db234fcee71f2a3eb772da0da2e0fcab20a94463c2dd91b3ccf1241a07660aeb4655bf29d65fb3f3c548573d096c0d15ee237570afa9fe4d0b2be5cd2ea7d3675e2e2cc0b27db4f43ac1348b2d57cec24d85817a66e968973bfb3e700c39380946e85a44c1b58a6d3df9af4f07e152ff5f615", 0xa1) setsockopt$inet_mreqsrc(r5, 0x0, 0x0, &(0x7f0000000240)={@private=0xa010100, @broadcast, @multicast1}, 0xc) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}, {&(0x7f00000003c0)="519752052311a5260200000000000200e6f5ac699cd77d1088ec6de7368c4358800540db051b40ed5fba851a35b2f753f2a227ab9858d9c3958b5511ac29371c6f0000", 0x43}, {&(0x7f0000000440)="7bbd7042b0104a0d3653857731d60f1e098a83a394b4703180cdccb591ac5af9b58bb4b7c12ad747794a7be1951cec572ae2d2ad5000d9058bb35c9eed4f2e1802214ef84e516f1db75053b02a660a0ebf36e7c077b3510c04fc00e0835bc3889908a831ccee1b1a0b348ed00949b93d3b227cf6", 0x74}], 0x3, 0x0, 0x0, 0xe0000000}, 0x20040088) bind$inet(r3, 0x0, 0x0) 3.529119321s ago: executing program 2 (id=1666): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.758216395s ago: executing program 1 (id=1668): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040) 2.649114738s ago: executing program 2 (id=1670): socket$inet6(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) write$binfmt_elf32(r2, 0x0, 0x1001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000100)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000180)={r6, 0x3, r4, 0x6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x60, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xc, 0x1, '..%}:)(\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x6, 0x1, '&\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 2.478519055s ago: executing program 1 (id=1672): sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) setrlimit(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x2, 0x1) open(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@window, @mss, @window, @timestamp, @window, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0), 0x0, 0x802, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0xfFffffffffff18b8,max_read=0x0000000000009,max_read=0', @ANYRESDEC=r2, @ANYBLOB=',seclabel,audit,\x00']) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000300)={0x0, @tick=0x8, 0x0, {0x0, 0xd9}, 0xfe, 0x3}) getpid() msgctl$IPC_RMID(0x0, 0x0) 2.354353361s ago: executing program 3 (id=1673): creat(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='adfs\x00', 0x0, 0x0) 1.727615801s ago: executing program 0 (id=1674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) 1.654442979s ago: executing program 4 (id=1675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/262, 0x106}], 0x1}, 0x0) sendmsg(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)='N', 0x1}], 0x1}, 0x0) 1.600812917s ago: executing program 1 (id=1676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @union]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r8], 0x20}}, 0x0) 1.542436368s ago: executing program 3 (id=1677): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) 1.442540689s ago: executing program 0 (id=1678): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0xffff, r2}, 0x38) 1.404470579s ago: executing program 4 (id=1679): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$getown(r2, 0x9) ptrace$setsig(0x4203, r4, 0xb, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ecab5329269972f145883fef0be71d70c188594bf89a5adaef0704ad67faf87fb50d21384b2ab982aaa9178abb878db234fcee71f2a3eb772da0da2e0fcab20a94463c2dd91b3ccf1241a07660aeb4655bf29d65fb3f3c548573d096c0d15ee237570afa9fe4d0b2be5cd2ea7d3675e2e2cc0b27db4f43ac1348b2d57cec24d85817a66e968973bfb3e700c39380946e85a44c1b58a6d3df9af4f07e152ff5f615", 0xa1) setsockopt$inet_mreqsrc(r5, 0x0, 0x0, &(0x7f0000000240)={@private=0xa010100, @broadcast, @multicast1}, 0xc) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}, {&(0x7f00000003c0)="519752052311a5260200000000000200e6f5ac699cd77d1088ec6de7368c4358800540db051b40ed5fba851a35b2f753f2a227ab9858d9c3958b5511ac29371c6f0000", 0x43}, {&(0x7f0000000440)="7bbd7042b0104a0d3653857731d60f1e098a83a394b4703180cdccb591ac5af9b58bb4b7c12ad747794a7be1951cec572ae2d2ad5000d9058bb35c9eed4f2e1802214ef84e516f1db75053b02a660a0ebf36e7c077b3510c04fc00e0835bc3889908a831ccee1b1a0b348ed00949b93d3b227cf6", 0x74}], 0x3, 0x0, 0x0, 0xe0000000}, 0x20040088) bind$inet(r3, 0x0, 0x0) 1.374169109s ago: executing program 2 (id=1680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001600000000000000ae330018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.314299345s ago: executing program 0 (id=1681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.114758811s ago: executing program 3 (id=1682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000006c0)={'veth1_to_team\x00', @dev}) 1.084504094s ago: executing program 2 (id=1683): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000590000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) 562.754576ms ago: executing program 3 (id=1684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000101010100000000000000000a0000000c001980080001000d02000008001a"], 0x60}}, 0x0) 561.930185ms ago: executing program 0 (id=1685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c000b80100001800c000100636f756e7465720048"], 0x12c}}, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x2000000, 0x93, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a44ca7b73908b0e0245bb78fefed08041a1231bdb4729d55fa1e5b413df0c757252630588a43d899a24818d78c9b4b148de20b812fd893157d5046238c9c82df5a649a4781baeac4da0bf1151b932a24f43608a48841f8083e2bf008a0c7a6415d630057bde8c3589ec5aad0876bd342598daa8affb10c0bccb023f824d8e9fdc94ab245a5d", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) syz_usbip_server_init(0x5) r8 = socket$inet(0xa, 0x801, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) 374.635876ms ago: executing program 2 (id=1686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 337.986275ms ago: executing program 4 (id=1687): sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) setrlimit(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x2, 0x1) open(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@window, @mss, @window, @timestamp, @window, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0), 0x0, 0x802, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0xfFffffffffff18b8,max_read=0x0000000000009,max_read=0', @ANYRESDEC=r2, @ANYBLOB=',seclabel,audit,\x00']) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000300)={0x0, @tick=0x8, 0x0, {0x0, 0xd9}, 0xfe, 0x3}) getpid() msgctl$IPC_RMID(0x0, 0x0) 275.369982ms ago: executing program 3 (id=1688): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) userfaultfd(0x80001) sched_setscheduler(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000018c0)=0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x4030582a, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 110.505373ms ago: executing program 2 (id=1689): syz_emit_ethernet(0xa2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000900), 0x37db, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x90) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11}, &(0x7f00000001c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = open(0x0, 0x0, 0x146) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x10, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000ab80)=[{{&(0x7f0000000900)=@pppol2tpin6, 0x80, 0x0, 0x0, &(0x7f00000002c0)}}, {{0x0, 0x0, &(0x7f0000000e00), 0x0, &(0x7f00000011c0)=""/234, 0xea}}, {{&(0x7f0000000f80)=@alg, 0x80, 0x0}, 0x7}, {{&(0x7f0000004540)=@vsock, 0x80, 0x0, 0x0, &(0x7f0000006080)=""/251, 0xfb}, 0x7}, {{&(0x7f0000008240)=@generic, 0x80, &(0x7f0000000500)=[{&(0x7f0000000c40)=""/127, 0x7f}, {&(0x7f0000008380)=""/109, 0x6d}, {0x0}, {0x0}, {&(0x7f000000a740)=""/211, 0xd3}, {&(0x7f000000a840)=""/199, 0xc7}, {&(0x7f0000000800)=""/237, 0xed}], 0x7, &(0x7f0000000340)=""/122, 0x7a}, 0xbb0}], 0x5, 0x0, &(0x7f0000004a40)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 0s ago: executing program 3 (id=1690): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x8004b709, 0x0) kernel console output (not intermixed with test programs): 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 359.032899][ T8059] RSP: 002b:00007f0debe78040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.041316][ T8059] RAX: ffffffffffffffda RBX: 00007f0deb303f60 RCX: 00007f0deb17457c [ 359.049290][ T8059] RDX: 000000000000000f RSI: 00007f0debe780b0 RDI: 0000000000000003 [ 359.057261][ T8059] RBP: 00007f0debe780a0 R08: 0000000000000000 R09: 0000000000000000 [ 359.065230][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.073199][ T8059] R13: 000000000000000b R14: 00007f0deb303f60 R15: 00007ffddf1eae18 [ 359.081175][ T8059] [ 359.084297][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.112839][ T5136] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.151843][ T5136] usb 5-1: selecting invalid altsetting 2 [ 359.165561][ T5136] set interface failed [ 359.165592][ T5136] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 359.180362][ T5136] error writing reg: 0xff, val: 0x00 [ 359.334668][ T5136] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 359.556366][ T5136] usb 5-1: USB disconnect, device number 11 [ 359.650259][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 361.655812][ T1166] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 361.875224][ T1166] usb 1-1: Using ep0 maxpacket: 16 [ 361.891966][ T1166] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.926779][ T1166] usb 1-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 361.954145][ T1166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.015248][ T8101] iso9660: Unknown parameter '0xffffffffffffffff' [ 362.799299][ T1166] usb 1-1: Product: syz [ 362.804211][ T1166] usb 1-1: Manufacturer: syz [ 362.814860][ T5136] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 362.827637][ T1166] usb 1-1: SerialNumber: syz [ 362.839019][ T1166] usb 1-1: config 0 descriptor?? [ 362.903308][ T1166] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 362.963672][ T1166] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 363.001620][ T1166] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 363.014881][ T5136] usb 4-1: Using ep0 maxpacket: 16 [ 363.031166][ T1166] usb 1-1: media controller created [ 363.050508][ T5136] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 363.079682][ T5136] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 363.114926][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.141558][ T1166] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.165104][ T5136] usb 4-1: Product: syz [ 363.182906][ T5136] usb 4-1: Manufacturer: syz [ 363.203232][ T5136] usb 4-1: SerialNumber: syz [ 363.233046][ T5136] usb 4-1: config 0 descriptor?? [ 363.327053][ T8088] bridge_slave_1: left allmulticast mode [ 363.352398][ T8088] bridge_slave_1: left promiscuous mode [ 363.361313][ T5136] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 363.397863][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.417022][ T1166] usb 1-1: selecting invalid altsetting 2 [ 363.422805][ T1166] set interface failed [ 363.422840][ T1166] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 363.452111][ T5136] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 363.502543][ T5136] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 363.510255][ T1166] error writing reg: 0xff, val: 0x00 [ 363.576601][ T5136] usb 4-1: media controller created [ 363.692601][ T5136] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.832660][ T5136] usb 4-1: selecting invalid altsetting 2 [ 363.841329][ T1166] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 363.861822][ T5136] set interface failed [ 363.861853][ T5136] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 363.919987][ T1166] usb 1-1: USB disconnect, device number 7 [ 363.928363][ T5136] error writing reg: 0xff, val: 0x00 [ 364.101381][ T5087] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 364.107036][ T5087] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 364.330720][ T5136] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 364.420457][ T5136] usb 4-1: USB disconnect, device number 9 [ 367.876872][ T1166] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 368.045880][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 368.074933][ T1166] usb 3-1: Using ep0 maxpacket: 16 [ 368.098752][ T1166] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.143362][ T1166] usb 3-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 368.159433][ T1166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.168716][ T1166] usb 3-1: Product: syz [ 368.173003][ T1166] usb 3-1: Manufacturer: syz [ 368.177961][ T1166] usb 3-1: SerialNumber: syz [ 368.201758][ T1166] usb 3-1: config 0 descriptor?? [ 368.230634][ T1166] usb 3-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 368.269985][ T1166] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 368.284803][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 368.313975][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.338044][ T1166] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 368.368224][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 368.379849][ T1166] usb 3-1: media controller created [ 368.403061][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.441587][ T25] usb 4-1: Product: syz [ 368.465884][ T25] usb 4-1: Manufacturer: syz [ 368.493242][ T25] usb 4-1: SerialNumber: syz [ 368.532503][ T25] usb 4-1: config 0 descriptor?? [ 368.572879][ T25] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 368.581119][ T5087] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 368.583739][ T1166] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.629091][ T25] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 368.701818][ T25] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 368.709955][ T1166] usb 3-1: selecting invalid altsetting 2 [ 368.724140][ T5087] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 368.742056][ T25] usb 4-1: media controller created [ 368.747903][ T1166] set interface failed [ 368.747972][ T1166] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 368.794128][ T1166] error writing reg: 0xff, val: 0x00 [ 369.679361][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.883580][ T1166] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 369.896380][ T25] usb 4-1: selecting invalid altsetting 2 [ 369.902147][ T25] set interface failed [ 369.902177][ T25] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 369.933341][ T25] error writing reg: 0xff, val: 0x00 [ 369.964035][ T1166] usb 3-1: USB disconnect, device number 17 [ 370.223371][ T25] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 370.280538][ T9] usb 4-1: USB disconnect, device number 10 [ 371.295134][ T1166] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 371.496547][ T1166] usb 2-1: Using ep0 maxpacket: 16 [ 371.506808][ T8205] CUSE: unknown device info "Pt"" [ 371.545017][ T8205] CUSE: DEVNAME unspecified [ 371.546280][ T1166] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 371.583066][ T1166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.615079][ T1166] usb 2-1: Product: syz [ 371.622821][ T1166] usb 2-1: Manufacturer: syz [ 371.625536][ T8205] netlink: 148 bytes leftover after parsing attributes in process `syz.0.786'. [ 371.655111][ T1166] usb 2-1: SerialNumber: syz [ 371.701656][ T1166] usb 2-1: config 0 descriptor?? [ 371.942700][ T8192] netlink: 48 bytes leftover after parsing attributes in process `syz.1.782'. [ 371.969848][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 372.278220][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 372.335392][ T9] usb 4-1: config index 0 descriptor too short (expected 46372, got 36) [ 372.400790][ T9] usb 4-1: config 148 has too many interfaces: 182, using maximum allowed: 32 [ 372.494449][ T9] usb 4-1: config 148 has an invalid descriptor of length 179, skipping remainder of the config [ 372.592132][ T9] usb 4-1: config 148 has 0 interfaces, different from the descriptor's value: 182 [ 372.718526][ T9] usb 4-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.40 [ 372.736106][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.820163][ T9] usb 4-1: SerialNumber: 鋏슣 컓鞤昜ኚ誽젋Қ嵦曂熨璊׎ [ 373.430450][ T1166] usb 2-1: MIDIStreaming interface descriptor not found [ 373.598648][ T1166] usb 2-1: USB disconnect, device number 9 [ 373.802048][ T9] usb 4-1: USB disconnect, device number 11 [ 374.053360][ T5202] udevd[5202]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.075500][ T5141] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 374.304838][ T5141] usb 1-1: Using ep0 maxpacket: 16 [ 374.339624][ T5141] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.380201][ T5141] usb 1-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 374.417778][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.434663][ T5141] usb 1-1: Product: syz [ 374.446190][ T5141] usb 1-1: Manufacturer: syz [ 374.456422][ T5141] usb 1-1: SerialNumber: syz [ 374.468079][ T8236] befs: (nullb0): No write support. Marking filesystem read-only [ 374.482722][ T5141] usb 1-1: config 0 descriptor?? [ 374.490666][ T8236] befs: (nullb0): invalid magic header [ 374.518998][ T5141] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 374.731498][ T5141] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 374.749263][ T5141] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 374.757578][ T5141] usb 1-1: media controller created [ 375.777652][ T5141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.815817][ T5141] usb 1-1: selecting invalid altsetting 2 [ 375.864804][ T5141] set interface failed [ 375.864835][ T5141] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 375.908908][ T5141] error writing reg: 0xff, val: 0x00 [ 376.097521][ T5141] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 376.170282][ T5141] usb 1-1: USB disconnect, device number 8 [ 376.207150][ T8252] CUSE: unknown device info "Pt"" [ 376.212358][ T8252] CUSE: DEVNAME unspecified [ 376.284831][ T5169] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 376.351387][ T8252] netlink: 148 bytes leftover after parsing attributes in process `syz.4.799'. [ 376.704828][ T5169] usb 3-1: Using ep0 maxpacket: 16 [ 376.716851][ T5169] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 376.726414][ T5169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.734488][ T5169] usb 3-1: Product: syz [ 376.757501][ T5169] usb 3-1: Manufacturer: syz [ 376.762197][ T5169] usb 3-1: SerialNumber: syz [ 376.791164][ T5169] usb 3-1: config 0 descriptor?? [ 377.106999][ T8249] netlink: 48 bytes leftover after parsing attributes in process `syz.2.797'. [ 377.494933][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 378.505392][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 378.541985][ T25] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 378.553294][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.563314][ T25] usb 1-1: Product: syz [ 378.567787][ T25] usb 1-1: Manufacturer: syz [ 378.572546][ T25] usb 1-1: SerialNumber: syz [ 378.625454][ T25] usb 1-1: config 0 descriptor?? [ 378.987601][ T5169] usb 3-1: MIDIStreaming interface descriptor not found [ 379.105743][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.112209][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.172509][ T5169] usb 3-1: USB disconnect, device number 18 [ 380.088517][ T25] usb 1-1: MIDIStreaming interface descriptor not found [ 380.195478][ T25] usb 1-1: USB disconnect, device number 9 [ 381.524276][ T5100] Bluetooth: hci6: command 0x0406 tx timeout [ 381.551928][ T6150] udevd[6150]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.630148][ T8290] befs: (nullb0): No write support. Marking filesystem read-only [ 381.643218][ T8290] befs: (nullb0): invalid magic header [ 381.929813][ T8297] udevd[8297]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 382.775150][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 383.114867][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 383.130881][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.196430][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 383.227275][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.235964][ T25] usb 1-1: Product: syz [ 383.240241][ T25] usb 1-1: Manufacturer: syz [ 383.249931][ T25] usb 1-1: SerialNumber: syz [ 383.265917][ T25] usb 1-1: config 0 descriptor?? [ 383.292263][ T25] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 383.321971][ T25] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 383.339258][ T25] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 383.372759][ T25] usb 1-1: media controller created [ 383.517209][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.598019][ T8321] CUSE: unknown device info "Pt"" [ 383.619193][ T8321] CUSE: DEVNAME unspecified [ 383.649119][ T25] usb 1-1: selecting invalid altsetting 2 [ 383.676678][ T25] set interface failed [ 383.676710][ T25] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 383.730803][ T25] error writing reg: 0xff, val: 0x00 [ 383.877237][ T25] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 383.881839][ T8321] netlink: 148 bytes leftover after parsing attributes in process `syz.3.817'. [ 384.407369][ T5087] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 384.640478][ T5180] usb 1-1: USB disconnect, device number 10 [ 384.843340][ T5087] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 385.874857][ T5169] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 386.008450][ T8341] CUSE: unknown device info "Pt"" [ 386.031136][ T8341] CUSE: DEVNAME unspecified [ 386.087816][ T5169] usb 3-1: Using ep0 maxpacket: 16 [ 386.111855][ T5169] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 386.139452][ T5169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.172051][ T5087] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 386.174854][ T5169] usb 3-1: Product: syz [ 386.185175][ T8341] netlink: 148 bytes leftover after parsing attributes in process `syz.1.822'. [ 386.215676][ T5169] usb 3-1: Manufacturer: syz [ 386.220389][ T5087] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 386.254838][ T5169] usb 3-1: SerialNumber: syz [ 386.285476][ T5169] usb 3-1: config 0 descriptor?? [ 386.590674][ T8334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.819'. [ 388.934667][ T5087] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 388.968408][ T5169] usb 3-1: MIDIStreaming interface descriptor not found [ 389.221037][ T5169] usb 3-1: USB disconnect, device number 19 [ 389.597942][ T8297] udevd[8297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.775980][ T29] audit: type=1400 audit(1721233213.777:539): avc: denied { getopt } for pid=8364 comm="syz.2.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 391.825013][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 392.158446][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 392.176518][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.226587][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 392.261181][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.281401][ T25] usb 4-1: Product: syz [ 392.298390][ T25] usb 4-1: Manufacturer: syz [ 392.303287][ T25] usb 4-1: SerialNumber: syz [ 392.326490][ T25] usb 4-1: config 0 descriptor?? [ 392.347657][ T25] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 392.371825][ T25] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 392.409609][ T25] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 392.423376][ T25] usb 4-1: media controller created [ 392.599699][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.714226][ T25] usb 4-1: selecting invalid altsetting 2 [ 392.741642][ T25] set interface failed [ 392.741957][ T25] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 392.767639][ T25] error writing reg: 0xff, val: 0x00 [ 392.873002][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 393.048967][ T25] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 393.105083][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 393.135724][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 393.152290][ T25] usb 4-1: USB disconnect, device number 12 [ 393.226594][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 393.270864][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.291262][ T9] usb 1-1: Product: syz [ 393.306548][ T9] usb 1-1: Manufacturer: syz [ 393.321033][ T9] usb 1-1: SerialNumber: syz [ 393.344177][ T9] usb 1-1: config 0 descriptor?? [ 393.357607][ T9] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 393.402551][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 393.450542][ T9] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 393.492962][ T9] usb 1-1: media controller created [ 393.717098][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.845947][ T9] usb 1-1: selecting invalid altsetting 2 [ 393.885089][ T9] set interface failed [ 393.885122][ T9] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 393.916081][ T9] error writing reg: 0xff, val: 0x00 [ 395.032672][ T9] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 395.238631][ T9] usb 1-1: USB disconnect, device number 11 [ 396.062781][ T8416] CUSE: unknown device info "Pt"" [ 396.075230][ T8416] CUSE: DEVNAME unspecified [ 396.196309][ T8416] netlink: 148 bytes leftover after parsing attributes in process `syz.3.842'. [ 396.274844][ T5180] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 396.545237][ T5180] usb 1-1: not running at top speed; connect to a high speed hub [ 396.619310][ T5180] usb 1-1: config index 0 descriptor too short (expected 46372, got 36) [ 396.686436][ T5180] usb 1-1: config 148 has too many interfaces: 182, using maximum allowed: 32 [ 396.775891][ T5180] usb 1-1: config 148 has an invalid descriptor of length 179, skipping remainder of the config [ 396.834011][ T5180] usb 1-1: config 148 has 0 interfaces, different from the descriptor's value: 182 [ 396.938925][ T5180] usb 1-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.40 [ 397.127243][ T5180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.160960][ T5180] usb 1-1: SerialNumber: 鋏슣 컓鞤昜ኚ誽젋Қ嵦曂熨璊׎ [ 397.564198][ T8427] befs: (nullb0): No write support. Marking filesystem read-only [ 397.586789][ T8427] befs: (nullb0): invalid magic header [ 397.717673][ T5180] usb 1-1: USB disconnect, device number 12 [ 398.998212][ T8438] CUSE: unknown device info "Pt"" [ 399.003417][ T8438] CUSE: DEVNAME unspecified [ 399.068405][ T8438] netlink: 148 bytes leftover after parsing attributes in process `syz.0.849'. [ 399.267245][ T1166] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 399.464799][ T1166] usb 4-1: Using ep0 maxpacket: 16 [ 399.501249][ T1166] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.547994][ T1166] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 399.610961][ T1166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.677456][ T1166] usb 4-1: Product: syz [ 399.681656][ T1166] usb 4-1: Manufacturer: syz [ 399.703689][ T1166] usb 4-1: SerialNumber: syz [ 399.731106][ T1166] usb 4-1: config 0 descriptor?? [ 399.760172][ T1166] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 399.806712][ T1166] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 399.845925][ T1166] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 399.853540][ T1166] usb 4-1: media controller created [ 399.904979][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 400.005529][ T1166] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.097655][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 400.132179][ T9] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 400.151275][ T1166] usb 4-1: selecting invalid altsetting 2 [ 400.151542][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.179172][ T1166] set interface failed [ 400.179204][ T1166] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 400.205909][ T9] usb 5-1: Product: syz [ 400.210115][ T9] usb 5-1: Manufacturer: syz [ 400.216730][ T9] usb 5-1: SerialNumber: syz [ 400.226456][ T9] usb 5-1: config 0 descriptor?? [ 400.233516][ T1166] error writing reg: 0xff, val: 0x00 [ 400.322923][ T8448] befs: (nullb0): No write support. Marking filesystem read-only [ 400.337851][ T8448] befs: (nullb0): invalid magic header [ 400.594130][ T1166] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 400.697496][ T1166] usb 4-1: USB disconnect, device number 13 [ 401.955461][ T5141] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 402.267789][ T5141] usb 3-1: Using ep0 maxpacket: 16 [ 402.275487][ T5141] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 402.296875][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 402.340307][ T5141] usb 3-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 402.360372][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.385927][ T5141] usb 3-1: Product: syz [ 402.400951][ T5141] usb 3-1: Manufacturer: syz [ 402.415139][ T5141] usb 3-1: SerialNumber: syz [ 402.435662][ T5141] usb 3-1: config 0 descriptor?? [ 402.494831][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 402.514121][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 402.517562][ T5141] usb 3-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 402.560911][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 402.582648][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.623252][ T25] usb 1-1: Product: syz [ 402.641211][ T5141] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 402.653428][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 402.668874][ T25] usb 1-1: Manufacturer: syz [ 402.680575][ T5141] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 402.688354][ T25] usb 1-1: SerialNumber: syz [ 402.711909][ T25] usb 1-1: config 0 descriptor?? [ 402.719671][ T5141] usb 3-1: media controller created [ 402.770174][ T25] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 402.843239][ T25] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 402.845153][ T9] usb 5-1: USB disconnect, device number 12 [ 402.981561][ T5141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.148691][ T25] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 403.148690][ T5141] usb 3-1: selecting invalid altsetting 2 [ 403.148715][ T5141] set interface failed [ 403.148733][ T5141] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 403.980558][ T5141] error writing reg: 0xff, val: 0x00 [ 404.032349][ T25] usb 1-1: media controller created [ 404.249051][ T5134] udevd[5134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.272512][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.535649][ T25] usb 1-1: selecting invalid altsetting 2 [ 404.560560][ T25] set interface failed [ 404.560648][ T25] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 404.605198][ T25] error writing reg: 0xff, val: 0x00 [ 404.690250][ T5087] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 404.743440][ T5087] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 404.873317][ T5141] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 404.893170][ T5141] usb 3-1: USB disconnect, device number 20 [ 405.940521][ T25] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 406.020701][ T25] usb 1-1: USB disconnect, device number 13 [ 407.373733][ T29] audit: type=1400 audit(1721233231.457:540): avc: denied { bind } for pid=8527 comm="syz.4.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 407.480746][ T8531] IPVS: length: 132 != 8 [ 408.098023][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 408.234912][ T29] audit: type=1400 audit(1721233232.307:541): avc: denied { append } for pid=8539 comm="syz.0.882" name="renderD128" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 408.258213][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.304803][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 408.317394][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 408.353066][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 408.375995][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.412156][ T25] usb 5-1: Product: syz [ 408.446308][ T25] usb 5-1: Manufacturer: syz [ 408.474586][ T25] usb 5-1: SerialNumber: syz [ 408.545944][ T25] usb 5-1: config 0 descriptor?? [ 408.636194][ T25] usb 5-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 408.666728][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 408.680160][ T25] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 408.708027][ T25] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 408.794263][ T25] usb 5-1: media controller created [ 408.942424][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.890007][ T25] usb 5-1: selecting invalid altsetting 2 [ 409.904025][ T25] set interface failed [ 409.904052][ T25] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 409.984902][ T25] error writing reg: 0xff, val: 0x00 [ 410.391952][ T25] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 410.556779][ T25] usb 5-1: USB disconnect, device number 13 [ 410.940110][ T5087] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 415.175301][ T5087] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 416.334834][ T5087] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 416.334982][ T5087] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 417.394635][ T8620] binder: 8619:8620 ioctl c00c620f 20000340 returned -22 [ 417.519655][ T8624] veth0_vlan: left promiscuous mode [ 417.536045][ T8624] veth0_vlan: entered promiscuous mode [ 417.559092][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 418.929739][ T8639] iso9660: Unknown parameter '0xffffffffffffffff' [ 419.540346][ T5087] Bluetooth: hci5: link tx timeout [ 419.545830][ T5087] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 419.559703][ T5087] Bluetooth: hci5: link tx timeout [ 419.564976][ T5087] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 420.116799][ T8657] binder: 8655:8657 ioctl c00c620f 20000340 returned -22 [ 420.186503][ T8657] veth0_vlan: left promiscuous mode [ 420.202872][ T8657] veth0_vlan: entered promiscuous mode [ 421.577350][ T5087] Bluetooth: hci5: command 0x0406 tx timeout [ 422.549255][ T8684] iso9660: Unknown parameter '0xffffffffffffffff' [ 424.369940][ T8705] binder: 8704:8705 ioctl c00c620f 20000340 returned -22 [ 424.619854][ T8717] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 425.427325][ T8708] veth0_vlan: left promiscuous mode [ 425.453426][ T8708] veth0_vlan: entered promiscuous mode [ 425.758715][ T8725] iso9660: Unknown parameter '0xffffffffffffffff' [ 426.144744][ T8728] CUSE: unknown device info "Pt"" [ 426.150285][ T8728] CUSE: DEVNAME unspecified [ 426.238313][ T8728] netlink: 148 bytes leftover after parsing attributes in process `syz.2.936'. [ 428.470675][ T5087] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 428.553504][ T5087] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 429.265066][ T8761] binder: 8760:8761 ioctl c00c620f 20000340 returned -22 [ 429.390031][ T8766] iso9660: Unknown parameter '0xffffffffffffffff' [ 429.400322][ T8765] veth0_vlan: left promiscuous mode [ 429.454729][ T8765] veth0_vlan: entered promiscuous mode [ 429.713898][ T8773] iso9660: Unknown parameter '0xffffffffffffffff' [ 431.357375][ T8796] iso9660: Unknown parameter '0xffffffffffffffff' [ 431.529045][ T8799] : renamed from vlan0 (while UP) [ 431.582267][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 431.895160][ T5100] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 431.912974][ T5100] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 432.003823][ T5100] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 432.667162][ T5100] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 432.991920][ T5100] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 433.207304][ T5100] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 433.358597][ T5100] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 434.199960][ T8827] binder: 8826:8827 ioctl c00c620f 20000340 returned -22 [ 435.396005][ T8832] veth0_vlan: left promiscuous mode [ 435.401932][ T8832] veth0_vlan: entered promiscuous mode [ 435.801965][ T8840] iso9660: Unknown parameter '0xffffffffffffffff' [ 436.533192][ T5087] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 436.556502][ T5087] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 437.372804][ T8855] Invalid architecture in ELF header: 43326 [ 437.386226][ T29] audit: type=1400 audit(1721233261.457:542): avc: denied { module_load } for pid=8854 comm="syz.4.975" path=2F6D656D66643A1037202864656C6574656429 dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 437.734823][ T5087] Bluetooth: hci5: command 0x0406 tx timeout [ 438.773974][ T8866] CUSE: unknown device info "Pt"" [ 438.824058][ T8866] CUSE: DEVNAME unspecified [ 438.929084][ T8866] netlink: 148 bytes leftover after parsing attributes in process `syz.4.979'. [ 439.032730][ T8878] iso9660: Unknown parameter '0xffffffffffffffff' [ 439.169155][ T8881] FAULT_INJECTION: forcing a failure. [ 439.169155][ T8881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.175601][ T8876] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.981'. [ 439.183465][ T8881] CPU: 0 PID: 8881 Comm: syz.3.983 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 439.201013][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 439.211070][ T8881] Call Trace: [ 439.214362][ T8881] [ 439.217297][ T8881] dump_stack_lvl+0x16c/0x1f0 [ 439.221971][ T8881] should_fail_ex+0x497/0x5b0 [ 439.226649][ T8881] _copy_from_user+0x30/0xf0 [ 439.231232][ T8881] do_ip_vs_get_ctl+0x2b1/0x1300 [ 439.236172][ T8881] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 439.241541][ T8881] ? trace_contention_end+0xea/0x140 [ 439.246834][ T8881] ? __mutex_lock+0x1a6/0x9c0 [ 439.251509][ T8881] ? __mutex_unlock_slowpath+0x164/0x650 [ 439.257139][ T8881] ? __pfx___mutex_lock+0x10/0x10 [ 439.262162][ T8881] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.268137][ T8881] ? nf_getsockopt+0x79/0xe0 [ 439.272740][ T8881] nf_getsockopt+0x79/0xe0 [ 439.277150][ T8881] ip_getsockopt+0x18e/0x1e0 [ 439.281731][ T8881] ? __pfx_ip_getsockopt+0x10/0x10 [ 439.286838][ T8881] udp_getsockopt+0x61/0xb0 [ 439.291330][ T8881] ipv6_getsockopt+0x255/0x2c0 [ 439.296085][ T8881] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 439.301361][ T8881] ? find_held_lock+0x2d/0x110 [ 439.306120][ T8881] tcp_getsockopt+0x9e/0x100 [ 439.310698][ T8881] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 439.316580][ T8881] do_sock_getsockopt+0x2e5/0x760 [ 439.321596][ T8881] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 439.327131][ T8881] ? __fget_files+0x256/0x400 [ 439.331795][ T8881] ? __fget_light+0x173/0x210 [ 439.336469][ T8881] __sys_getsockopt+0x1a1/0x270 [ 439.341323][ T8881] ? __pfx___sys_getsockopt+0x10/0x10 [ 439.346697][ T8881] ? fput+0x32/0x390 [ 439.350590][ T8881] ? ksys_write+0x1ab/0x260 [ 439.355083][ T8881] ? __pfx_ksys_write+0x10/0x10 [ 439.359923][ T8881] __x64_sys_getsockopt+0xbd/0x160 [ 439.365032][ T8881] ? do_syscall_64+0x91/0x250 [ 439.369713][ T8881] ? lockdep_hardirqs_on+0x7c/0x110 [ 439.374904][ T8881] do_syscall_64+0xcd/0x250 [ 439.379393][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.385367][ T8881] RIP: 0033:0x7f389cf75a99 [ 439.389770][ T8881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.409367][ T8881] RSP: 002b:00007f389dc7e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 439.417772][ T8881] RAX: ffffffffffffffda RBX: 00007f389d103f60 RCX: 00007f389cf75a99 [ 439.425739][ T8881] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 439.433702][ T8881] RBP: 00007f389dc7e0a0 R08: 0000000020000100 R09: 0000000000000000 [ 439.441666][ T8881] R10: 0000000020001640 R11: 0000000000000246 R12: 0000000000000001 [ 439.449626][ T8881] R13: 000000000000000b R14: 00007f389d103f60 R15: 00007fff266cc308 [ 439.457607][ T8881] [ 439.516919][ T8876] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 440.012872][ T5087] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 440.022263][ T5087] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 440.540455][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.548231][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.990251][ T8896] FAULT_INJECTION: forcing a failure. [ 440.990251][ T8896] name failslab, interval 1, probability 0, space 0, times 0 [ 441.028224][ T8896] CPU: 0 PID: 8896 Comm: syz.4.988 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 441.037870][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 441.047922][ T8896] Call Trace: [ 441.051202][ T8896] [ 441.054129][ T8896] dump_stack_lvl+0x16c/0x1f0 [ 441.058873][ T8896] should_fail_ex+0x497/0x5b0 [ 441.063567][ T8896] should_failslab+0x9/0x20 [ 441.068063][ T8896] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 441.073514][ T8896] ? getname_flags.part.0+0x4c/0x550 [ 441.078793][ T8896] getname_flags.part.0+0x4c/0x550 [ 441.083899][ T8896] getname_flags+0x93/0xf0 [ 441.088303][ T8896] user_path_at+0x24/0x60 [ 441.092617][ T8896] __x64_sys_mount+0x1fc/0x320 [ 441.097373][ T8896] ? __pfx___x64_sys_mount+0x10/0x10 [ 441.102653][ T8896] do_syscall_64+0xcd/0x250 [ 441.107142][ T8896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.113022][ T8896] RIP: 0033:0x7f7cee175a99 [ 441.117420][ T8896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.137014][ T8896] RSP: 002b:00007f7ceee63048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.145412][ T8896] RAX: ffffffffffffffda RBX: 00007f7cee303f60 RCX: 00007f7cee175a99 [ 441.153371][ T8896] RDX: 0000000020000200 RSI: 00000000200004c0 RDI: 0000000000000000 [ 441.161336][ T8896] RBP: 00007f7ceee630a0 R08: 0000000000000000 R09: 0000000000000000 [ 441.169295][ T8896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.177250][ T8896] R13: 000000000000000b R14: 00007f7cee303f60 R15: 00007ffc9393d708 [ 441.185211][ T8896] [ 441.609152][ T29] audit: type=1326 audit(1721233265.697:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cee175a99 code=0x0 [ 442.463090][ T8910] netlink: 'syz.0.992': attribute type 1 has an invalid length. [ 443.463657][ T8919] input: syz0 as /devices/virtual/input/input9 [ 444.507201][ T29] audit: type=1400 audit(1721233268.507:544): avc: denied { getopt } for pid=8918 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 444.615472][ T8932] binder: 8931:8932 ioctl c00c620f 20000340 returned -22 [ 444.777190][ T8934] veth0_vlan: left promiscuous mode [ 444.778538][ T8934] veth0_vlan: entered promiscuous mode [ 445.392581][ T29] audit: type=1326 audit(1721233269.477:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0deb175a99 code=0x0 [ 445.482841][ T5087] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 445.521297][ T5087] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 445.536504][ T8955] iso9660: Unknown parameter '0xffffffffffffffff' [ 445.842977][ T8956] befs: (nullb0): No write support. Marking filesystem read-only [ 445.882639][ T8956] befs: (nullb0): invalid magic header [ 448.235368][ T5087] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 449.180787][ T8979] befs: (nullb0): No write support. Marking filesystem read-only [ 449.189779][ T8979] befs: (nullb0): invalid magic header [ 449.421911][ T8983] input: syz0 as /devices/virtual/input/input10 [ 449.485051][ T8982] binder: 8980:8982 ioctl c00c620f 20000340 returned -22 [ 449.679731][ T8988] veth0_vlan: left promiscuous mode [ 449.681007][ T8988] veth0_vlan: entered promiscuous mode [ 450.818577][ T9005] FAULT_INJECTION: forcing a failure. [ 450.818577][ T9005] name failslab, interval 1, probability 0, space 0, times 0 [ 450.818644][ T9005] CPU: 0 PID: 9005 Comm: syz.1.1019 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 450.818672][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 450.818689][ T9005] Call Trace: [ 450.818699][ T9005] [ 450.818709][ T9005] dump_stack_lvl+0x16c/0x1f0 [ 450.818748][ T9005] should_fail_ex+0x497/0x5b0 [ 450.818788][ T9005] should_failslab+0x9/0x20 [ 450.818817][ T9005] __kmalloc_noprof+0xcf/0x410 [ 450.818847][ T9005] ? __pfx_lock_acquire+0x10/0x10 [ 450.818874][ T9005] tomoyo_realpath_from_path+0xb9/0x720 [ 450.818912][ T9005] ? tomoyo_profile+0x47/0x60 [ 450.818938][ T9005] tomoyo_path_number_perm+0x245/0x590 [ 450.818969][ T9005] ? tomoyo_path_number_perm+0x232/0x590 [ 450.819002][ T9005] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 450.819041][ T9005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 450.819081][ T9005] ? __fget_files+0x256/0x400 [ 450.819106][ T9005] security_file_ioctl+0x75/0xc0 [ 450.819142][ T9005] __x64_sys_ioctl+0xbb/0x220 [ 450.819179][ T9005] do_syscall_64+0xcd/0x250 [ 450.819205][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.819236][ T9005] RIP: 0033:0x7f0deb175a99 [ 450.819256][ T9005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.819281][ T9005] RSP: 002b:00007f0debe78048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.819308][ T9005] RAX: ffffffffffffffda RBX: 00007f0deb303f60 RCX: 00007f0deb175a99 [ 450.819327][ T9005] RDX: 0000000020000000 RSI: 00000000c0045627 RDI: 0000000000000003 [ 450.819345][ T9005] RBP: 00007f0debe780a0 R08: 0000000000000000 R09: 0000000000000000 [ 450.819362][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.819379][ T9005] R13: 000000000000000b R14: 00007f0deb303f60 R15: 00007ffddf1eae18 [ 450.819401][ T9005] [ 450.819534][ T9005] ERROR: Out of memory at tomoyo_realpath_from_path. [ 450.952054][ T9006] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 453.059472][ T5087] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 453.065878][ T5087] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 453.065958][ T5087] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 453.706754][ T5087] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 453.782402][ T5087] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 454.482434][ T9029] iso9660: Unknown parameter '0xffffffffffffffff' [ 459.113948][ T5087] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 459.129626][ T5087] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 461.200041][ T9086] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 463.155916][ T5136] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 464.794533][ T5136] usb 2-1: unable to get BOS descriptor or descriptor too short [ 464.873824][ T5136] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 464.896137][ T5136] usb 2-1: can't read configurations, error -71 [ 464.956273][ T9107] iso9660: Unknown parameter '0xffffffffffffffff' [ 465.807835][ T5169] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 466.014771][ T5169] usb 4-1: Using ep0 maxpacket: 16 [ 466.037001][ T5169] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 466.064310][ T5169] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 466.076985][ T5169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.096669][ T5169] usb 4-1: Product: syz [ 466.100879][ T5169] usb 4-1: Manufacturer: syz [ 466.113054][ T5087] Bluetooth: hci4: unexpected event for opcode 0x080c [ 466.126218][ T5169] usb 4-1: SerialNumber: syz [ 466.160336][ T5087] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 466.166944][ T5169] usb 4-1: config 0 descriptor?? [ 466.212359][ T5169] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 466.340960][ T5169] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 466.354295][ T5087] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 466.365456][ T5169] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 466.434521][ T5169] usb 4-1: media controller created [ 466.570650][ T5169] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.676285][ T5169] usb 4-1: selecting invalid altsetting 2 [ 466.685721][ T9118] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1050'. [ 466.712666][ T5169] set interface failed [ 466.712699][ T5169] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 466.763985][ T5169] error writing reg: 0xff, val: 0x00 [ 466.903276][ T5169] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 466.991886][ T5169] usb 4-1: USB disconnect, device number 14 [ 467.460405][ T5087] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 467.467421][ T5087] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 467.887684][ T9131] netlink: 'syz.1.1054': attribute type 11 has an invalid length. [ 468.290701][ T9137] futex_wake_op: syz.1.1054 tries to shift op by 144; fix this program [ 470.684741][ T29] audit: type=1400 audit(1721233294.697:546): avc: denied { write } for pid=9143 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 470.998910][ T9154] hfs: can't find a HFS filesystem on dev nullb0 [ 472.005407][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 472.176188][ T29] audit: type=1400 audit(1721233296.257:547): avc: denied { read } for pid=9161 comm="syz.2.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 473.101007][ T29] audit: type=1400 audit(1721233297.177:548): avc: denied { shutdown } for pid=9161 comm="syz.2.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 473.824064][ T9187] iso9660: Unknown parameter '0xffffffffffffffff' [ 476.387323][ T9207] hfs: can't find a HFS filesystem on dev nullb0 [ 477.873845][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 478.420083][ T5087] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 480.843984][ T9246] befs: (nullb0): No write support. Marking filesystem read-only [ 480.855363][ T9246] befs: (nullb0): invalid magic header [ 480.934393][ T29] audit: type=1400 audit(1721233305.007:549): avc: denied { read } for pid=9247 comm="syz.4.1087" path="socket:[25765]" dev="sockfs" ino=25765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 480.935812][ T9244] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1084'. [ 482.659166][ T9268] CUSE: unknown device info "Pt"" [ 482.684126][ T9268] CUSE: DEVNAME unspecified [ 482.812779][ T9268] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1092'. [ 485.449542][ T9286] befs: (nullb0): No write support. Marking filesystem read-only [ 485.463283][ T9286] befs: (nullb0): invalid magic header [ 485.769814][ T9294] UBIFS error (pid: 9294): cannot open "", error -22 [ 485.805169][ T9292] UBIFS error (pid: 9292): cannot open "", error -22 [ 485.812778][ T29] audit: type=1400 audit(1721233309.897:550): avc: denied { mounton } for pid=9291 comm="syz.1.1099" path="/proc/cpuinfo" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 486.129636][ T9306] befs: (nullb0): No write support. Marking filesystem read-only [ 486.176310][ T9306] befs: (nullb0): invalid magic header [ 487.964928][ T5087] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 488.588219][ T5087] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 488.866808][ T2862] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.995734][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.036531][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.045461][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.054480][ T9340] befs: (nullb0): No write support. Marking filesystem read-only [ 489.065081][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.075114][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 489.086713][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.114456][ T9340] befs: (nullb0): invalid magic header [ 489.256853][ T2862] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.458682][ T2862] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.761739][ T2862] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.690595][ T9356] veth0_vlan: left promiscuous mode [ 490.722870][ T9356] veth0_vlan: entered promiscuous mode [ 490.819164][ T2862] bridge_slave_0: left allmulticast mode [ 490.845880][ T2862] bridge_slave_0: left promiscuous mode [ 490.871907][ T2862] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.194875][ T5100] Bluetooth: hci2: command tx timeout [ 492.948290][ T9387] netlink: 'syz.3.1123': attribute type 1 has an invalid length. [ 493.265832][ T5100] Bluetooth: hci2: command tx timeout [ 494.021548][ T2862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.041177][ T2862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.079513][ T2862] bond0 (unregistering): Released all slaves [ 494.379005][ T9341] chnl_net:caif_netlink_parms(): no params data found [ 494.758201][ T9403] befs: (nullb0): No write support. Marking filesystem read-only [ 494.769352][ T9403] befs: (nullb0): invalid magic header [ 495.337246][ T5100] Bluetooth: hci2: command tx timeout [ 495.388513][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.427355][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.449745][ T9341] bridge_slave_0: entered allmulticast mode [ 495.511540][ T9341] bridge_slave_0: entered promiscuous mode [ 495.552409][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.603151][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.666001][ T9341] bridge_slave_1: entered allmulticast mode [ 495.708337][ T9341] bridge_slave_1: entered promiscuous mode [ 495.867942][ T2862] hsr_slave_0: left promiscuous mode [ 495.935715][ T2862] hsr_slave_1: left promiscuous mode [ 495.992231][ T2862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.024987][ T2862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.063620][ T2862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.095028][ T2862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.226581][ T2862] veth1_macvtap: left promiscuous mode [ 496.232239][ T2862] veth0_macvtap: left promiscuous mode [ 496.265063][ T2862] veth1_vlan: left promiscuous mode [ 496.284913][ T2862] veth0_vlan: left promiscuous mode [ 497.415250][ T5100] Bluetooth: hci2: command tx timeout [ 498.676304][ T9445] befs: (nullb0): No write support. Marking filesystem read-only [ 498.685808][ T9445] befs: (nullb0): invalid magic header [ 498.768732][ T2862] team0 (unregistering): Port device team_slave_1 removed [ 498.897385][ T2862] team0 (unregistering): Port device team_slave_0 removed [ 500.009421][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.061658][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.492627][ T9341] team0: Port device team_slave_0 added [ 500.546246][ T9341] team0: Port device team_slave_1 added [ 500.879850][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.928347][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.969107][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 500.979326][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.993133][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 500.995789][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.007930][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 501.013839][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.050778][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.051034][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 501.078487][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 501.090357][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 501.429452][ T9341] hsr_slave_0: entered promiscuous mode [ 501.453267][ T9341] hsr_slave_1: entered promiscuous mode [ 501.462381][ T9341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.501404][ T9341] Cannot create hsr debugfs directory [ 501.977355][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.984769][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.080532][ T2862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.344937][ T29] audit: type=1400 audit(1721233326.427:551): avc: denied { read } for pid=9495 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 502.406921][ T2862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.593276][ T9500] befs: (nullb0): No write support. Marking filesystem read-only [ 502.622830][ T9500] befs: (nullb0): invalid magic header [ 502.747040][ T2862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.951008][ T2862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.175399][ T5087] Bluetooth: hci3: command tx timeout [ 503.671610][ T9512] befs: (nullb0): No write support. Marking filesystem read-only [ 503.694058][ T9512] befs: (nullb0): invalid magic header [ 504.119328][ T9474] chnl_net:caif_netlink_parms(): no params data found [ 504.965850][ T29] audit: type=1400 audit(1721233329.057:552): avc: denied { unmount } for pid=7050 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 505.005160][ T2862] bridge_slave_0: left allmulticast mode [ 505.010850][ T2862] bridge_slave_0: left promiscuous mode [ 505.027168][ T2862] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.254833][ T5087] Bluetooth: hci3: command tx timeout [ 507.325331][ T2862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.334917][ T5087] Bluetooth: hci3: command tx timeout [ 507.353605][ T2862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.387671][ T2862] bond0 (unregistering): Released all slaves [ 507.429491][ T2862] bond1 (unregistering): Released all slaves [ 507.765078][ T2862] tipc: Left network mode [ 507.770237][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.781916][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.796036][ T9474] bridge_slave_0: entered allmulticast mode [ 507.804031][ T9474] bridge_slave_0: entered promiscuous mode [ 507.840788][ T9474] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.857534][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.865314][ T9474] bridge_slave_1: entered allmulticast mode [ 507.873250][ T9474] bridge_slave_1: entered promiscuous mode [ 507.916366][ T29] audit: type=1400 audit(1721233332.007:553): avc: denied { read } for pid=9564 comm="syz.0.1159" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 507.953957][ T5087] Bluetooth: hci5: unexpected event for opcode 0x042c [ 508.027102][ T29] audit: type=1400 audit(1721233332.007:554): avc: denied { open } for pid=9564 comm="syz.0.1159" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 508.102130][ T29] audit: type=1400 audit(1721233332.057:555): avc: denied { name_bind } for pid=9564 comm="syz.0.1159" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 508.219364][ T9474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.256327][ T9474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.336298][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 508.460529][ T9341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 508.575421][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 508.641345][ T9474] team0: Port device team_slave_0 added [ 508.652844][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 508.686642][ T9474] team0: Port device team_slave_1 added [ 508.692998][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.737363][ T9341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 508.753199][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.775620][ T9341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 508.786600][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 508.814848][ T5087] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 508.850282][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.898626][ T5087] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 508.921785][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 508.942234][ T8] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 508.951133][ T2862] hsr_slave_0: left promiscuous mode [ 508.970453][ T8] usb 1-1: Product: syz [ 508.980320][ T2862] hsr_slave_1: left promiscuous mode [ 508.990735][ T2862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.001456][ T2862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.031106][ T2862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.039242][ T2862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.107391][ T2862] veth1_macvtap: left promiscuous mode [ 509.113124][ T2862] veth0_macvtap: left promiscuous mode [ 509.119902][ T2862] veth1_vlan: left promiscuous mode [ 509.134591][ T2862] veth0_vlan: left promiscuous mode [ 509.211543][ T8] usb 1-1: usb_control_msg returned -32 [ 509.223044][ T8] usbtmc 1-1:16.0: can't read capabilities [ 509.414966][ T5087] Bluetooth: hci3: command tx timeout [ 511.194448][ T25] usb 1-1: USB disconnect, device number 14 [ 511.547355][ T9591] befs: (nullb0): No write support. Marking filesystem read-only [ 511.560945][ T2862] team0 (unregistering): Port device team_slave_1 removed [ 511.581536][ T9591] befs: (nullb0): invalid magic header [ 511.660161][ T2862] team0 (unregistering): Port device team_slave_0 removed [ 513.710364][ T9341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.880698][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.894919][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.932116][ T9474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.023654][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.053581][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.181681][ T9474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.749470][ T9474] hsr_slave_0: entered promiscuous mode [ 514.755484][ T9613] befs: (nullb0): No write support. Marking filesystem read-only [ 514.763822][ T9613] befs: (nullb0): invalid magic header [ 514.777489][ T9474] hsr_slave_1: entered promiscuous mode [ 514.917126][ T9474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.180693][ T9474] Cannot create hsr debugfs directory [ 516.702284][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 516.807393][ T9636] : renamed from bond0 (while UP) [ 517.071109][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.248749][ T5087] Bluetooth: hci6: unexpected event for opcode 0x0809 [ 517.312487][ T9341] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.409936][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.417333][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.502851][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.510137][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.122920][ T9474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 518.246300][ T9474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 518.309726][ T9474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 518.390226][ T9474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 518.572553][ T9671] befs: (nullb0): No write support. Marking filesystem read-only [ 518.582267][ T9671] befs: (nullb0): invalid magic header [ 518.696986][ T9670] befs: (nullb0): No write support. Marking filesystem read-only [ 518.737480][ T9670] befs: (nullb0): invalid magic header [ 519.098844][ T9474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.233152][ T9474] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.380715][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.387885][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.513330][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.520478][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.677695][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.811174][ T9474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 520.173800][ T9474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.655795][ T9706] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 521.766020][ T9718] befs: (nullb0): No write support. Marking filesystem read-only [ 521.786225][ T9718] befs: (nullb0): invalid magic header [ 521.918958][ T9474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.939978][ T9726] befs: (nullb0): No write support. Marking filesystem read-only [ 521.977491][ T9726] befs: (nullb0): invalid magic header [ 522.247239][ T9474] veth0_vlan: entered promiscuous mode [ 522.321902][ T9474] veth1_vlan: entered promiscuous mode [ 522.423163][ T9341] veth0_vlan: entered promiscuous mode [ 522.560229][ T9341] veth1_vlan: entered promiscuous mode [ 522.646530][ T9474] veth0_macvtap: entered promiscuous mode [ 522.729863][ T9474] veth1_macvtap: entered promiscuous mode [ 522.779323][ T9341] veth0_macvtap: entered promiscuous mode [ 522.818541][ T9341] veth1_macvtap: entered promiscuous mode [ 522.841704][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.863803][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.906579][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.951474][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.976739][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.020740][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.039352][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.070284][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.103318][ T9474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.171953][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.227772][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.260634][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.294783][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.324327][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.364544][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.385470][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.413132][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.451098][ T9474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.539123][ T9474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.569264][ T9474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.901392][ T9474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.937654][ T9474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.030464][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.069186][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.083025][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.277725][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.295359][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.309462][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.320620][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.712898][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.733648][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.744517][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.757077][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.785193][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.804852][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.836199][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.877848][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.925118][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.990862][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.051491][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.088753][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.112760][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.160113][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.189674][ T9773] befs: (nullb0): No write support. Marking filesystem read-only [ 525.198262][ T9773] befs: (nullb0): invalid magic header [ 525.218397][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.291488][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 525.340446][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1205'. [ 525.479753][ T9341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.511926][ T9341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.540810][ T9341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.569629][ T9341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.623841][ T29] audit: type=1400 audit(1721233349.707:556): avc: denied { getopt } for pid=9769 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.152152][ T5248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.176061][ T5248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.311885][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.358827][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.590689][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.636545][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.672127][ T5087] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 526.727007][ T5087] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 526.840491][ T7540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.881642][ T7540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.255937][ T9839] befs: (nullb0): No write support. Marking filesystem read-only [ 528.326602][ T9839] befs: (nullb0): invalid magic header [ 528.394194][ T5087] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 528.453791][ T5087] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 528.472594][ T5087] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 528.704348][ T9843] binder: 9842:9843 ioctl c00c620f 20000340 returned -22 [ 528.827577][ T9843] veth0_vlan: entered allmulticast mode [ 529.035673][ T9852] veth0_vlan: left promiscuous mode [ 529.087302][ T9852] veth0_vlan: entered promiscuous mode [ 529.604773][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 529.974747][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 530.273353][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 530.322089][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 530.679349][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 530.743415][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 530.826615][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.844874][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 530.868285][ T9] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 530.879474][ T9] usb 5-1: Product: syz [ 531.246090][ T9] usb 5-1: usb_control_msg returned -32 [ 531.321696][ T9] usbtmc 5-1:16.0: can't read capabilities [ 531.726173][ T9882] ptrace attach of "./syz-executor exec"[7050] was attempted by "./syz-executor exec"[9882] [ 531.726625][ T9884] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 532.486974][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 532.567095][ T29] audit: type=1400 audit(1721233356.637:557): avc: denied { unmount } for pid=5531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 532.595774][ T9897] befs: (nullb0): No write support. Marking filesystem read-only [ 532.612370][ T9897] befs: (nullb0): invalid magic header [ 533.858816][ T5180] usb 5-1: USB disconnect, device number 14 [ 534.237853][ T9917] binder: 9916:9917 ioctl c00c620f 20000340 returned -22 [ 534.370058][ T9917] veth0_vlan: left promiscuous mode [ 534.405182][ T9917] veth0_vlan: entered promiscuous mode [ 534.574099][ T9930] befs: (nullb0): No write support. Marking filesystem read-only [ 534.615223][ T9930] befs: (nullb0): invalid magic header [ 536.709976][ T9945] befs: (nullb0): No write support. Marking filesystem read-only [ 536.718964][ T9945] befs: (nullb0): invalid magic header [ 537.619405][ T5087] Bluetooth: hci1: unexpected event for opcode 0x042c [ 537.802111][ T9952] befs: (nullb0): No write support. Marking filesystem read-only [ 537.816570][ T9952] befs: (nullb0): invalid magic header [ 538.018153][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 538.224819][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 538.240896][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 538.258188][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.269983][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.294348][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.307437][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.386957][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.405343][ T8] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 538.422116][ T8] usb 4-1: Product: syz [ 538.817790][ T8] usb 4-1: usb_control_msg returned -32 [ 538.970268][ T8] usbtmc 4-1:16.0: can't read capabilities [ 540.054713][ T9982] befs: (nullb0): No write support. Marking filesystem read-only [ 540.062951][ T9982] befs: (nullb0): invalid magic header [ 540.154924][ T9984] netlink: 'syz.0.1265': attribute type 10 has an invalid length. [ 540.189775][ T9984] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 541.035340][ T5169] usb 4-1: USB disconnect, device number 15 [ 541.082344][ T5100] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 541.370555][ T5100] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 541.435642][ T5100] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 542.134992][ T5100] Bluetooth: hci5: command 0x0406 tx timeout [ 542.763752][T10003] binder: 10001:10003 ioctl c00c620f 20000340 returned -22 [ 543.125653][T10003] veth0_vlan: left promiscuous mode [ 543.165574][T10003] veth0_vlan: entered promiscuous mode [ 544.912388][T10024] befs: (nullb0): No write support. Marking filesystem read-only [ 544.956201][T10024] befs: (nullb0): invalid magic header [ 545.137047][T10027] binder: 10026:10027 ioctl c00c620f 20000340 returned -22 [ 545.293266][T10031] FAULT_INJECTION: forcing a failure. [ 545.293266][T10031] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 545.424927][T10031] CPU: 0 PID: 10031 Comm: syz.0.1282 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 545.434752][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 545.444801][T10031] Call Trace: [ 545.448072][T10031] [ 545.450987][T10031] dump_stack_lvl+0x16c/0x1f0 [ 545.455680][T10031] should_fail_ex+0x497/0x5b0 [ 545.460376][T10031] ? fs_reclaim_acquire+0xae/0x160 [ 545.465478][T10031] __should_fail_alloc_page+0xe7/0x130 [ 545.471016][T10031] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 545.477168][T10031] __alloc_pages_noprof+0x194/0x2460 [ 545.482443][T10031] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 545.488157][T10031] ? rcu_is_watching+0x12/0xc0 [ 545.492908][T10031] ? trace_kmalloc+0x2d/0xe0 [ 545.497483][T10031] ? kmalloc_node_track_caller_noprof+0x22d/0x430 [ 545.503892][T10031] ? __alloc_skb+0x164/0x380 [ 545.508495][T10031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 545.514380][T10031] ? policy_nodemask+0xea/0x4e0 [ 545.519225][T10031] alloc_pages_mpol_noprof+0x275/0x610 [ 545.524688][T10031] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 545.530662][T10031] ? unwind_next_frame+0x51/0x23a0 [ 545.535765][T10031] ? __orc_find+0x104/0x130 [ 545.540259][T10031] ? stack_access_ok+0xf9/0x270 [ 545.545107][T10031] ? __ia32_sys_delete_module+0x30/0x70 [ 545.550658][T10031] ? hlock_class+0x4e/0x130 [ 545.555158][T10031] ? mark_lock+0xb5/0xc60 [ 545.559567][T10031] alloc_skb_with_frags+0x24b/0x710 [ 545.564762][T10031] sock_alloc_send_pskb+0x7f1/0x980 [ 545.569974][T10031] ? __pfx___lock_acquire+0x10/0x10 [ 545.575164][T10031] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 545.580899][T10031] ? hlock_class+0x4e/0x130 [ 545.585402][T10031] ? __lock_acquire+0xc5d/0x3b30 [ 545.590348][T10031] tun_get_user+0xd62/0x3c30 [ 545.594956][T10031] ? __pfx_tun_get_user+0x10/0x10 [ 545.599978][T10031] ? find_held_lock+0x2d/0x110 [ 545.604760][T10031] ? __pfx_lock_release+0x10/0x10 [ 545.609799][T10031] tun_chr_write_iter+0xe8/0x210 [ 545.614738][T10031] vfs_write+0x6b6/0x1140 [ 545.619058][T10031] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 545.624596][T10031] ? __pfx_vfs_write+0x10/0x10 [ 545.629349][T10031] ? __fget_files+0x256/0x400 [ 545.634013][T10031] ? __fget_light+0x173/0x210 [ 545.638687][T10031] ksys_write+0x12f/0x260 [ 545.643005][T10031] ? __pfx_ksys_write+0x10/0x10 [ 545.647846][T10031] do_syscall_64+0xcd/0x250 [ 545.652341][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.658310][T10031] RIP: 0033:0x7f9f56b7461f [ 545.662712][T10031] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 545.682311][T10031] RSP: 002b:00007f9f565ff010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 545.690718][T10031] RAX: ffffffffffffffda RBX: 00007f9f56d03f60 RCX: 00007f9f56b7461f [ 545.698681][T10031] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 545.706637][T10031] RBP: 00007f9f565ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 545.714595][T10031] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 545.722552][T10031] R13: 000000000000000b R14: 00007f9f56d03f60 R15: 00007ffedf891508 [ 545.730513][T10031] [ 545.813731][T10027] veth0_vlan: left promiscuous mode [ 545.826445][T10027] veth0_vlan: entered promiscuous mode [ 546.167230][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 546.560033][ T5100] Bluetooth: hci3: link tx timeout [ 546.565867][ T5100] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 547.333871][T10048] CUSE: unknown device info "Pt"" [ 547.343729][T10048] CUSE: DEVNAME unspecified [ 547.442307][T10042] Bluetooth: hci6: unexpected event for opcode 0x0809 [ 547.482828][T10048] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1286'. [ 548.683853][T10070] befs: (nullb0): No write support. Marking filesystem read-only [ 548.701088][T10070] befs: (nullb0): invalid magic header [ 548.826489][T10067] befs: (nullb0): No write support. Marking filesystem read-only [ 548.829256][T10072] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1295'. [ 548.844575][T10067] befs: (nullb0): invalid magic header [ 548.864758][T10071] binder: 10068:10071 ioctl c00c620f 20000340 returned -22 [ 549.014960][ T5100] Bluetooth: hci3: command 0x0406 tx timeout [ 549.161081][T10071] veth0_vlan: left promiscuous mode [ 549.176177][T10071] veth0_vlan: entered promiscuous mode [ 550.793636][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1299'. [ 552.172585][T10097] syz.3.1302 (10097): drop_caches: 2 [ 552.842179][T10105] fuse: Bad value for 'fd' [ 553.974804][T10119] iso9660: Unknown parameter '0xffffffffffffffff' [ 556.599716][T10134] befs: (nullb0): No write support. Marking filesystem read-only [ 556.615090][T10134] befs: (nullb0): invalid magic header [ 557.778593][ T5141] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 558.096428][ T5141] usb 3-1: Using ep0 maxpacket: 16 [ 558.150054][ T5141] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.294276][ T5141] usb 3-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 558.345809][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.353855][ T5141] usb 3-1: Product: syz [ 558.409640][ T5141] usb 3-1: Manufacturer: syz [ 558.414287][ T5141] usb 3-1: SerialNumber: syz [ 558.449156][ T5141] usb 3-1: config 0 descriptor?? [ 559.354912][ T5169] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 559.946331][ T5141] usb 3-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 560.008793][ T5141] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 560.039366][ T5141] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 560.121162][ T5141] usb 3-1: media controller created [ 560.135098][ T5169] usb 1-1: Using ep0 maxpacket: 8 [ 560.150086][ T5169] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 560.174714][ T5169] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.198994][T10163] vcan1: entered allmulticast mode [ 560.206801][ T5169] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 560.247454][ T5169] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 560.266015][ T5169] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.304566][ T5169] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 560.333021][ T5169] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 560.366341][ T5169] usb 1-1: Product: syz [ 560.372829][ T5141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.408398][T10163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.731961][ T5169] usb 1-1: usb_control_msg returned -32 [ 560.740654][ T5169] usbtmc 1-1:16.0: can't read capabilities [ 560.751182][T10163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.782491][ T5141] usb 3-1: selecting invalid altsetting 2 [ 560.802981][ T5141] set interface failed [ 560.803013][ T5141] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 560.822882][ T5141] error writing reg: 0xff, val: 0x00 [ 561.576513][ T5141] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 561.699443][T10163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.706995][ T5141] usb 3-1: USB disconnect, device number 21 [ 562.742151][ T5136] usb 1-1: USB disconnect, device number 15 [ 563.418620][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.429819][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.038664][T10207] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1335'. [ 565.269404][T10213] befs: (nullb0): No write support. Marking filesystem read-only [ 565.279678][T10213] befs: (nullb0): invalid magic header [ 565.550753][ T29] audit: type=1400 audit(1721233389.637:558): avc: denied { getopt } for pid=10214 comm="syz.4.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 567.038808][T10216] netlink: 'syz.3.1338': attribute type 10 has an invalid length. [ 567.208311][T10216] : (slave netdevsim0): Enslaving as an active interface with an up link [ 567.255314][ T5100] Bluetooth: hci1: command 0x0406 tx timeout [ 567.285618][T10227] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1342'. [ 567.550860][ T29] audit: type=1400 audit(1721233391.637:559): avc: denied { map } for pid=10212 comm="syz.3.1338" path="socket:[30358]" dev="sockfs" ino=30358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 567.862255][ T29] audit: type=1400 audit(1721233391.667:560): avc: denied { read } for pid=10212 comm="syz.3.1338" path="socket:[30358]" dev="sockfs" ino=30358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 570.649666][T10254] befs: (nullb0): No write support. Marking filesystem read-only [ 570.742075][T10254] befs: (nullb0): invalid magic header [ 572.373451][T10270] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1353'. [ 572.630865][T10275] befs: (nullb0): No write support. Marking filesystem read-only [ 572.643475][T10275] befs: (nullb0): invalid magic header [ 576.084869][ T5137] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 576.287950][ T5137] usb 5-1: Using ep0 maxpacket: 16 [ 576.314118][ T5137] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 576.351443][ T5100] Bluetooth: hci3: unexpected event for opcode 0x042c [ 576.365652][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 576.384118][ T5137] usb 5-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 576.417146][ T5137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.446279][ T5137] usb 5-1: Product: syz [ 576.481735][ T5137] usb 5-1: Manufacturer: syz [ 576.502186][ T5137] usb 5-1: SerialNumber: syz [ 576.542268][ T5137] usb 5-1: config 0 descriptor?? [ 576.601761][ T5137] usb 5-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 576.664537][ T5137] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 576.709398][ T5137] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 576.763366][ T5137] usb 5-1: media controller created [ 576.775379][ T5180] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 576.926570][ T5137] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.014494][T10318] bridge_slave_1: left allmulticast mode [ 577.024985][ T5180] usb 3-1: Using ep0 maxpacket: 8 [ 577.026982][T10318] bridge_slave_1: left promiscuous mode [ 577.046197][ T5137] usb 5-1: selecting invalid altsetting 2 [ 577.058238][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.066918][ T5180] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 577.077864][ T5137] set interface failed [ 577.077966][ T5137] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 577.110008][ T5180] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.113896][ T5137] error writing reg: 0xff, val: 0x00 [ 577.157026][ T5180] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.212808][ T5180] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.254850][ T5180] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.308488][ T5180] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 577.364322][ T5180] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 577.544107][ T5137] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 577.555896][ T5180] usb 3-1: Product: syz [ 577.581266][T10325] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1368'. [ 577.598705][ T5137] usb 5-1: USB disconnect, device number 15 [ 577.802561][ T5180] usb 3-1: usb_control_msg returned -32 [ 577.818300][ T5180] usbtmc 3-1:16.0: can't read capabilities [ 578.652725][T10331] befs: (nullb0): No write support. Marking filesystem read-only [ 578.665772][T10331] befs: (nullb0): invalid magic header [ 578.681966][T10332] befs: (nullb0): No write support. Marking filesystem read-only [ 578.706175][T10332] befs: (nullb0): invalid magic header [ 580.183373][ T25] usb 3-1: USB disconnect, device number 22 [ 580.593525][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 580.701396][T10359] : renamed from bond0 (while UP) [ 580.905404][ T5169] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 581.339339][T10363] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1379'. [ 581.394771][ T5169] usb 3-1: Using ep0 maxpacket: 16 [ 581.403956][ T5169] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 581.429891][ T5169] usb 3-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 581.471378][ T5169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.486698][ T5169] usb 3-1: Product: syz [ 581.494013][ T5169] usb 3-1: Manufacturer: syz [ 581.502488][ T5169] usb 3-1: SerialNumber: syz [ 581.523250][ T5169] usb 3-1: config 0 descriptor?? [ 581.532658][ T5169] usb 3-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 581.561017][ T5169] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 581.577297][ T5169] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 581.586518][ T5169] usb 3-1: media controller created [ 581.625140][ T5169] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.707771][ T5169] usb 3-1: selecting invalid altsetting 2 [ 581.713825][ T5169] set interface failed [ 581.713987][ T5169] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 581.718145][ T5141] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 581.753467][ T5169] error writing reg: 0xff, val: 0x00 [ 581.872196][T10371] bridge_slave_1: left allmulticast mode [ 581.874508][ T5169] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 581.965443][T10371] bridge_slave_1: left promiscuous mode [ 581.971395][T10371] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.024790][ T5141] usb 4-1: Using ep0 maxpacket: 16 [ 582.044506][ T5141] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.083094][ T5141] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 582.114196][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.136199][ T5141] usb 4-1: Product: syz [ 582.144041][ T5141] usb 4-1: Manufacturer: syz [ 582.341348][ T5141] usb 4-1: SerialNumber: syz [ 582.350234][ T5141] usb 4-1: config 0 descriptor?? [ 582.357845][ T5141] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 582.391027][ T5141] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 582.588466][ T5141] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 582.597192][ T5141] usb 4-1: media controller created [ 582.923597][ T5141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.437696][ T1166] usb 3-1: USB disconnect, device number 23 [ 583.443611][ T5141] usb 4-1: selecting invalid altsetting 2 [ 583.443636][ T5141] set interface failed [ 583.443656][ T5141] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 583.485512][ T5100] Bluetooth: hci6: unexpected event for opcode 0x042c [ 583.495762][ T5141] error writing reg: 0xff, val: 0x00 [ 583.606513][ T5141] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 583.925195][ T5169] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 583.981423][ T5141] usb 4-1: USB disconnect, device number 16 [ 584.144965][ T5169] usb 2-1: Using ep0 maxpacket: 8 [ 584.174818][ T5169] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 584.196122][ T5169] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 584.241522][ T5169] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 584.256219][ T5169] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 584.269300][ T5169] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.307847][ T5169] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 584.341527][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 584.389437][ T5169] usb 2-1: Product: syz [ 584.636801][ T5169] usb 2-1: usb_control_msg returned -32 [ 584.656474][ T5169] usbtmc 2-1:16.0: can't read capabilities [ 584.913960][ T5100] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 586.063118][T10409] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1394'. [ 587.076180][ T9] usb 2-1: USB disconnect, device number 12 [ 587.534961][ T5141] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 587.815077][ T5141] usb 5-1: Using ep0 maxpacket: 16 [ 587.837673][ T5141] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 587.911864][ T5141] usb 5-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 587.924276][ T5141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.964569][ T5141] usb 5-1: Product: syz [ 588.034698][ T5141] usb 5-1: Manufacturer: syz [ 588.069099][ T5141] usb 5-1: SerialNumber: syz [ 588.082339][ T5141] usb 5-1: config 0 descriptor?? [ 588.099092][ T5141] usb 5-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 588.158999][ T29] audit: type=1400 audit(1721233412.247:561): avc: denied { create } for pid=10423 comm="syz.2.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 588.247696][ T5141] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 588.337961][ T5141] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 588.362391][ T5141] usb 5-1: media controller created [ 588.570780][ T5141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.002369][ T5141] usb 5-1: selecting invalid altsetting 2 [ 589.021140][ T5141] set interface failed [ 589.021172][ T5141] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 589.050034][ T5141] error writing reg: 0xff, val: 0x00 [ 590.053215][ T5141] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 590.296891][ T5141] usb 5-1: USB disconnect, device number 16 [ 590.589375][T10449] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1408'. [ 591.134568][ T5100] Bluetooth: hci3: unexpected event for opcode 0x042c [ 591.594860][ T5141] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 591.660532][T10459] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1410'. [ 591.854843][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 591.867369][ T5141] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 591.876086][ T5141] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.985338][ T5141] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 592.047249][ T5141] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 592.174383][ T5141] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.229775][ T5141] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 592.239506][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 592.250122][ T5141] usb 3-1: Product: syz [ 592.465051][ T5141] usb 3-1: usb_control_msg returned -32 [ 592.500587][ T5141] usbtmc 3-1:16.0: can't read capabilities [ 593.134828][ T1166] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 593.399172][T10486] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1420'. [ 593.614702][ T1166] usb 4-1: Using ep0 maxpacket: 16 [ 593.645627][ T1166] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.677423][ T1166] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 593.691469][ T1166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.703898][ T1166] usb 4-1: Product: syz [ 593.709805][ T1166] usb 4-1: Manufacturer: syz [ 593.715146][ T1166] usb 4-1: SerialNumber: syz [ 593.744525][ T1166] usb 4-1: config 0 descriptor?? [ 593.780222][ T1166] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 593.812366][ T1166] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 593.831832][ T1166] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 593.842827][ T1166] usb 4-1: media controller created [ 594.165199][ T25] usb 3-1: USB disconnect, device number 24 [ 594.180921][ T1166] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 595.362023][ T1166] usb 4-1: selecting invalid altsetting 2 [ 595.974685][ T1166] set interface failed [ 595.974721][ T1166] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 596.014867][ T1166] error writing reg: 0xff, val: 0x00 [ 596.157817][ T1166] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 596.227382][ T1166] usb 4-1: USB disconnect, device number 17 [ 596.946118][T10526] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1432'. [ 597.240562][T10521] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1431'. [ 597.746458][ T5141] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 597.953838][ T5100] Bluetooth: hci3: link tx timeout [ 597.959204][ T5100] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 598.074783][ T5141] usb 1-1: Using ep0 maxpacket: 8 [ 598.175704][ T5141] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 598.377741][ T5141] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.434828][ T5141] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 598.558875][ T5141] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.600798][ T5141] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.788920][ T5141] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 598.824024][T10536] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 598.866295][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 598.877339][ T5141] usb 1-1: Product: syz [ 599.788311][ T5141] usb 1-1: usb_control_msg returned -71 [ 599.793987][ T5141] usbtmc 1-1:16.0: can't read capabilities [ 599.861470][ T5141] usb 1-1: USB disconnect, device number 16 [ 599.974713][ T5100] Bluetooth: hci3: command 0x0406 tx timeout [ 601.060744][ T5141] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 601.273372][ T5141] usb 1-1: Using ep0 maxpacket: 16 [ 601.297021][ T5141] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.343628][ T5141] usb 1-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 601.358452][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.379958][ T5141] usb 1-1: Product: syz [ 601.384141][ T5141] usb 1-1: Manufacturer: syz [ 601.392166][ T5141] usb 1-1: SerialNumber: syz [ 601.410526][ T5141] usb 1-1: config 0 descriptor?? [ 601.452534][ T5141] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 601.502344][ T5141] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 601.543881][ T5141] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 601.574286][ T5141] usb 1-1: media controller created [ 601.710686][ T5141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.903611][ T5141] usb 1-1: selecting invalid altsetting 2 [ 601.921253][ T5141] set interface failed [ 601.921287][ T5141] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 601.939530][T10564] iso9660: Unknown parameter '0xffffffffffffffff' [ 601.948408][ T5141] error writing reg: 0xff, val: 0x00 [ 602.207478][T10567] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1445'. [ 602.422439][ T5141] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 602.435189][ T5141] usb 1-1: USB disconnect, device number 17 [ 603.852909][T10579] netlink: 'syz.2.1449': attribute type 1 has an invalid length. [ 604.655219][T10042] Bluetooth: hci6: unexpected event for opcode 0x042c [ 605.306405][ T5141] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 605.514785][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 605.525718][ T5141] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 605.543167][ T5141] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 605.566623][ T5141] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 605.571880][ T29] audit: type=1400 audit(1721233429.657:562): avc: denied { create } for pid=10584 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 605.594665][ T5141] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 605.625948][ T5141] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.639098][ T29] audit: type=1400 audit(1721233429.657:563): avc: denied { connect } for pid=10584 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 605.870241][ T5141] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 605.884714][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 605.893325][ T5141] usb 2-1: Product: syz [ 606.246639][ T29] audit: type=1400 audit(1721233430.087:564): avc: denied { write } for pid=10584 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 606.646688][ T5141] usb 2-1: usb_control_msg returned -32 [ 606.662735][ T5141] usbtmc 2-1:16.0: can't read capabilities [ 606.821539][ T29] audit: type=1400 audit(1721233430.907:565): avc: denied { accept } for pid=10584 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 607.707925][T10609] CUSE: unknown device info "Pt"" [ 607.713632][T10609] CUSE: DEVNAME unspecified [ 607.735245][T10609] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1458'. [ 607.975051][T10042] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 608.181462][T10042] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 608.902623][ T5087] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 608.967616][ T1166] usb 2-1: USB disconnect, device number 13 [ 609.064047][T10042] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 609.120445][T10623] netlink: 'syz.3.1463': attribute type 10 has an invalid length. [ 609.773286][T10641] iso9660: Unknown parameter '0xffffffffffffffff' [ 612.009010][T10661] CUSE: unknown device info "Pt"" [ 612.044743][T10661] CUSE: DEVNAME unspecified [ 612.220605][T10661] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1473'. [ 613.264805][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 613.476566][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 613.501695][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 613.535145][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 613.546971][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 613.557947][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.568606][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.589073][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 613.614773][ T8] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 613.625574][T10673] netlink: 'syz.2.1477': attribute type 10 has an invalid length. [ 613.633542][ T8] usb 1-1: Product: syz [ 613.725833][T10673] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 613.859083][ T8] usb 1-1: usb_control_msg returned -32 [ 613.875474][ T8] usbtmc 1-1:16.0: can't read capabilities [ 614.133592][T10042] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 614.166924][T10042] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 615.371444][T10704] CUSE: unknown device info "Pt"" [ 615.376851][T10704] CUSE: DEVNAME unspecified [ 615.396699][T10704] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1487'. [ 615.574842][ T5100] Bluetooth: hci3: command 0x0406 tx timeout [ 616.019604][T10711] iso9660: Unknown parameter '0xffffffffffffffff' [ 616.088581][ T5141] usb 1-1: USB disconnect, device number 18 [ 616.983791][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1494'. [ 617.048002][T10726] : renamed from bond0 (while UP) [ 617.117775][T10723] befs: (nullb0): No write support. Marking filesystem read-only [ 617.167601][T10723] befs: (nullb0): invalid magic header [ 617.655252][T10042] Bluetooth: hci3: command 0x0406 tx timeout [ 620.087702][T10751] CUSE: unknown device info "Pt"" [ 620.092854][T10751] CUSE: DEVNAME unspecified [ 620.198400][T10751] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1501'. [ 620.524924][ T5180] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 621.344895][ T5180] usb 1-1: Using ep0 maxpacket: 8 [ 621.352310][ T5180] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 621.362729][ T5180] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 621.385774][ T5180] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 621.422186][ T5180] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 621.439996][ T5180] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.455527][ T5180] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 621.469871][ T5180] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 621.491072][ T5180] usb 1-1: Product: syz [ 621.567594][T10775] befs: (nullb0): No write support. Marking filesystem read-only [ 621.597485][T10775] befs: (nullb0): invalid magic header [ 621.745507][ T5180] usb 1-1: usb_control_msg returned -32 [ 621.754544][ T5180] usbtmc 1-1:16.0: can't read capabilities [ 621.817120][T10042] Bluetooth: hci2: command 0x0406 tx timeout [ 622.806247][T10795] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 623.293572][ T5137] usb 1-1: USB disconnect, device number 19 [ 623.910871][T10808] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1519'. [ 624.633569][ T5100] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 624.638428][ T5100] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 624.701785][ T5100] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 624.709680][ T5100] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 624.843935][ T5100] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 624.857915][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.866182][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.743440][T10826] netlink: 'syz.4.1524': attribute type 2 has an invalid length. [ 625.755481][T10826] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1524'. [ 626.045874][T10829] CUSE: unknown device info "Pt"" [ 626.057510][T10829] CUSE: DEVNAME unspecified [ 626.101077][T10829] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1525'. [ 627.424894][T10843] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 629.986878][T10871] netlink: 'syz.1.1536': attribute type 2 has an invalid length. [ 630.035196][T10871] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1536'. [ 630.104216][T10873] befs: (nullb0): No write support. Marking filesystem read-only [ 630.120947][T10875] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1537'. [ 630.122460][T10873] befs: (nullb0): invalid magic header [ 631.474540][ T5100] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 631.487786][ T5100] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 633.297699][T10894] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 633.448793][ T5100] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 633.453670][T10896] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 633.705151][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 633.845471][T10908] netlink: 'syz.0.1550': attribute type 2 has an invalid length. [ 633.853252][T10908] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1550'. [ 633.867205][T10907] CUSE: unknown device info "Pt"" [ 633.915418][T10907] CUSE: DEVNAME unspecified [ 633.955976][T10910] befs: (nullb0): No write support. Marking filesystem read-only [ 633.964019][T10907] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1549'. [ 633.994919][T10910] befs: (nullb0): invalid magic header [ 634.099244][T10918] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1553'. [ 634.423957][T10921] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1554'. [ 634.770387][T10933] binder: 10932:10933 ioctl c00c620f 20000340 returned -22 [ 634.940813][T10938] veth0_vlan: left promiscuous mode [ 634.948103][T10938] veth0_vlan: entered promiscuous mode [ 635.066495][T10042] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 635.084275][T10042] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 636.089188][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 636.224822][T10954] netlink: 'syz.0.1563': attribute type 2 has an invalid length. [ 636.259763][T10954] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1563'. [ 636.426705][T10956] CUSE: unknown device info "Pt"" [ 636.476988][T10956] CUSE: DEVNAME unspecified [ 636.579091][T10956] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1564'. [ 636.825881][T10960] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1565'. [ 637.222577][T10962] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1566'. [ 638.005033][T10042] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 638.014837][ T5141] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 643.311787][ T5141] usb 1-1: unable to get BOS descriptor set [ 643.388612][ T5141] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 643.480428][ T5141] usb 1-1: can't read configurations, error -71 [ 643.718033][T10980] befs: (nullb0): No write support. Marking filesystem read-only [ 643.755171][T10980] befs: (nullb0): invalid magic header [ 643.793699][T10983] netlink: 'syz.1.1574': attribute type 2 has an invalid length. [ 643.816718][T10983] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1574'. [ 644.525221][T10990] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1577'. [ 644.561992][T10996] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1576'. [ 645.064300][T11002] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 645.828084][ T8] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 646.058431][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 646.075766][ T8] usb 5-1: config index 0 descriptor too short (expected 46372, got 36) [ 646.084435][ T8] usb 5-1: config 148 has too many interfaces: 182, using maximum allowed: 32 [ 646.097638][ T8] usb 5-1: config 148 has an invalid descriptor of length 179, skipping remainder of the config [ 646.109355][ T8] usb 5-1: config 148 has 0 interfaces, different from the descriptor's value: 182 [ 646.149278][ T8] usb 5-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.40 [ 646.164405][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.172616][ T8] usb 5-1: SerialNumber: 鋏슣 컓鞤昜ኚ誽젋Қ嵦曂熨璊׎ [ 646.412701][ T8] usb 5-1: USB disconnect, device number 17 [ 651.717234][T10042] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 651.748823][T10042] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 651.800551][T10042] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 651.883758][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 652.660194][T11042] CUSE: unknown device info "Pt"" [ 652.710146][T11042] CUSE: DEVNAME unspecified [ 652.712989][T11046] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1591'. [ 653.344882][ T8] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 653.385670][T11057] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1595'. [ 653.546936][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 653.569721][ T8] usb 1-1: config index 0 descriptor too short (expected 46372, got 36) [ 653.586774][ T8] usb 1-1: config 148 has too many interfaces: 182, using maximum allowed: 32 [ 653.596881][ T8] usb 1-1: config 148 has an invalid descriptor of length 179, skipping remainder of the config [ 653.607619][ T8] usb 1-1: config 148 has 0 interfaces, different from the descriptor's value: 182 [ 653.643275][ T8] usb 1-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.40 [ 653.676278][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.684759][ T8] usb 1-1: SerialNumber: 鋏슣 컓鞤昜ኚ誽젋Қ嵦曂熨璊׎ [ 653.925187][ T8] usb 1-1: USB disconnect, device number 22 [ 656.446939][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 656.496017][T11092] CUSE: unknown device info "Pt"" [ 656.546769][T11092] CUSE: DEVNAME unspecified [ 656.846605][T11092] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1605'. [ 656.978361][T11099] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1606'. [ 657.079126][ T5141] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 657.274669][ T5141] usb 4-1: Using ep0 maxpacket: 16 [ 657.291855][ T5141] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.313273][ T5141] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 657.334818][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.342857][ T5141] usb 4-1: Product: syz [ 657.347641][ T5141] usb 4-1: Manufacturer: syz [ 657.353726][ T5141] usb 4-1: SerialNumber: syz [ 657.362567][ T5141] usb 4-1: config 0 descriptor?? [ 657.377145][ T5141] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 657.393737][ T5141] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 657.404534][ T5141] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 657.412285][ T5141] usb 4-1: media controller created [ 657.437424][ T5141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 657.483162][ T5141] usb 4-1: selecting invalid altsetting 2 [ 657.495903][ T5141] set interface failed [ 657.495932][ T5141] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 657.514731][ T5141] error writing reg: 0xff, val: 0x00 [ 657.568787][ T5141] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 657.754838][ T5136] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 657.936122][ T8] usb 4-1: USB disconnect, device number 18 [ 657.970059][ T5136] usb 3-1: not running at top speed; connect to a high speed hub [ 657.999161][ T5136] usb 3-1: config index 0 descriptor too short (expected 46372, got 36) [ 658.029956][ T5136] usb 3-1: config 148 has too many interfaces: 182, using maximum allowed: 32 [ 658.068727][ T5136] usb 3-1: config 148 has an invalid descriptor of length 179, skipping remainder of the config [ 658.111878][ T5136] usb 3-1: config 148 has 0 interfaces, different from the descriptor's value: 182 [ 658.197053][T10042] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 658.208131][ T5136] usb 3-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.40 [ 658.262161][ T5136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.262918][T10042] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 658.301707][ T5136] usb 3-1: SerialNumber: 鋏슣 컓鞤昜ኚ誽젋Қ嵦曂熨璊׎ [ 658.582573][ T5136] usb 3-1: USB disconnect, device number 25 [ 661.100739][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1617'. [ 661.311844][T11132] CUSE: unknown device info "Pt"" [ 661.321710][T11132] CUSE: DEVNAME unspecified [ 661.346830][T11132] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1618'. [ 662.014752][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 662.847080][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 662.867793][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 662.905815][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 663.080149][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.088376][ T8] usb 5-1: Product: syz [ 663.092622][ T8] usb 5-1: Manufacturer: syz [ 663.097320][ T8] usb 5-1: SerialNumber: syz [ 663.110131][ T8] usb 5-1: config 0 descriptor?? [ 663.128876][ T8] usb 5-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 663.167359][ T8] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 663.200984][ T8] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 663.224827][ T8] usb 5-1: media controller created [ 663.293587][T11155] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1624'. [ 663.320288][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 663.405852][ T8] usb 5-1: selecting invalid altsetting 2 [ 663.411757][ T8] set interface failed [ 663.411787][ T8] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 663.425476][ T8] error writing reg: 0xff, val: 0x00 [ 663.619316][ T8] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 663.849899][ T8] usb 5-1: USB disconnect, device number 18 [ 664.295524][ T5100] Bluetooth: hci3: command 0x0405 tx timeout [ 665.569559][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 665.832966][T11178] CUSE: unknown device info "Pt"" [ 665.868555][T11178] CUSE: DEVNAME unspecified [ 665.898936][ T5100] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 665.910816][ T5100] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 665.956272][T11178] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1632'. [ 667.249811][T11206] Bluetooth: MGMT ver 1.23 [ 667.656459][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 667.947051][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 668.236761][ T25] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 668.245179][ T25] usb 5-1: config 179 has no interface number 0 [ 668.255031][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 668.284324][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 668.324825][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 668.351646][ T25] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 668.398140][ T25] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 668.424664][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.477334][T11208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 668.674749][ T29] audit: type=1400 audit(1721233492.747:566): avc: denied { create } for pid=11222 comm="syz.0.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 668.721211][ T29] audit: type=1400 audit(1721233492.787:567): avc: denied { write } for pid=11222 comm="syz.0.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 669.238623][ T29] audit: type=1400 audit(1721233492.847:568): avc: denied { bind } for pid=11222 comm="syz.0.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 669.619337][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 669.627675][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 669.637838][ T1166] usb 5-1: USB disconnect, device number 19 [ 669.684715][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 670.724687][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 670.787767][ T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 670.873820][ T8] usb 4-1: config 179 has no interface number 0 [ 670.920478][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 671.078662][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 671.227079][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 671.413826][ T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 671.448689][ T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 671.469633][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.491178][T11221] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 671.657044][ T5169] usb 4-1: USB disconnect, device number 19 [ 671.657106][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 671.671339][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 671.826020][T11248] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1658'. [ 671.894988][T11248] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1658'. [ 672.815601][T11248] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 672.822254][T11248] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 672.831606][T11248] vhci_hcd vhci_hcd.0: Device attached [ 672.948786][T11262] vhci_hcd: connection closed [ 672.951110][ T1096] vhci_hcd: stop threads [ 672.970529][ T1096] vhci_hcd: release socket [ 672.985527][ T1096] vhci_hcd: disconnect device [ 673.034864][ T5169] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 673.246910][ T5169] usb 1-1: Using ep0 maxpacket: 32 [ 673.258777][ T5169] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 673.281296][ T5169] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 673.323007][ T5169] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 673.368280][ T5169] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 673.450372][ T5169] usb 1-1: config 0 interface 0 has no altsetting 0 [ 673.570148][ T5169] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 673.594649][ T5169] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 673.631525][ T5169] usb 1-1: Product: syz [ 673.635924][ T5169] usb 1-1: Manufacturer: syz [ 673.640620][ T5169] usb 1-1: SerialNumber: syz [ 673.670977][ T5169] usb 1-1: config 0 descriptor?? [ 674.095836][ T5169] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 674.156973][ T5169] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 674.211922][ T5169] usb 1-1: USB disconnect, device number 23 [ 674.259932][ T5169] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 675.100248][T11299] syz.3.1673: attempt to access beyond end of device [ 675.100248][T11299] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 675.154427][T11299] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 675.728546][T11319] syzkaller0: tun_chr_ioctl cmd 35108 [ 675.914702][T11318] Illegal XDP return value 4294967274 on prog (id 361) dev N/A, expect packet loss! [ 676.374956][T11326] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1684'. [ 676.406261][T11327] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1685'. [ 676.458067][T11327] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1685'. [ 677.350750][T11341] [ 677.353134][T11341] ================================================ [ 677.359640][T11341] WARNING: lock held when returning to user space! [ 677.366146][T11341] 6.10.0-syzkaller-04472-g51835949dda3 #0 Not tainted [ 677.372914][T11341] ------------------------------------------------ [ 677.379411][T11341] syz.3.1690/11341 is leaving the kernel with locks still held! [ 677.387046][T11341] 1 lock held by syz.3.1690/11341: [ 677.392164][T11341] #0: ffffffff8dbb15e0 (rcu_read_lock){....}-{1:2}, at: ns_ioctl+0x217/0x7b0 [ 677.444522][T11341] ------------[ cut here ]------------ [ 677.450017][T11341] Voluntary context switch within RCU read-side critical section! [ 677.450159][T11341] WARNING: CPU: 1 PID: 11341 at kernel/rcu/tree_plugin.h:330 rcu_note_context_switch+0xc5c/0x1ae0 [ 677.468613][T11341] Modules linked in: [ 677.472517][T11341] CPU: 1 PID: 11341 Comm: syz.3.1690 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 677.482340][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 677.492485][T11341] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 [ 677.498827][T11341] Code: 74 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 d9 91 58 0e 01 90 48 c7 c7 80 83 2e 8b e8 05 35 da ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 677.518470][T11341] RSP: 0000:ffffc900036cfce8 EFLAGS: 00010082 [ 677.524537][T11341] RAX: 0000000000000000 RBX: ffff8880b933fbc0 RCX: ffffc90008c19000 [ 677.532506][T11341] RDX: 0000000000040000 RSI: ffffffff81504576 RDI: 0000000000000001 [ 677.540500][T11341] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 677.548474][T11341] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888064331e00 [ 677.556445][T11341] R13: ffff888064331e00 R14: ffff888064331e00 R15: ffff8880b933ec80 [ 677.564448][T11341] FS: 00007f389dc7e6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 677.573378][T11341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.579960][T11341] CR2: 00007ffd7e262e18 CR3: 0000000079a54000 CR4: 00000000003506f0 [ 677.587929][T11341] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 677.595894][T11341] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 677.603862][T11341] Call Trace: [ 677.607135][T11341] [ 677.610061][T11341] ? show_regs+0x8c/0xa0 [ 677.614320][T11341] ? __warn+0xe5/0x3c0 [ 677.618389][T11341] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 677.624110][T11341] ? report_bug+0x3c0/0x580 [ 677.628629][T11341] ? handle_bug+0x3d/0x70 [ 677.632973][T11341] ? exc_invalid_op+0x17/0x50 [ 677.637668][T11341] ? asm_exc_invalid_op+0x1a/0x20 [ 677.642705][T11341] ? __warn_printk+0x1a6/0x350 [ 677.647484][T11341] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 677.653208][T11341] ? rcu_note_context_switch+0xc5b/0x1ae0 [ 677.658935][T11341] ? __wake_up_klogd.part.0+0x99/0xf0 [ 677.664317][T11341] ? rcu_is_watching+0x12/0xc0 [ 677.669087][T11341] ? schedule+0xe7/0x350 [ 677.673340][T11341] __schedule+0x291/0x5490 [ 677.677779][T11341] ? __pfx___schedule+0x10/0x10 [ 677.682725][T11341] ? __pfx__printk+0x10/0x10 [ 677.687326][T11341] ? trace_irq_disable.constprop.0+0x36/0x130 [ 677.693399][T11341] ? __pfx___schedule+0x10/0x10 [ 677.698263][T11341] ? rcu_is_watching+0x12/0xc0 [ 677.703046][T11341] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 677.709038][T11341] schedule+0xe7/0x350 [ 677.713118][T11341] irqentry_exit_to_user_mode+0xe4/0x280 [ 677.718771][T11341] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 677.724238][T11341] RIP: 0033:0x7f389cf75a99 [ 677.728656][T11341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.748270][T11341] RSP: 002b:00007f389dc7e048 EFLAGS: 00000246 [ 677.754334][T11341] RAX: fffffffffffffffd RBX: 00007f389d103f60 RCX: 00007f389cf75a99 [ 677.762321][T11341] RDX: 0000000000000000 RSI: 000000008004b709 RDI: 0000000000000003 [ 677.770298][T11341] RBP: 00007f389cfe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 677.778279][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.786248][T11341] R13: 000000000000000b R14: 00007f389d103f60 R15: 00007fff266cc308 [ 677.794228][T11341] [ 677.797243][T11341] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 677.804517][T11341] CPU: 1 PID: 11341 Comm: syz.3.1690 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 677.814323][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 677.824383][T11341] Call Trace: [ 677.827661][T11341] [ 677.830589][T11341] dump_stack_lvl+0x3d/0x1f0 [ 677.835197][T11341] panic+0x6f5/0x7a0 [ 677.839096][T11341] ? __pfx_panic+0x10/0x10 [ 677.843511][T11341] ? show_trace_log_lvl+0x363/0x500 [ 677.848728][T11341] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 677.854456][T11341] check_panic_on_warn+0xab/0xb0 [ 677.859395][T11341] __warn+0xf1/0x3c0 [ 677.863294][T11341] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 677.869017][T11341] report_bug+0x3c0/0x580 [ 677.873359][T11341] handle_bug+0x3d/0x70 [ 677.877517][T11341] exc_invalid_op+0x17/0x50 [ 677.882027][T11341] asm_exc_invalid_op+0x1a/0x20 [ 677.886901][T11341] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 [ 677.893235][T11341] Code: 74 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 d9 91 58 0e 01 90 48 c7 c7 80 83 2e 8b e8 05 35 da ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 677.912852][T11341] RSP: 0000:ffffc900036cfce8 EFLAGS: 00010082 [ 677.918925][T11341] RAX: 0000000000000000 RBX: ffff8880b933fbc0 RCX: ffffc90008c19000 [ 677.926897][T11341] RDX: 0000000000040000 RSI: ffffffff81504576 RDI: 0000000000000001 [ 677.934867][T11341] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 677.942833][T11341] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888064331e00 [ 677.950804][T11341] R13: ffff888064331e00 R14: ffff888064331e00 R15: ffff8880b933ec80 [ 677.958779][T11341] ? __warn_printk+0x1a6/0x350 [ 677.963563][T11341] ? rcu_note_context_switch+0xc5b/0x1ae0 [ 677.969285][T11341] ? __wake_up_klogd.part.0+0x99/0xf0 [ 677.974665][T11341] ? rcu_is_watching+0x12/0xc0 [ 677.979430][T11341] ? schedule+0xe7/0x350 [ 677.983682][T11341] __schedule+0x291/0x5490 [ 677.988105][T11341] ? __pfx___schedule+0x10/0x10 [ 677.992959][T11341] ? __pfx__printk+0x10/0x10 [ 677.997552][T11341] ? trace_irq_disable.constprop.0+0x36/0x130 [ 678.003622][T11341] ? __pfx___schedule+0x10/0x10 [ 678.008481][T11341] ? rcu_is_watching+0x12/0xc0 [ 678.013249][T11341] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 678.019241][T11341] schedule+0xe7/0x350 [ 678.023323][T11341] irqentry_exit_to_user_mode+0xe4/0x280 [ 678.028973][T11341] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 678.034445][T11341] RIP: 0033:0x7f389cf75a99 [ 678.038943][T11341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.058639][T11341] RSP: 002b:00007f389dc7e048 EFLAGS: 00000246 [ 678.064706][T11341] RAX: fffffffffffffffd RBX: 00007f389d103f60 RCX: 00007f389cf75a99 [ 678.072675][T11341] RDX: 0000000000000000 RSI: 000000008004b709 RDI: 0000000000000003 [ 678.080644][T11341] RBP: 00007f389cfe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 678.088698][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.096666][T11341] R13: 000000000000000b R14: 00007f389d103f60 R15: 00007fff266cc308 [ 678.104727][T11341] [ 678.107953][T11341] Kernel Offset: disabled [ 678.112265][T11341] Rebooting in 86400 seconds..